raptor-loop-hunt

(★ 209)

RAPTOR autonomous looping multi-altitude security vulnerability hunt — Claude Code skill

Owner Repos

fastjson-jsontype-rce-lab ★ 204

Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.

Python
CVE-2022-22963 ★ 115

CVE-2022-22963 PoC

Python
hikvision ★ 66

Hikvision log4j PoC

Python
mariadb-13-rce-lab ★ 62

MariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and raptor-loop-hunt.

Python
leaklens ★ 62

Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery

Go
CVE-2024-20931 ★ 61

CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839

File Explorer

ZIP Download
  • .gitignore
  • LICENSE
  • README.md
  • SKILL.md

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Link
Example

Command Glossary

Commands referenced in this DOCs, explained below.

🔍

eval

View Details ▼

Execute arguments as a single command in the current shell and return its result.

eval "{{echo foo}}"

Call `echo` with the "foo" argument:

eval "{{foo=bar}}"

Set a variable in the current shell:

🔍

git clone

View Details ▼

Clone an existing repository.

git clone {{remote_repository_location}} {{path/to/directory}}

Clone an existing repository into a new directory (the default directory is the repository name):

git clone --recursive {{remote_repository_location}}

Clone an existing repository and its submodules:

git clone {{[-n|--no-checkout]}} {{remote_repository_location}}

Clone only the `.git` directory of an existing repository:

// repository documentation