srcHunter
An open-source skill pack for AI-assisted penetration testing, containing offensive prompts, payload libraries, EDR bypass content, and a large collection of real-world vulnerability reports. It is intended to enhance the vulnerability discovery capabilities of large language models.
Timeline (last 90 days)
A Bilibili content creator shared a vulnerability-hunting workflow based on DeepSeek's Harness penetration testing mode combined with the srcHunter skill package.
The srcHunter skill package recommended by the author contains 19 attack-oriented prompts, 263 payload entries, EDR-bypass content, 2,887 real vulnerability reports from HackerOne, and 88,636 historical WooYun cases.
After installing the skill package, a manual page refresh is required to load the srcHunter skill.
In the demonstration, the AI decoded Base64 to recover the Behinder backdoor's connection password as "admin".
All Facts (4)
The srcHunter skill package recommended by the author contains 19 attack-oriented prompts, 263 payload entries, EDR-bypass content, 2,887 real vulnerability reports from HackerOne, and 88,636 historical WooYun cases.
50%UnverifiedAfter installing the skill package, a manual page refresh is required to load the srcHunter skill.
50%UnverifiedA Bilibili content creator shared a vulnerability-hunting workflow based on DeepSeek's Harness penetration testing mode combined with the srcHunter skill package.
50%UnverifiedIn the demonstration, the AI decoded Base64 to recover the Behinder backdoor's connection password as "admin".
50%