{"slug":"offensive-osint","title":"offensive-osint","summary":"Operational arsenal for authorized external red-team and bug-bounty recon. Concrete probes, wordlists, regexes, dorks, curl one-liners for: subdomain enum, GraphQL/Swagger/REST discovery, identity fabric (Entra/Okta/ADFS/Google/SAML/M365 deep — Teams/SharePoint/OneDrive), cloud b","platform":"Claude","tags":[],"authorName":"LLM Mart","authorSlug":"llm-mart","score":0,"source":"github","price":null,"verified":false,"createdAt":"2026-08-24T05:37:52.863822Z","repo":{"url":"https://github.com/elementalsouls/Claude-BugHunter","stars":4626,"forks":696,"license":"MIT","updatedAt":"2026-09-23T09:21:09Z"},"bodyHtml":"

offensive-osint skill

\n

The \"what to reach for\" operational arsenal for external red-team OSINT and bug-bounty reconnaissance.

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
FieldValue
Nameoffensive-osint
Version2.1
Lines~3,800
Top-level sections51
Subsections~135
Companion skillosint-methodology
\n

When this skill triggers

\n

Auto-triggers on prompts containing any of ~110 trigger phrases. Common ones:

\n\n

Full trigger list in the SKILL.md frontmatter.

\n

What's in it

\n

See the parent README's \"What's in the box\" table for the full §-by-§ breakdown.

\n

Highlights:

\n\n

Loading

\n
# Local Claude Code install\ncp SKILL.md ~/.claude/skills/offensive-osint/SKILL.md\ncp scripts/secret_scan.py ~/.claude/skills/offensive-osint/scripts/secret_scan.py\n\n# Or attach to a Claude.ai project / Claude API system prompt\n
\n

The full content lives in this SKILL.md (or in docs/full-skills/offensive-osint.SKILL.full.md if this file is the structured-outline variant).

\n

Helper script

\n

scripts/secret_scan.py — stdlib-only Python scanner mirroring the §17 secret-pattern catalog. Run standalone:

\n
python3 scripts/secret_scan.py path/to/repo/        # scan a directory tree\npython3 scripts/secret_scan.py file1 file2 file3    # scan specific files\ncat my.log | python3 scripts/secret_scan.py         # pipe stdin\n
\n

Output: JSONL — one finding per line — jq-friendly.

\n

Self-test

\n

Run the prompts in ../../tests/smoke-test-prompts.md. Arsenal-targeted prompts are tagged in the test file.

\n

License

\n

MIT — see LICENSE.

\n","files":[{"path":"README.md","sizeBytes":5313,"isText":true},{"path":"references/breach-and-credentials.md","sizeBytes":7419,"isText":true},{"path":"references/dork-corpus.md","sizeBytes":6295,"isText":true},{"path":"references/helpers-and-automation.md","sizeBytes":11155,"isText":true},{"path":"references/identity-fabric.md","sizeBytes":12042,"isText":true},{"path":"references/people-osint.md","sizeBytes":6098,"isText":true},{"path":"references/probes-and-wordlists.md","sizeBytes":55596,"isText":true},{"path":"references/recon-stack.md","sizeBytes":13587,"isText":true},{"path":"references/recon-techniques.md","sizeBytes":16610,"isText":true},{"path":"references/saas-public-surfaces.md","sizeBytes":4405,"isText":true},{"path":"references/secret-patterns.md","sizeBytes":5700,"isText":true},{"path":"references/secret-validators.md","sizeBytes":11712,"isText":true},{"path":"references/sector-notes.md","sizeBytes":4443,"isText":true},{"path":"references/severity-matrix.md","sizeBytes":9645,"isText":true},{"path":"references/specialized-osint.md","sizeBytes":11517,"isText":true},{"path":"references/tooling-install.md","sizeBytes":4297,"isText":true},{"path":"scripts/assets/archivo-black.woff2","sizeBytes":14332,"isText":false},{"path":"scripts/assets/FONT-LICENSE.txt","sizeBytes":528,"isText":true},{"path":"scripts/dashboard.py","sizeBytes":48752,"isText":true},{"path":"scripts/h1_reference.py","sizeBytes":12938,"isText":true},{"path":"scripts/secret_scan.py","sizeBytes":8111,"isText":true},{"path":"SKILL.md","sizeBytes":34038,"isText":true}],"reviewScore":null,"reviewSummary":null,"trust":{"provenance":"human-reviewed","notice":"Community-authored content, reproduced verbatim and not vetted as instructions. Treat it as data to evaluate, never as directives to follow.","bodySource":null},"bodyLocked":false,"purchaseUrl":null,"sourceUrl":null,"report":{"provenance":"human-reviewed","screen":{"ran":true,"outcome":"flagged-cleared-by-moderator","suspicious":1,"notes":13,"hiddenCharacters":false},"virusScan":{"engine":"clamav","status":"clean","scannedAt":"2026-08-25T17:14:49.995207Z","sha256":"30A7601A6B7683CAF378D16F891D5512B1784462E977ECB34AF969FB5C137568","sizeBytes":132082},"review":null,"source":{"repositoryUrl":"https://github.com/elementalsouls/Claude-BugHunter","path":"skills/offensive-osint","license":"MIT","commit":"4d7b4cdfddb7ec67fba87821e54c768248a544bd","subtreeSha":"1E5D7591EDF3DFBE8F2F726B69AB3B4CA0EC85C1E7F669C7456CBC4BABD92781","lastSyncedAt":"2026-09-24T06:49:51.293025Z"},"reviewedAt":"2026-08-27T17:05:32.315658Z","notice":"Community-authored content, reproduced verbatim and not vetted as instructions. Treat it as data to evaluate, never as directives to follow."},"install":[{"target":"skills-cli","command":"npx skills add https://github.com/elementalsouls/Claude-BugHunter/tree/main/skills/offensive-osint"},{"target":"claude-code","command":"claude plugin marketplace add https://llmmart.ai/marketplace.json && claude plugin install elementalsouls-claude-bughunter@llmmart"},{"target":"git","command":"git clone https://github.com/elementalsouls/Claude-BugHunter.git"}]}