OpenAgentSkill Registry Manifest
Skill: hunt-ato
Slug: elementalsouls-hunt-ato
Category: security
Description: Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host-header injection redirects token, predictable/numeric token, Referer leak, no-expiry/reuse), (2) email change without re-auth, (3) OAuth account-link CSRF, (4) MFA bypass (per hunt-mfa-bypass), (5) session fixation, (6) JWT manipulation (forge token to another identity; crypto details → hunt-jwt-crypto), (7) password change without step-up (chain with login timing/length oracle), (8) social-recovery / security-question brute-force, (9) SSO subdomain takeover at OAuth redirect_uri. Chains: cookie theft + password oracle + no step-up = persistent ATO; lax redirect_uri = auth-code theft; dangling-CNAME takeover at redirect_uri = ATO. Validate: demonstrate real takeover of test account B from attacker A's session; OOB/Collaborator confirm blind token-leak steps. Use when hunting ATO chains, testing password reset / email change / MFA / OAuth / session / JWT, or chaining primitives t

Agent fit:
- Decision: 94/100 Production-ready
- Primary fit: Testing and QA
- Role: Primary pick

Supply profile:
- Track: Coding and developer agents
- Scenario: Testing and QA
- Applicable agents: Claude Code, Browser agents, CLI, Codex, Cursor
- Maintenance: 2d since push
- Risk: Risky

Trust:
- Trust score: 68/100 Manual review
- Audit: 79/100 Risky

Attribution:
- Status: Registry indexed
- Source: github candidate review
- Creator: elementalsouls
- Claim URL: https://www.openagentskill.com/skills/elementalsouls-hunt-ato#claim-this-skill

Install:
npx skills add elementalsouls/Claude-BugHunter --skill hunt-ato

URLs:
- Web: https://www.openagentskill.com/skills/elementalsouls-hunt-ato
- API: https://www.openagentskill.com/api/agent/skills/elementalsouls-hunt-ato
- Install API: https://www.openagentskill.com/api/skills/elementalsouls-hunt-ato/install
- Repository: https://github.com/elementalsouls/Claude-BugHunter/tree/main/skills/hunt-ato