Hunt Plan
hunt_planPropose concrete security tests based on observed recon, without sending traffic. Get testable propositions and identify gaps that require more data.
Instructions
Propose concrete tests based on what recon actually observed.
Sends no traffic. Reads the engagement's asset store and returns testable propositions, each citing the observation behind it.
focus optionally narrows the request ("authentication", "idor",
"business logic"). Leave it unset for a general pass.
Returns proposals — things to try — and gaps, which is the more
valuable half: what the model would need in order to say anything sharper.
On a target where everything interesting sits behind a login, gaps will
say so, and that is the honest answer rather than five generic suggestions.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| focus | No | ||
| limit | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||