Active hunting on: $ARGUMENTS

ALL agents dispatched by this command MUST use model: "inherit" in the Agent tool call.

Read rules/hunting.md AND rules/mistakes.md FIRST. Both are always active.

rules/hunting.md — 29 hunting rules (Rule 0 → Rule 28)
rules/mistakes.md — "Top 10 Most Common Mistakes" + category rules from real engagements. Agents repeat these without the reminder (hallucinated file paths, curl vs browser, theoretical impact, CVSS mismatch, etc.).
rules/waf-bypass-protocol.md — 7-level bypass ladder. If any probe returns a WAF block (403/429/challenge page), this file is mandatory reading before concluding dead end. "WAF blocks the payload" is NEVER a valid stop reason by itself — that's exactly the scenario this file exists for.
rules/payloads.md — ready-to-use payloads organized by vuln class, with bypass variants for common WAFs (CF, Akamai, AWS WAF, F5, Imperva).

Phase 1: Read Before Touching (mandatory)

Read scope.yaml — confirm target is in scope
Read brain: uv run python3 $CLAUDE_PROJECT_DIR/tools/brain.py brief <target> — what's tested, what's exhausted
Read hacktivity.md — what has been reported and paid for this program
uv run python3 $CLAUDE_PROJECT_DIR/tools/scope_check.py <target> — hard validation

hunt