hunt-metrics-exposure
Installation
SKILL.md
When to Use
The target uses modern observability tooling (Go, .NET, Java, Node.js). These frameworks often expose /metrics, /health, and /status endpoints that are forgotten behind auth. Unlike application data leaks, metrics leaks reveal the ENTIRE operational profile: which AI models are used, how many users are active, database connection exhaustion, and third-party service dependencies.
Phase 1 — Discover Metrics Endpoints
TARGET="https://target.com"