jinyimeng01Community·25 Agent Skills Included

mastermind-bug-bounty

Automated bug bounty hunting, API fuzzing, and exploit reporting

Orchestrates full bug bounty operations from reconnaissance and JS analysis through API fuzzing, crypto attacks, and access bypass to final exploit reporting. Eliminates manual endpoint mapping, blind fuzzing, and lost session state with resumable pipelines, evidence gates, and a value-pool linkage engine. Helps security researchers chain findings into confirmed vulnerabilities and produce compliant reports faster.

54|5

↗

npx skills add jinyimeng01/mastermind-bug-bounty --all -g -y

All Skills in This Repository (25)

Pure Emerald Level Indicators

📦 In Repo

jinyimeng01

mastermind-workflow

Orchestrate phased bug bounty workflows with agent delegation and triage validation.

api-fuzz-agent

Analyze API endpoints and parameters through structured fuzzing workflows to discover security weaknesses.

exploit-agent

Validate suspected web vulnerabilities and generate structured exploit reports.

bypass-agent

Identify and validate access control bypasses for protected web endpoints.

ai-security-agent

Test AI and LLM applications for adversarial security weaknesses.

crypto-attack-agent

Analyze encrypted application data to identify cryptographic security weaknesses.

report-agent

Generate HackerOne-format vulnerability reports from validated security findings.

recon-agent

Extract API endpoints and metadata from web application JavaScript assets.

api-fuzz

Select semantic fuzzing payloads for API parameters based on attack patterns.

cache-poisoning

Detect and validate web cache poisoning vulnerabilities from unkeyed request components.

auth-bypass

Identify authentication bypass weaknesses in protected web application endpoints.

prototype-pollution

Detects prototype pollution vulnerabilities in Node.js, Python, and browser JavaScript.

Community

Advanced

Frequently Asked Questions

FAQPage Schema

How to install Mastermind Bug Bounty?▼

Run `npx skills add jinyimeng01/mastermind-bug-bounty --all -g -y` in your terminal to install all skills in this suite globally.

What does Mastermind Bug Bounty do?▼

It runs a phased offensive security pipeline covering reconnaissance, API fuzzing, JWT and crypto attacks, 403 bypass, and exploitation. Each phase feeds discovered values into the next so findings chain into confirmed vulnerabilities.

How does the value pool linkage engine work?▼

It extracts parameter requirements from JavaScript files and matches them against values leaked in API responses. Values returned by one endpoint are automatically injected as inputs into other endpoints until no new data appears.

Can it resume an interrupted security test?▼

Yes. The runtime persists hunt state, worklogs, and findings to files, so you can resume a session via the CLI or HTTP API without losing progress.

Does it generate bug bounty reports?▼

Yes. Confirmed findings pass a six-check triage gate and are converted into structured reports with proof-of-concept evidence, CVSS scoring, and remediation guidance.