bb-local-toolkit

Bug bounty reconnaissance and vulnerability hunting can be automated by executing a workflow that discovers subdomains, identifies live hosts, and runs vulnerability scanners. This skill orchestrates the entire process from initial recon to detailed reporting.

Streamlining a bug bounty workflow requires automating reconnaissance, pre-hunt learning from disclosed reports, vulnerability hunting, validation, and reporting. This toolkit integrates these phases to increase the efficiency of your security assessment process.

Yes, you can use nuclei and sqlmap together within an automated vulnerability detection workflow. This skill coordinates multiple security tools including subfinder, ffuf, and sqlmap to discover and validate common security issues.

Yes, this bug bounty toolkit supports finding IDOR, SSRF, and XSS vulnerabilities. It offers various hunting strategies for these specific security flaws and integrates tools like dalfox and sqlmap to assist in identifying them.

To validate bug bounty findings and generate detailed security reports, this skill provides built-in guidelines for confirming vulnerabilities and automates the creation of comprehensive reports for your security assessment results.

Yes, you need to install external security tools before using this bug bounty automation toolkit. It requires dependencies like subfinder, nuclei, ffuf, sqlmap, and semgrep to execute its comprehensive vulnerability hunting and reconnaissance workflow.