bb-local-toolkit

A systematic bug bounty hunt requires a non-linear workflow covering initial reconnaissance, vulnerability research, and automated security testing. This skill executes a 5-phase pipeline to map the attack surface and identify high-impact findings rather than theoretical bugs.

A->B bug chaining is an advanced methodology that combines multiple lower-severity vulnerabilities into a critical exploit chain. This skill provides expert-level frameworks to validate cluster hunting findings and systematically chain exploitation paths.

Yes, API auditing and cloud infrastructure review are supported use cases. The skill applies systematic bug discovery and automated security testing to web application security assessments across these full-stack environments.

Validating IDOR and SSRF findings requires passing a 7-Question Gate to ensure developer empathy and accurate threat modeling. This skill systematically maps the attack surface and validates potential chains against this gate before submission.

Yes, professional-grade vulnerability reporting is part of the comprehensive pipeline. The final phase of the systematic workflow generates reports focused on high-impact findings and chain exploitation details.