Guide bug bounty hunting through a structured 5-phase workflow.
npx skills add https://github.com/0xhaaz/bug-bounty-toolkit --skill bb-methodology-0xhaaz
Please help me install this Agent Skill. Skill: bb-methodology Source: https://github.com/0xhaaz/bug-bounty-toolkit/tree/main/skills/bb-methodology Command: npx skills add https://github.com/0xhaaz/bug-bounty-toolkit --skill bb-methodology-0xhaaz
This Skill unit provides a comprehensive methodology for bug bounty hunting, guiding users through a structured 5-phase workflow and a critical thinking framework to identify and validate vulnerabilities.
Start a new bug bounty hunting session by running the bb-methodology skill with the target domain.
High-intent search queries and answers about installing and using this skill.
A structured bug bounty hunting methodology provides a 5-phase workflow covering Recon, Mapping & Analysis, Vulnerability Discovery, Prove & Escalate, and Validate & Report to systematically identify web application vulnerabilities.
Start bug bounty hunting by applying critical thinking through developer psychology, anomaly detection, and What-If experiments, running a target domain through the 5-phase workflow to guide vulnerability discovery and validation.
Stay productive during security testing by utilizing a 20-minute rotation clock and non-linear navigation approach, allowing you to systematically pivot across targets without losing focus during the vulnerability assessment process.
Yes, the vulnerability assessment workflow supports web application targets, but it requires a deep understanding of web application vulnerabilities and security testing to effectively execute the 5-phase hunting process.
Developer psychology improves vulnerability discovery by analyzing how developers think and code, enabling hunters to predict anomalies and design targeted What-If experiments that uncover hidden security flaws.
A non-linear workflow allows dynamic navigation across the five phases, enabling hunters to pivot between Recon, Vulnerability Discovery, and Validation based on real-time findings rather than being locked into a rigid sequence.
cmndcntrlcyberAutomate subdomain enumeration, live host identification, and URL crawling for web reconnaissance.
jinyimeng01Generate HackerOne-format vulnerability reports from validated security findings.
gerald-icaAutomate web application security testing with Burp Suite.
DevHive1Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.
