bb-methodology

Guide bug bounty hunters through a 5-phase non-linear vulnerability discovery workflow.

7|1|Updated Apr 14, 2026
One-click install
npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill bb-methodology-arianhobson333
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bb-methodology
Source: https://github.com/ArianHobson333/claude-bug-bounty-stack/tree/main/vendor/claude-bug-bounty/skills/bb-methodology
Command: npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill bb-methodology-arianhobson333

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive framework for bug bounty hunters, guiding them through a structured, non-linear workflow to systematically uncover and exploit vulnerabilities in web applications.

Core Features & Use Cases

  • Structured Workflow: Offers a 5-phase, non-linear hunting workflow that adapts to different phases of the hunt.
  • Critical Thinking Framework: Includes critical thinking domains like critical thinking, multi-perspective, tactical, and strategic thinking.
  • Use Case: Ideal for hunters starting a new session or feeling lost, guiding them through each phase with specific actions and considerations.

Quick Start

Start a new bug bounty hunting session with the bb-methodology skill by typing: 'Start a new hunting session using bb-methodology.'

Frequently Asked Questions about bb-methodology

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a non-linear bug bounty hunting workflow?

A non-linear bug bounty workflow provides structured guidance for vulnerability discovery, allowing hunters to adapt their approach across five phases from recon to reporting. It combines critical thinking with strategic problem-solving rather than following a rigid sequence.

How do I start a structured bug bounty hunting session?

You can start a structured bug bounty hunting session by initiating the 5-phase workflow. It guides you through specific actions and considerations for each phase, making it ideal when beginning a new hunt or feeling lost during reconnaissance and exploitation.

What critical thinking frameworks help with vulnerability discovery?

Critical thinking frameworks for vulnerability discovery include multi-perspective, tactical, and strategic thinking domains. These approaches encourage systematic problem-solving to uncover and exploit web application vulnerabilities more effectively during a hunt.

Is a structured methodology suitable for new bug bounty hunters?

A structured methodology is ideal for new bug bounty hunters or those feeling lost, as it guides you through each phase with specific actions and considerations. It helps develop systematic approaches to vulnerability discovery and exploitation.

Can I adapt my vulnerability discovery approach across different hunting phases?

You can adapt your vulnerability discovery approach because the 5-phase workflow is explicitly non-linear. It allows hunters to shift between recon, exploitation, and reporting phases dynamically based on findings and critical thinking during the hunt.