bb-methodology

Orchestrate bug-bounty hunting with a 5-phase non-linear workflow.

Updated Jun 23, 2024
One-click install
npx skills add https://github.com/n4igme/randscript --skill bb-methodology-n4igme
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bb-methodology
Source: https://github.com/n4igme/randscript/tree/main/llm/skills/claude-hunter/skills/bb-methodology
Command: npx skills add https://github.com/n4igme/randscript --skill bb-methodology-n4igme

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Bug Bounty Methodology skill provides a comprehensive, non-linear orchestration framework to manage and optimize security engagements from start to finish.

Core Features & Use Cases

  • 5-phase workflow that interlinks recon, mapping, vulnerability discovery, proving impact, and reporting.
  • Role-agnostic orchestration that routes to related skills like hunt-dispatch and bug-bounty, enabling rapid triage and escalation in authorized engagements.
  • Use case: when starting a new bug bounty engagement, run Phase 0 to define scope and engage Phase 1 for reconnaissance, then progress through Phases 2-5 to produce a validated report.

Quick Start

Initiate Phase 0, confirm the engagement type, and apply the 5-phase workflow to guide bug-bounty hunting.

Frequently Asked Questions about bb-methodology

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a 5-phase bug bounty workflow?

It is a non-linear orchestration framework that guides bug bounty hunting through recon, mapping, vulnerability discovery, proving impact, and reporting. The workflow imposes phase governance with validation gates to ensure cross-tool reproducibility.

How do I validate vulnerability discovery findings during a security engagement?

You validate findings by applying phase governance with validation gates, requiring marker discipline, body-diff verification, and cross-tool reproducibility. This ensures that vulnerabilities are accurately verified before progressing to report generation.

Can I use this bug bounty methodology for red-team and WAPT engagements?

Yes, the bug bounty methodology applies to red-team and WAPT engagements alongside standard bug bounty hunting. It provides role-agnostic orchestration to guide recon, mapping, vulnerability discovery, proving impact, and reporting.

What is the best way to start a new bug bounty engagement?

The best way to start a bug bounty engagement is to initiate Phase 0 to define scope and confirm the engagement type. You then progress into Phase 1 for reconnaissance before moving through the remaining phases to produce a validated report.

How does phase governance work in vulnerability discovery?

Phase governance in vulnerability discovery works by enforcing pre-checks, escalation paths, and validation gates before moving between phases. It ensures marker discipline and body-diff verification are met, requiring cross-tool reproducibility for discovered vulnerabilities.