bb-methodology

Orchestrate bug-hunting workflows across five non-linear phases.

Updated Jun 5, 2026
One-click install
npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill bb-methodology-sseshachala
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bb-methodology
Source: https://github.com/sseshachala/Claude-BugHunter-archive/tree/main/skills/bb-methodology
Command: npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill bb-methodology-sseshachala

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a master orchestrator for bug-hunting sessions, unifying the 5-phase non-linear workflow with a robust mindset framework and routing to all other skills based on the current hunting phase.

Core Features & Use Cases

  • Orchestrates the full hunt lifecycle from Recon to Validate & Report, ensuring consistent methodology.
  • Routes to all related skills based on current phase and engagement mode (bug bounty, red-team, WAPT).
  • Provides structured thinking guidance (critical thinking, anomaly detection, What-If experiments) to improve outcomes and scalability.

Quick Start

Describe your engagement context and target so I can route you to the appropriate skillset and start the phase-aligned workflow.

Frequently Asked Questions about bb-methodology

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I structure a bug bounty workflow from recon to reporting?

A bug bounty workflow should be structured using a 5-phase non-linear framework: Recon, Mapping, Vulnerability Discovery, Prove & Escalate, and Validate & Report. This ensures consistent methodology and guides end-to-end engagement coordination.

What is the best way to coordinate a red-team engagement across multiple phases?

The best way to coordinate a red-team engagement is using a master orchestrator that applies mode gating and discipline rules. This routes you to the appropriate skillset based on the current hunting phase to ensure correct scope and findings.

Can I use a non-linear workflow for web application penetration testing?

Yes, you can use a non-linear workflow for WAPT engagements. The 5-phase framework supports web application penetration testing by applying mode gating and cross-skill routing to guide vulnerability discovery and validation.

How do I improve vulnerability discovery outcomes during a bug hunt?

You can improve vulnerability discovery outcomes by applying structured thinking guidance such as critical thinking, anomaly detection, and What-If experiments. This mindset framework scales your bug-hunting results during the discovery phase.

Does this bug hunting methodology support routing between different reconnaissance and reporting tools?

Yes, the methodology supports cross-skill routing based on the current hunting phase and engagement mode. It routes to all related skills to ensure correct scope, findings, and reporting throughout the bug bounty or red-team lifecycle.