skills.rest
cmndcntrlcyber
cmndcntrlcyberCOMMUNITY
Explore all skills by this author →
GitHub

bug-bounty

Automate bug bounty workflows from recon to vulnerability reporting.

3|Updated Nov 12, 2025
Search Tags:#vulnerability assessment#security testing#vulnerability management#pentest#bug bounty
One-click install
npx skills add https://github.com/cmndcntrlcyber/rtpi --skill bug-bounty-cmndcntrlcyber
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: bug-bounty
Source: https://github.com/cmndcntrlcyber/rtpi/tree/main/knowledge_seed/bug_hunter_skills/bug-bounty
Command: npx skills add https://github.com/cmndcntrlcyber/rtpi --skill bug-bounty-cmndcntrlcyber

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill streamlines the entire bug bounty workflow from recon to reporting, reducing the time required to find and validate vulnerabilities.

Core Features & Use Cases

  • Reconnaissance: Automates the process of asset discovery, subdomain enumeration, and vulnerability scanning.
  • Pre-Hunt Intelligence: Provides resources and tools for pre-hunt analysis, including vulnerability intelligence and threat modeling.
  • Hunting: Implements techniques for vulnerability hunting and exploit development, including A-to-B bug chaining and clustering.
  • Reporting: Offers frameworks for creating comprehensive security reports.

Quick Start

To begin the workflow, execute the bug bounty skill with 'start'.

Frequently Asked Questions about bug-bounty

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate web application vulnerability hunting and bug bounty recon?▼

You can automate web application vulnerability hunting by running the bug bounty workflow with 'start' to initiate reconnaissance, asset discovery, and subdomain enumeration using tools like Subfinder.

How does automated vulnerability scanning validate issues like SSRF and IDOR?▼

Automated vulnerability scanning validates issues like SSRF and IDOR by integrating pre-hunt intelligence and threat modeling, utilizing tools such as Nuclei and FFUF to identify and confirm web application vulnerabilities.

What is the best way to document and report security testing findings?▼

The best way to document and report security testing findings is to use structured reporting frameworks that capture vulnerability validation and exploit development details for comprehensive security reports.

Can I use Nuclei and FFUF for subdomain enumeration and vulnerability management?▼

Yes, you can use Nuclei and FFUF for vulnerability management and testing, as the workflow specifically utilizes these tools alongside Subfinder for subdomain enumeration and vulnerability scanning.

Does this bug bounty workflow support A-to-B bug chaining and exploit development?▼

Yes, the bug bounty workflow supports A-to-B bug chaining and exploit development by implementing advanced vulnerability hunting techniques that cluster vulnerabilities and map complex attack paths.

Related Skills

Explore More Software Engineering Skills→
zebbernzebbern
5

subdomain-enum

Enumerate subdomains with Subfinder, Amass, and Httpx pipelines.

Community
Advanced
jinyimeng01jinyimeng01
54

report-agent

Generate HackerOne-format vulnerability reports from validated security findings.

Community
Advanced
phatblatphatblat
12

WebAssessment

Automate web application security assessments with reconnaissance, threat modeling, and vulnerability analysis.

Community
Advanced
amano--amano--

burp-suite

Intercept HTTP traffic and test web applications for security vulnerabilities.

Community
Advanced