skills.rest
guib1
guib1COMMUNITY
Explore all skills by this author →
GitHub

bug-bounty

Automate bug bounty workflows from reconnaissance to evidence-based reporting.

1|1|Updated Mar 24, 2026
Search Tags:#automation#templates#report-writing#ai-assisted#bug-bounty#recon#vulnerability-hunting
One-click install
npx skills add https://github.com/guib1/red-team-docker --skill bug-bounty-guib1
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: bug-bounty
Source: https://github.com/guib1/red-team-docker/tree/main/pentest-lab/.agents/skills/bug-bounty
Command: npx skills add https://github.com/guib1/red-team-docker --skill bug-bounty-guib1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides an end-to-end bug bounty lifecycle workflow, uniting reconnaissance, learning, hunting, validation, and reporting to speed up findings and improve quality.

Core Features & Use Cases

  • Recon: subdomain enumeration, asset discovery, fingerprinting, HackerOne scope awareness.
  • Pre-hunt intelligence: disclosed reports review, tech stack research, mind maps, threat modeling.
  • Vulnerability hunting: IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload, logic flaws, GraphQL, HTTP smuggling, cache poisoning, OAuth/OIDC, SSTI, subdomain takeover, cloud misconfig, ATO chains, agentic AI.
  • AI-assisted analysis: LLM/AI testing patterns, chatbot IDOR, prompt injection, ASCII smuggling, exfil channels, RCE via code tools.
  • A-to-B bug chaining: IDOR→auth bypass, SSRF→cloud metadata, XSS→ATO, etc.
  • Bypass tables and regex grep patterns: SSRF IP bypass, open redirect bypass, file upload bypass, and language-specific grep.
  • Templates & reporting: 7-Question Gate, 4 validation gates, CVSS 3.1, PoC templates, and submission checklists.

Quick Start

Install and begin recon and hunting against a target using the skill's integrated commands.

Frequently Asked Questions about bug-bounty

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate bug bounty reconnaissance and vulnerability hunting workflows?▼

Automate the full bug bounty lifecycle from reconnaissance to reporting using AI-assisted analysis. The workflow covers subdomain enumeration, asset discovery, fingerprinting, and vulnerability hunting across web apps, APIs, and smart contracts to reduce time-to-find vulnerabilities.

What is bug chaining and how does it work for account takeover?▼

Bug chaining links multiple vulnerabilities into complex attack paths like IDOR to auth bypass, SSRF to cloud metadata, or XSS to account takeover. The workflow validates these chains using built-in validation gates to ensure exploit reliability before reporting.

Can I use AI-assisted analysis to test LLM chatbots and prompt injection vulnerabilities?▼

AI-assisted analysis targets LLM and AI testing patterns including chatbot IDOR, prompt injection, ASCII smuggling, exfiltration channels, and RCE via code tools. These vulnerability hunting patterns identify unique security flaws in agentic AI implementations.

How do I write audit-ready bug bounty reports with CVSS scoring and proof of concept templates?▼

Generate audit-ready reports using built-in templates that include the 7-Question Gate, four validation gates, CVSS 3.1 scoring, proof of concept templates, and submission checklists to ensure complete documentation for HackerOne and similar programs.

Does this bug bounty workflow support API and smart contract targets alongside web applications?▼

The workflow applies to targets with web apps, APIs, and smart contracts, covering reconnaissance, vulnerability hunting, and evidence-based reporting. It includes cross-target memory and HackerOne scope awareness to maintain context across multiple programs.

What bypass techniques and grep patterns are available for SSRF and file upload vulnerabilities?▼

Bypass tables and regex grep patterns cover SSRF IP bypass, open redirect bypass, file upload bypass, and language-specific grep patterns. These built-in references accelerate vulnerability hunting by providing known evasion techniques for common security filters.

Related Skills

Explore More Software Engineering Skills→
dreadnodedreadnode
11

hackerone-recon

Enumerate HackerOne program scope and generate prioritized target inventories.

Official
Intermediate
zer0xhamidzer0xhamid
1

report-writing

Generate impact-first bug bounty reports with standardized templates and CVSS 3.1 scoring.

Community
Advanced
infantesromeroadrianinfantesromeroadrian

bug-bounty

Automate subdomain enumeration, asset discovery, and vulnerability hunting workflows.

Community
Advanced
hypnguyen1209hypnguyen1209
338

vulnerability-analysis

Identify and report source code vulnerabilities using taint analysis and CWE-style classifications.

Community
Advanced