skills.rest
infantesromeroadrian
infantesromeroadrianCOMMUNITY
Explore all skills by this author →
Website𝕏@infantes_adrianGitHub

bug-bounty

Automate subdomain enumeration, asset discovery, and vulnerability hunting workflows.

Updated Jun 21, 2026
Search Tags:#vulnerability assessment#security testing#reconnaissance#bug bounty#vulnerability hunting
One-click install
npx skills add https://github.com/infantesromeroadrian/arca-agent --skill bug-bounty-infantesromeroadrian
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: bug-bounty
Source: https://github.com/infantesromeroadrian/arca-agent/tree/main/template/skills/bug-bounty
Command: npx skills add https://github.com/infantesromeroadrian/arca-agent --skill bug-bounty-infantesromeroadrian

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires subfinder, httpx, dnsx, nuclei, katana, waybackurls, gau, dalfox, ffuf, anew, qsreplace, assetfinder, gf, interactsh-client, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill streamlines the entire bug bounty workflow, from recon to report, covering a comprehensive range of security vulnerabilities and methodologies.

Core Features & Use Cases

  • Comprehensive Recon Pipeline: Automated subdomain enumeration, asset discovery, fingerprinting, and more.
  • Pre-Hunt Learning: Access to disclosed reports, tech stack research, and threat modeling tools.
  • Vulnerability Hunting: IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQLi, XXE, file upload, business logic, and AI security testing.
  • A-to-B Bug Chaining: Combining multiple vulnerabilities into a chain for greater impact.
  • Reporting: Guidelines for 7-Question Gate, validation gates, and writing human-tone reports.

Quick Start

Execute the 'bug-bounty' skill to begin the bug bounty workflow, starting with recon for the specified target.

Frequently Asked Questions about bug-bounty

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate subdomain enumeration and asset discovery for bug bounty hunting?▼

Subdomain enumeration and asset discovery are automated using tools like subfinder, assetfinder, and dnsx, streamlining the reconnaissance phase of the bug bounty workflow to identify target assets quickly.

What is the best way to hunt for XSS and SSRF vulnerabilities during security testing?▼

Hunting for XSS and SSRF vulnerabilities is best handled through a structured workflow that includes pre-hunt research, targeted vulnerability hunting using tools like dalfox, and strict validation gates before reporting.

Does this bug bounty workflow support vulnerability hunting within specific directories?▼

Yes, the bug bounty workflow supports both reconnaissance and vulnerability hunting within specific directories, allowing you to target defined paths rather than scanning the entire application scope indiscriminately.

Can I chain multiple vulnerabilities like IDOR and SSRF together for greater impact?▼

Yes, the workflow includes A-to-B bug chaining capabilities, allowing you to combine multiple vulnerabilities such as IDOR, SSRF, and auth bypass into a single chain to demonstrate greater security impact.

Do I need to install nuclei and katana separately to run reconnaissance pipelines?▼

Yes, nuclei, katana, and other dependencies like httpx and waybackurls must be installed in your environment, as the workflow leverages these external tools to execute its comprehensive reconnaissance and hunting pipeline.

How do I validate and report security vulnerabilities found during reconnaissance?▼

Vulnerabilities are validated and reported using built-in guidelines like the 7-Question Gate and validation gates, ensuring you write human-tone reports that accurately document the discovered security vulnerabilities.

Related Skills

giosuetedeschi-specgiosuetedeschi-spec

Red Team Tools and Methodology

Automate web application reconnaissance and vulnerability discovery workflows.

Community
Advanced
hataiit9xhataiit9x
3

report-writing

Generate bug bounty reports for HackerOne, Bugcrowd, Intigriti, and ImmuniFi platforms.

Community
Advanced
securityfortechsecurityfortech
6

ssrf

Detect and exploit SSRF vulnerabilities in user-controlled URL inputs.

Official
Advanced
aivos-xieaivos-xie
1

bug-bounty

Enumerate subdomains, probe HTTP services, and scan web applications for vulnerabilities.

Community
Advanced