skills.rest
Nir-Bhay
Nir-BhayCOMMUNITY
Explore all skills by this author →
𝕏@nirbhay_987GitHub

bug-bounty-program

Guide bug bounty hunting with OWASP Top 10 methodologies and structured reporting.

19|5|Updated Nov 23, 2025
Search Tags:#sql injection#xss#vulnerability assessment#security testing#penetration testing#reconnaissance#bug bounty
One-click install
npx skills add https://github.com/Nir-Bhay/markups --skill bug-bounty-program
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: bug-bounty-program
Source: https://github.com/Nir-Bhay/markups/tree/main/.agents/skills/bug-bounty-program
Command: npx skills add https://github.com/Nir-Bhay/markups --skill bug-bounty-program

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill assists in identifying security vulnerabilities in web applications and systems, streamlining the process of bug bounty hunting and penetration testing.

Core Features & Use Cases

  • Vulnerability Discovery: Guides users through reconnaissance, SQL injection, XSS, and SSRF testing.
  • Reporting: Provides a structured template for documenting findings and their impact.
  • Use Case: A security researcher can use this Skill to systematically probe a target application for common web vulnerabilities, following a defined methodology and using provided command-line tools.

Quick Start

Use the bug-bounty-program skill to start reconnaissance on target.com by enumerating subdomains.

Frequently Asked Questions about bug-bounty-program

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I start reconnaissance and subdomain enumeration for bug bounty hunting?▼

To start reconnaissance for bug bounty hunting, you enumerate subdomains and perform port scanning on the target domain. This process maps the external attack surface before testing specific web application vulnerabilities.

How do I test for SQL injection and XSS vulnerabilities during penetration testing?▼

To test for SQL injection and XSS vulnerabilities during penetration testing, you follow the OWASP Top 10 methodology to systematically probe target applications. This process identifies input validation flaws and script execution errors.

What is the best way to document vulnerability assessment findings for bug bounty reports?▼

The best way to document vulnerability assessment findings is using a structured report template. This ensures you clearly outline the discovered vulnerabilities, reproduction steps, and their security impact for program owners.

Can I use this approach for SSRF testing and web vulnerability discovery?▼

Yes, you can use this penetration testing approach for SSRF testing and web vulnerability discovery. It provides specific guidance and methodologies to probe for Server-Side Request Forgery alongside common application flaws.

Do I need specific command-line tools for security testing and vulnerability assessment?▼

Yes, effective security testing and vulnerability assessment require specific command-line tools. A provided checklist details the essential software utilities needed for reconnaissance, probing, and exploiting identified vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
wgpsecwgpsec
1.6k

recon-full

Enumerate subdomains, scan ports, fingerprint assets, and validate POCs.

Official
Advanced
qa-amanqa-aman
19

vuln-report

Generate a complete vulnerability report with standardized sections from a finding input.

Community
Advanced
ripgraphicsripgraphics

web-security-expert

Identify and test OWASP Top 10 web vulnerabilities like SQL injection and XSS.

Community
Intermediate
langbyyilangbyyi
96

business-logic-vulnerabilities

Identifies high-severity business logic vulnerabilities in web applications.

Community
Advanced