skills.rest
sseshachala
sseshachalaCOMMUNITY
Explore all skills by this author →
GitHub

bug-bounty

Run an end-to-end bug bounty workflow from reconnaissance to validated reporting.

Updated Jun 5, 2026
Search Tags:#vulnerability#reconnaissance#threat-modeling#workflow-automation#report-writing#security-testing#bug-bounty
One-click install
npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill bug-bounty-sseshachala
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: bug-bounty
Source: https://github.com/sseshachala/Claude-BugHunter-archive/tree/main/skills/bug-bounty
Command: npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill bug-bounty-sseshachala

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill centralizes and automates the full bug bounty lifecycle, from reconnaissance to disclosure, reducing time-to-find and improving the quality and consistency of reports.

Core Features & Use Cases

  • End-to-end workflow: recon, learn, hunt, validate, and report within a single cohesive process.
  • Guardrails and templates: standardized evidence, CVSS scoring, and 7-Question Gate checks to bias high-quality submissions.
  • Chain hunting and triage: A->B->C bug chaining strategies to maximize payout potential and impact.
  • Targeted tooling integration: templates, checklists, and workflow orchestration for multiple program types (web, mobile, cloud).
  • Use Case: Run a full campaign against a public program, gather findings, document steps, and generate a publish-ready report for submission.

Quick Start

Initiate the master bug bounty workflow on a target program to begin recon, learning, hunting, validation, and reporting in a single pass.

Frequently Asked Questions about bug-bounty

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate the bug bounty workflow from reconnaissance to report submission?▼

Bug chaining maximizes payout potential by linking multiple vulnerabilities into A->B->C exploit paths. This strategy increases the overall impact of findings during triage, elevating the severity and justifying higher rewards in submission reports.

How do I generate publication-ready HackerOne reports with CVSS scoring?▼

You generate publication-ready reports using standardized templates that enforce evidence collection, CVSS scoring, and 7-Question Gate checks. This ensures submissions are actionable, validated, and meet the quality standards of HackerOne-like programs.

Can I use a single bug bounty workflow for web, mobile, and cloud targets?▼

Yes, the workflow supports multiple program types including web, mobile, and cloud targets. It provides targeted tooling integration through specific templates, checklists, and workflow orchestration to guide vulnerability hunting across different environments.

How does threat modeling and learning from disclosed reports improve vulnerability hunting?▼

Threat modeling and analyzing disclosed reports guide your vulnerability hunting by mapping potential attack vectors before testing. This approach biases your search towards high-quality findings by applying structured gates and risk scoring during validation.

Related Skills

Explore More Software Engineering Skills→
ajtazerajtazer

web2-recon

Automate web2 reconnaissance from asset discovery to JS analysis.

Community
Advanced
Mikacr1138Mikacr1138
2

report-writing

Generate impact-first bug bounty reports with CVSS 3.1 scoring and pre-submit checklists.

Community
Advanced
infantesromeroadrianinfantesromeroadrian

web2-recon

Automate web2 reconnaissance with subdomain enumeration, live host discovery, and vulnerability scanning.

Community
Advanced
devtintdevtint

report-generation

Generate structured penetration testing reports with CVSS scores and remediation guidance.

Community
Advanced