What problem does it solve? Starting a bug bounty or VDP engagement involves juggling scope parsing, recon tooling, dozens of vulnerability categories, and report writing, and it is easy to miss steps or produce reports that get closed as Not Applicable. This Skill turns a program description into a structured, logged, end-to-end hunting workflow. ## Core Features & Use Cases - Scope and Policy Parsing: Converts pasted program policy and scope text into structured docs/ABOUT.md and docs/SCOPE.md files with severity and bounty tables. - Phased Recon and Hunting: Runs subdomain enumeration, live host checks, tech fingerprinting, and content discovery, then works through injection, XSS, auth, IDOR, CSRF, race conditions, and business logic categories. - Finding Documentation: Logs every action in HUNT.md and writes per-vulnerability reports with a ready-to-submit HackerOne format, including demonstrated-impact guidelines. - Use Case: Paste a HackerOne program's policy and scope, and the Skill sets up the workspace, enumerates subdomains with subfinder/httpx/nuclei, tests each live host across vulnerability classes, and produces submission-ready reports for confirmed findings. ## Quick Start Start a bug bounty hunt for this program using the pasted scope and policy, and document all findings in HUNT.md and the vuln folder.
