Route web and API security testing into an ordered bug bounty methodology.
npx skills add https://github.com/DorianGallo/hack-skills-local --skill hack-doriangallo
Please help me install this Agent Skill. Skill: hack Source: https://github.com/DorianGallo/hack-skills-local/tree/main/skills/hack Command: npx skills add https://github.com/DorianGallo/hack-skills-local --skill hack-doriangallo
HackSkills helps you choose the correct testing route for a new target so you don’t waste time on random payloading when you need an organized bug-bounty workflow.
Use this skill when you have a fresh bug bounty target and ask an agent to plan a testing route by target type and observed behaviors, then prioritize the first vulnerability categories to validate.
High-intent search queries and answers about installing and using this skill.
To plan a bug bounty testing route, you map an initial target into an ordered methodology that progresses from reconnaissance through validation to privilege escalation. This approach applies behavior-driven signal mapping to prioritize the first vulnerability categories to validate, rather than wasting time on random payloading.
Behavior-driven signal mapping connects observed application behaviors to specific vulnerability classes by analyzing signals like reflection, server-side fetching, file control, object ID patterns, and auth flows. This process directs your web and API security testing toward the most likely vulnerability categories for validation.
The correct phase order for authorized penetration testing workflows starts with Recon and progresses through Validation toward privilege escalation or chaining. This phase-first routing selects the right sequence based on target type and observed behaviors to ensure follow-up actions are precise.
Yes, this web testing methodology supports GraphQL and REST API security routing. It orchestrates recon-to-validation workflows across REST, GraphQL, admin panels, auth flows, and business-logic transactions to direct you toward the appropriate topic skills like XSS, SQLi, SSRF, IDOR/BOLA, and JWT/OAuth.
YlikenMap target scope and plan initial reconnaissance routes.
jinyimeng01Validate suspected web vulnerabilities and generate structured exploit reports.
hyperlane-xyzAnalyze Solidity contracts for security vulnerabilities using Trail of Bits methodologies.
ano4lIdentify vulnerabilities in web applications, APIs, and infrastructure through authorized offensive security testing.
