new-target

What problem does it solve?

This Skill helps you quickly and safely understand a brand-new bug bounty target by building an initial map of scope-aligned domains, live hosts, endpoints, JS assets, and relevant CVEs without jumping into exploitation.

Core Features & Use Cases

• Scope-driven recon: Parses scope.md, generates a deduplicated root domain list (handling wildcards), and runs every phase only within scope-aligned roots.
• End-to-end recon workflow: Enumerates subdomains, identifies live hosts, fingerprints tech stack, maps endpoints and historical URLs, and extracts JS-heavy surfaces.
• Target triage outputs: Produces recon artifacts plus a summary file with counts, discovered technologies, suggested manual starting points, and CVE hits for identified tech.
• Guardrails for safety: Explicitly avoids exploitation, avoids brute force, avoids writing to /mnt/c/, and only runs targeted nuclei CVE templates (critical/high).

Quick Start

Run the skill with the program identifier as the argument so it reads ~/bugbounty/[target]/scope.md and writes all recon outputs into ~/bugbounty/[target]/recon/ in Kali WSL.