security-bounty-hunter

To scan a code repository for security vulnerabilities, provide the target repository URL containing the web application code. The Skill analyzes code paths and suspicious input handling to detect remotely reachable attack vectors like SSRF, SQL injection, and command injection.

Yes, you can generate a bug bounty report after finding a vulnerability. The Skill assists in drafting clear and concise vulnerability reports suitable for bug bounty programs, detailing the security flaws identified during the repository code review.

This pentesting tool detects remotely exploitable web security vulnerabilities. It specifically focuses on identifying user-controlled attack vectors such as SQL injection, command injection, SSRF, cross-site scripting (XSS), and path traversal in code.

The security code review focuses on web application code repositories to identify suspicious input handling and injection points. It assesses code paths regardless of specific frameworks to ensure thorough vulnerability assessment for remote attack vectors.

To prepare an executable PoC for detected SQL injection or XSS flaws, the Skill scrutinizes possible injection points and code paths. It then assists in generating an executable proof of concept or a detailed report for internal security audits.

Using an automated vulnerability scanner for bug bounty hunting efficiently identifies exploitable security issues across entire repositories. It scrutinizes code paths and suspicious input handling faster than manual review, streamlining triage and report creation.