skills.rest
EvilBit-Labs
EvilBit-LabsOFFICIAL
Explore all skills by this author →
Website𝕏@EvilBitLabsGitHub

security-bounty-hunter

Identify remotely exploitable security vulnerabilities in code repositories for bug bounty reports.

4|Updated Sep 14, 2025
Search Tags:#security#vulnerability#threat-modeling#code-analysis#pentesting#bug-bounty#disclosure
One-click install
npx skills add https://github.com/EvilBit-Labs/DaemonEye --skill security-bounty-hunter-evilbit-labs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-bounty-hunter
Source: https://github.com/EvilBit-Labs/DaemonEye/tree/main/.claude/skills/security-bounty-hunter
Command: npx skills add https://github.com/EvilBit-Labs/DaemonEye --skill security-bounty-hunter-evilbit-labs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Hunt for exploitable vulnerabilities in code repositories to support responsible disclosure and bug bounty submissions.

Core Features & Use Cases

  • Remote vulnerability triage across code paths and APIs.
  • Focused on externally reachable flaws suitable for bounty programs.
  • Helps prepare concise triage reports for platforms like HackerOne or Bugcrowd.

Quick Start

Scan a repository for remotely reachable vulnerabilities and generate a ready-to-submit bounty report.

Frequently Asked Questions about security-bounty-hunter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find exploitable vulnerabilities in code for bug bounty submissions?▼

To find exploitable vulnerabilities for bug bounty submissions, scan a repository to identify remotely reachable security flaws across code paths and APIs. The tool triages these paths to confirm exploitable entry points suitable for disclosure.

What is remote vulnerability triage in code analysis?▼

Remote vulnerability triage in code analysis is the process of confirming exploitable entry points in externally reachable code paths. It applies triage rules to validate security flaws that can be reported to bug bounty platforms like HackerOne.

How do I prepare a disclosure-ready report for a security vulnerability?▼

To prepare a disclosure-ready report for a security vulnerability, generate reproducible proof of concept steps after confirming a remotely exploitable path. The tool composes these findings into a concise report for platforms like Bugcrowd.

Can I use this for vulnerability discovery on APIs and web interfaces?▼

Yes, you can use this for vulnerability discovery on APIs and web interfaces. It applies to repositories with accessible web interfaces, APIs, or authentication gates, focusing specifically on externally exploitable paths and impact.

Does this threat-modeling tool work for internal code paths or only externally reachable flaws?▼

This threat-modeling tool works exclusively for externally reachable flaws suitable for bounty programs. It focuses on remotely exploitable paths across web interfaces and APIs rather than internal code vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
jshsakurajshsakura
22

penetration-tester

Map adversarial attack paths across web apps, APIs, and authentication flows.

Community
Advanced
zer0xhamidzer0xhamid
1

report-writing

Generate impact-first bug bounty reports with standardized templates and CVSS 3.1 scoring.

Community
Advanced
SakshamKandelSakshamKandel

cso

Run a CSO-grade security audit across code, dependencies, and deployment pipelines.

Community
Advanced
thisisqubikathisisqubika

security-review

Analyze code repositories for vulnerabilities using SAST and AI triage.

Official
Advanced