What problem does it solve? Security researchers on bug bounty and SRC (Security Response Center) programs often lack a structured methodology, wasting time on low-value tests and producing reports that get rejected for weak evidence. This Skill provides a complete, repeatable hunting workflow from scope intake to report submission. ## Core Features & Use Cases - Five-phase workflow: Drives hunting through intake, passive recon, active enumeration, vulnerability hunting, and report submission with a CVSS 4.0 template. - 19 attack-class playbooks: Covers SQLi, XSS, RCE, SSRF, IDOR, OAuth/JWT/SAML, file upload, path traversal, race conditions, HTTP smuggling, GraphQL, mobile, and LLM prompt injection, each with real HackerOne cases and WAF/EDR bypass variants. - Reference knowledge base: Includes 305 structured payloads, 263 WAF bypass steps, 2887 disclosed HackerOne High/Critical reports, Chinese-stack component fingerprints, default credential lists, and banking/telecom vertical playbooks. - Use Case: Given a bug bounty program URL, the Skill enumerates subdomains and endpoints, prioritizes high-hit-rate vulnerability classes (e.g., password reset at 88% high-severity share), probes with playbook payloads, and produces an evidence-backed submission. ## Quick Start Ask the assistant to hunt vulnerabilities on an authorized bug bounty target, for example: run src-hunter against https://example.com and start with recon and enumeration.
