Verified:GitHub

web-bounty

Name: web-bounty
Availability: InStock
Author: YukiIto1999

Automates reconnaissance and iterative vulnerability testing for web applications, documenting findings with reproduction steps.

Updated Apr 23, 2026

Search Tags:#authorization #web-security #bug-bounty #vulnerability-research #autonomous-testing #logic-flaws

Ready to run

npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill web-bounty

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: web-bounty
Source: https://github.com/YukiIto1999/ctf-sleuth/tree/main/.claude/skills/web-bounty
Command: npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill web-bounty

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Web-bounty tactics help security teams efficiently uncover and chain web vulnerabilities, turning scattered clues into high-impact findings. By automating reconnaissance, vulnerability identification, and documentation, it reduces manual toil and improves reproducibility for web security engagements.

Core Features & Use Cases

Autonomous web application reconnaissance and mapping
Continuous vulnerability scanning and iterative testing focused on authorization flaws and logic issues
Ongoing documentation of findings with clear reproduction steps for stakeholders
Use Case: Active bug bounty hunting, security testing of web apps, and vulnerability research, emphasizing chainable logic flaws and authorization weaknesses

Quick Start

Provide a target web application URL to begin autonomous reconnaissance and vulnerability testing.

Frequently Asked Questions about web-bounty

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find and chain web application vulnerabilities autonomously?▼

Autonomous vulnerability research uses iterative reconnaissance to identify and chain low-severity findings like authorization flaws and logic issues into high-impact bugs. It continuously maps web applications and tests for business logic abuse.

What is the best way to automate bug bounty reconnaissance and documentation?▼

Automating bug bounty reconnaissance involves continuous scanning and iterative testing of web applications, while simultaneously generating documentation with clear reproduction steps for stakeholders to ensure findings are reproducible.

Can I use autonomous testing to detect business logic and authorization flaws?▼

Yes, autonomous testing can detect business logic and authorization flaws in web applications. It iteratively tests for chainable vulnerabilities, emphasizing logic abuse and authorization weaknesses rather than just standard injection flaws.

Do I need a specific target URL to start web security vulnerability scanning?▼

You need a target web application URL to begin autonomous reconnaissance and vulnerability testing. Providing the URL allows the process to map the application, identify chainable findings, and document reproduction steps safely.

When should I not use autonomous web vulnerability testing?▼

Autonomous web vulnerability testing should be avoided on applications without explicit authorization for active security testing. It performs iterative testing and reconnaissance that could disrupt business logic if applied to unauthorized or production environments.