Bug bounty — поиск уязвимостей и отчёты

★ 8.1 · general

bug-bounty is a Claude Code skill that covers the full bug bounty workflow from recon to report submission. It handles subdomain enumeration, fingerprinting, source code auditing, and vulnerability hunting across dozens of classes — IDOR, SSRF, XSS, SQLi, OAuth, race conditions, HTTP smuggling, cache poisoning, subdomain takeover, and more — plus LLM/AI security testing mapped to the ASI01–ASI10 classification. The skill supports multi-step bug chaining (SSRF→cloud metadata, XSS→ATO, open redirect→OAuth theft) and includes bypass tables for SSRF, open redirects, and file uploads. Report generation follows structured templates with CVSS 3.1 scoring and PoC output. The orchestrator `python3 tools/hunt.py` routes signals through a lead board across roughly 50 tools, making it practical for any stage — initial recon, deep code review, AI feature testing, or final validation before submitting to HackerOne or similar platforms.