domains / families / security / bug-bounty

bug-bounty

authentic

Master bug bounty orchestrator — full pipeline: recon, pre-hunt learning, vulnerability hunting (30+ classes), A-to-B chaining, AI/LLM testing (ASI01-ASI10), language-specific grep, bypass tables, and reporting (7-question gate, CVSS 3.1, human-tone templates). Use for ANY bug bounty task — starting a new target, recon, hunting specific vulns, source code audit, AI feature testing, or report writing. 中文触发词：漏洞赏金、安全测试、渗透测试、漏洞挖掘

When to use

• starting a new target
• recon
• hunting specific vulns
• source code audit
• AI feature testing
• report writing
• vulnerability hunting (30+ classes)
• A-to-B chaining

When not to use

• theoretical bugs
• dead code with a bug in it
• source maps without secrets
• SSRF with DNS-only callback
• open redirect alone
• wrong implementation but no practical impact

Skill page

Source