domains / families / security / bb-local-toolkit

bb-local-toolkit

separate

Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning, vuln hunting (30+ classes), A-to-B chaining, AI/LLM testing, bypass tables, language-specific grep, reporting. Use for ANY bug bounty task.

When to use

• subdomain enumeration
• asset discovery
• fingerprinting
• HackerOne scope
• source code audit
• pre-hunt learning
• vuln hunting
• A-to-B chaining

When not to use

• theoretical bugs
• dead code with a bug
• source maps without secrets
• SSRF with DNS-only callback
• open redirect alone
• shallow recon spirals
• probing 403s
• grepping for analytics keys

Skill page

Source