Compétences awesome-bug-bounty
📩

awesome-bug-bounty

RĂ©vision du contenu r1 Critique ⚙ Commandes externes🌐 AccĂšs rĂ©seau📁 AccĂšs au systĂšme de fichiers🔑 Variables d’environnement

Plan Authorized Bug Bounty Research

Bug bounty research can become fragmented across tools, payloads, and reporting workflows. This skill organizes authorized testing into scoped, evidence-focused playbooks.

Prend en charge: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠ 38 MĂ©diocre

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent
Review the Skillstore skill "awesome-bug-bounty" from https://skillstore.io/skills/yangtech-gh-awesome-bug-bounty.md and its manifest at https://skillstore.io/api/skills/yangtech-gh-awesome-bug-bounty/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/yangtech-gh-awesome-bug-bounty.md manifest signé GET /api/skills/yangtech-gh-awesome-bug-bounty/manifest lockfile signé GET /api/skills/yangtech-gh-awesome-bug-bounty/lockfile

Tester

Utilisation de « awesome-bug-bounty ». Plan an authorized assessment for one web application and API with a strict request limit.

RĂ©sultat attendu:

  • Scope manifest listing approved hosts, exclusions, test window, and request limits.
  • Passive asset discovery followed by rate-limited endpoint mapping.
  • Manual verification gates before intrusive tests or report submission.

Utilisation de « awesome-bug-bounty ». Turn a reproduced authorization issue into a concise bug bounty report.

RĂ©sultat attendu:

A report with affected endpoint, role comparison, redacted evidence, impact, severity rationale, reproduction steps, and server-side authorization guidance.

Audit de sécurité

Critique
v1 ‱ 24/09/2026 Ouvrir le rapport versionnĂ©

Most static alerts are false positives caused by Markdown code spans, documentation links, placeholders, and named environment variables. Confirmed risks include privileged host changes, active scanners, persistent configuration edits, unverified installers, and actionable payloads for cloud metadata, command execution, and sensitive file access. No prompt injection, obfuscation, or credential-exfiltration path was found.

7
Fichiers analysés
1,046
Lignes analysées
51
ÉlĂ©ments Ă  examiner
0
Faux positifs ignorés

Préoccupations de sécurité confirmées (12)

Critique
knowledge/payloads.md:49
System password file access
- Spaceless: `$IFS`, `{cat,/etc/passwd}`, `< /etc/passwd`, tab (`%09`).
The cheat sheet provides command-injection, traversal, or XXE payloads that read /etc/passwd. They are explicit host-file access techniques.
Critique
knowledge/payloads.md:61
System password file access
- Basic: `../../../../etc/passwd`, `..%2f..%2f`, `%2e%2e%2f`, `....//....//`.
The cheat sheet provides command-injection, traversal, or XXE payloads that read /etc/passwd. They are explicit host-file access techniques.
Critique
knowledge/payloads.md:67
System password file access
- File read: `<!ENTITY xxe SYSTEM "file:///etc/passwd">`.
The cheat sheet provides command-injection, traversal, or XXE payloads that read /etc/passwd. They are explicit host-file access techniques.
ÉlevĂ©
knowledge/install.md:19
Network scanning tools
sudo apt update && sudo apt install -y git curl jq unzip python3-pip pipx nmap
The command installs nmap and other active security scanners with elevated privileges. Installation is intentional, but it materially enables network scanning.
ÉlevĂ©
knowledge/install.md:145
Network scanning tools
| **mcp-security-hub** | `git clone https://github.com/FuzzingLabs/mcp-security-hub && cd mcp-securi
The instruction starts Dockerized nmap and nuclei MCP services, exposing active scanning capabilities to an agent. Scope controls are therefore essential.
ÉlevĂ©
knowledge/install.md:206
Network scanning tools
sudo apt install -y nmap sqlmap feroxbuster gobuster
The command installs nmap and other active security scanners with elevated privileges. Installation is intentional, but it materially enables network scanning.
ÉlevĂ©
knowledge/methodology.md:17
Environment file access
- GitHub/gitlab secret scanning (trufflehog, gitleaks), `.git`/`.env`/`.DS_Store`, backup files, npm
The methodology explicitly directs secret discovery against exposed .env and repository files. This is valid authorized testing but can retrieve live credentials.
ÉlevĂ©
knowledge/payloads.md:57
Environment file access
- Twig RCE: `{{_self.env.registerUndefinedFilterCallback("exec")}}{{_self.env.getFilter("id")}}`.
Although the detector labels environment access, the line is an executable Twig SSTI payload that registers exec as a callback. The code-execution risk is real.
Afficher les 12 problÚmes confirmés
ÉlevĂ©
knowledge/tools.md:82
Network scanning tools
| **FuzzingLabs/mcp-security-hub** | 38 Dockerized MCP servers | 300+ tools incl. nmap, nuclei, sqlm
The table recommends an agent-accessible suite containing nmap, nuclei, and sqlmap. That capability can perform intrusive scanning even though this line does not execute it.
ÉlevĂ©
knowledge/install.md:116-117knowledge/install.md:169-171
Unverified Third-Party Installation Flows
The guide downloads latest releases into executable paths and runs remote installer scripts without pinned versions, checksums, or signature verification.
The cited commands directly extract a latest-release archive and execute third-party installation scripts. No integrity verification is specified.
ÉlevĂ©
knowledge/methodology.md:74-82
Privileged Session Material Stored in Workspace
The workspace layout stores low-privilege and high-privilege sessions in surfaces/auth.json without encryption, permission, retention, or cleanup requirements.
The documented layout explicitly identifies auth.json as containing privileged sessions. The surrounding guidance does not define protections for credentials at rest.
ÉlevĂ©
SKILL.md:60-65knowledge/tools.md:70-83
Agent-Directed Intrusive Security Testing
The workflow gives agents active recon, scanner, and exploitation capabilities. Scope and human verification are stated, but technical enforcement is not universal.
The cited workflow directs recon and deep playbooks, while the tooling table exposes broad scanners through MCP. Several tools lack the documented scope enforcement.
ÉlĂ©ments d’évaluation des capacitĂ©s (51)

Il s’agit de capacitĂ©s locales rĂ©elles qui peuvent ĂȘtre attendues pour cette compĂ©tence ; elles nĂ©cessitent donc un examen, mais ne sont pas comptabilisĂ©es comme comportement malveillant confirmĂ©.

Critique
knowledge/payloads.md:39
AWS/Azure metadata endpoint
- Targets: `169.254.169.254` metadata paths:
The material identifies cloud metadata endpoints and bypass methods for SSRF testing. Successful use can expose instance credentials and other sensitive metadata.
Critique
knowledge/payloads.md:42
AWS/Azure metadata endpoint
- Azure: `169.254.169.254/metadata/instance` with `Metadata: true`
The material identifies cloud metadata endpoints and bypass methods for SSRF testing. Successful use can expose instance credentials and other sensitive metadata.
Critique
knowledge/payloads.md:43
GCP metadata endpoint
- Bypasses: decimal/hex IP (`2130706433`), short IP (`127.1`), DNS rebinding, redirect chains (302 t
The material identifies cloud metadata endpoints and bypass methods for SSRF testing. Successful use can expose instance credentials and other sensitive metadata.
Critique
knowledge/vuln-types.md:21
AWS/Azure metadata endpoint
- Impact: cloud metadata (169.254.169.254 AWS/GCP/Azure/Alibaba/DigitalOcean/Oracle), internal admin
The material identifies cloud metadata endpoints and bypass methods for SSRF testing. Successful use can expose instance credentials and other sensitive metadata.
ÉlevĂ©
knowledge/install.md:19
sudo privilege escalation
sudo apt update && sudo apt install -y git curl jq unzip python3-pip pipx nmap
The guide supplies a sudo installation command that changes the host with elevated privileges. The use is legitimate, but execution requires explicit user approval.
ÉlevĂ©
knowledge/install.md:49
sudo privilege escalation
sudo snap install amass # or: brew install amass
The guide supplies a sudo installation command that changes the host with elevated privileges. The use is legitimate, but execution requires explicit user approval.
ÉlevĂ©
knowledge/install.md:52
sudo privilege escalation
sudo apt install -y gobuster feroxbuster
The guide supplies a sudo installation command that changes the host with elevated privileges. The use is legitimate, but execution requires explicit user approval.
ÉlevĂ©
knowledge/install.md:78
sudo privilege escalation
sudo apt install -y sqlmap # or: git clone https://github.com/sqlmapproject/sqlmap && pytho
The guide supplies a sudo installation command that changes the host with elevated privileges. The use is legitimate, but execution requires explicit user approval.
ÉlevĂ©
knowledge/install.md:99
sudo privilege escalation
| **ZAP** | `docker pull ghcr.io/zaproxy/zaproxy:stable` · `sudo snap install zaproxy --classic` · <
The guide supplies a sudo installation command that changes the host with elevated privileges. The use is legitimate, but execution requires explicit user approval.
ÉlevĂ©
knowledge/install.md:206
sudo privilege escalation
sudo apt install -y nmap sqlmap feroxbuster gobuster
The guide supplies a sudo installation command that changes the host with elevated privileges. The use is legitimate, but execution requires explicit user approval.
ÉlevĂ©
knowledge/install.md:116
Hardcoded URL
curl -sL https://github.com/h4ckf0r0day/obscura/releases/latest/download/obscura-linux-x86_64.tar.gz
The command downloads a latest-release archive and extracts executable files directly into the user binary directory without checksum or signature verification.
ÉlevĂ©
knowledge/install.md:116
Hidden file in home directory
curl -sL https://github.com/h4ckf0r0day/obscura/releases/latest/download/obscura-linux-x86_64.tar.gz
The command writes downloaded executables into ~/.local/bin. Direct extraction into an executable path is a real filesystem and supply-chain risk.
ÉlevĂ©
knowledge/install.md:117
Hidden file in home directory
chmod +x ~/.local/bin/obscura ~/.local/bin/obscura-worker
The command marks downloaded files in ~/.local/bin executable. This is an intentional persistent host modification with risk if the archive is compromised.
ÉlevĂ©
knowledge/install.md:147
Hidden file in home directory
**Register in opencode** (`~/.config/opencode/opencode.jsonc`), example for pd-tools-mcp:
The guide instructs users to edit the hidden OpenCode configuration and register executable MCP servers. This changes persistent agent tooling behavior.
ÉlevĂ©
knowledge/install.md:169
Hidden file in home directory
| **Agentic-Bug-Hunter** | `git clone https://github.com/Awarexone/Agentic-Bug-Hunter && cd Agentic-
The listed third-party installer writes agent files under ~/.claude and executes repository scripts. This is a persistent filesystem change from unpinned source.
ÉlevĂ©
knowledge/install.md:210
Hidden file in home directory
echo 'export PATH=$PATH:$HOME/go/bin' >> ~/.bashrc
The command appends to ~/.bashrc, persistently changing the user shell environment. It is transparent but should require confirmation and idempotence checks.
ÉlevĂ©
knowledge/install.md:228
Hidden file in home directory
### API keys / env (shell profile or `~/.config/<tool>`)
The guide directs users to place API credentials in hidden shell or tool configuration files. This is standard setup, but weak file permissions could expose secrets.
ÉlevĂ©
knowledge/install.md:243
Hidden file in home directory
# ~/.profile or ~/.bashrc — scope keys to tools that need them
The guide directs users to place API credentials in hidden shell or tool configuration files. This is standard setup, but weak file permissions could expose secrets.
ÉlevĂ©
knowledge/install.md:252
Hidden file in home directory
- **subfinder**: `~/.config/subfinder/provider-config.yaml` — add GitHub/rapid7/etc. tokens to unloc
The guide directs users to place API credentials in hidden shell or tool configuration files. This is standard setup, but weak file permissions could expose secrets.
ÉlevĂ©
knowledge/install.md:254
Hidden file in home directory
- **httpx/gau**: gau reads `~/.gau.toml` for alienvault/wayback keys (BugHound shares this file).
The guide directs users to place API credentials in hidden shell or tool configuration files. This is standard setup, but weak file permissions could expose secrets.
ÉlevĂ©
knowledge/install.md:255
Hidden file in home directory
- **sqlmap**: no config needed; use `--batch` + `--answers` for automation; keep `~/.sqlmap` for ses
The guide retains sqlmap sessions in a hidden home directory. Those sessions can contain target details and assessment artifacts.
ÉlevĂ©
knowledge/install.md:273
Hidden file in home directory
`~/.config/opencode/opencode.jsonc` — add only the servers you'll use; disable the rest (`"enabled":
The guide instructs users to edit the hidden OpenCode configuration and register executable MCP servers. This changes persistent agent tooling behavior.
ÉlevĂ©
knowledge/payloads.md:56
Python os.popen
- Jinja2 RCE: `{{config.__class__.__init__.__globals__['os'].popen('id').read()}}` or `{{cycler.__in
This is an actionable Jinja2 template-injection payload that invokes os.popen to prove remote command execution. It is dangerous outside an authorized target.
ÉlevĂ©
knowledge/payloads.md:56
PHP/Python popen
- Jinja2 RCE: `{{config.__class__.__init__.__globals__['os'].popen('id').read()}}` or `{{cycler.__in
This is an actionable Jinja2 template-injection payload that invokes os.popen to prove remote command execution. It is dangerous outside an authorized target.
ÉlevĂ©
knowledge/payloads.md:61
Path traversal sequence
- Basic: `../../../../etc/passwd`, `..%2f..%2f`, `%2e%2e%2f`, `....//....//`.
The content provides actionable traversal or redirect-bypass payloads intended to defeat path validation. These are valid test vectors with clear misuse potential.
ÉlevĂ©
knowledge/payloads.md:84
Path traversal sequence
- `redirect_uri` bypass: `https://app.com/callback/../../../evil`, `https://app.com.evil.com`, open-
The content provides actionable traversal or redirect-bypass payloads intended to defeat path validation. These are valid test vectors with clear misuse potential.
ÉlevĂ©
knowledge/payloads.md:63
Linux /proc filesystem access
- LFI→RCE: `/proc/self/environ` + User-Agent, log files, session upload, `pearcmd` argument injectio
The content recommends /proc/self/environ as an LFI-to-RCE target. Access can expose process secrets and support code execution.
ÉlevĂ©
knowledge/vuln-types.md:77
Path traversal sequence
- Open redirect: parameter abuse (`url=`, `next=`, `redirect=`), `//evil`, `@` userinfo tricks, back
The content provides actionable traversal or redirect-bypass payloads intended to defeat path validation. These are valid test vectors with clear misuse potential.
ÉlevĂ©
knowledge/vuln-types.md:72
Linux /proc filesystem access
- LFI: wrappers (`php://filter`, `phar://`, `zip://`, `data://`), log poisoning, session files, pear
The content recommends /proc/self/environ as an LFI-to-RCE target. Access can expose process secrets and support code execution.
Moyen
knowledge/install.md:105
Hardcoded URL
docker run --rm -v "$PWD:/zap/wrk" ghcr.io/zaproxy/zaproxy:stable zap-baseline.py -t https://target.
This command launches ZAP against a target URL and mounts the current directory into its container. The placeholder reduces immediate impact, but the operation is an active network scan.
Moyen
knowledge/install.md:116
Hidden file access
curl -sL https://github.com/h4ckf0r0day/obscura/releases/latest/download/obscura-linux-x86_64.tar.gz
The command writes downloaded executables into ~/.local/bin. Direct extraction into an executable path is a real filesystem and supply-chain risk.
Moyen
knowledge/install.md:117
Hidden file access
chmod +x ~/.local/bin/obscura ~/.local/bin/obscura-worker
The command marks downloaded files in ~/.local/bin executable. This is an intentional persistent host modification with risk if the archive is compromised.
Moyen
knowledge/install.md:147
Hidden file access
**Register in opencode** (`~/.config/opencode/opencode.jsonc`), example for pd-tools-mcp:
The guide instructs users to edit the hidden OpenCode configuration and register executable MCP servers. This changes persistent agent tooling behavior.
Moyen
knowledge/install.md:169
Hidden file access
| **Agentic-Bug-Hunter** | `git clone https://github.com/Awarexone/Agentic-Bug-Hunter && cd Agentic-
The listed third-party installer writes agent files under ~/.claude and executes repository scripts. This is a persistent filesystem change from unpinned source.
Moyen
knowledge/install.md:210
Hidden file access
echo 'export PATH=$PATH:$HOME/go/bin' >> ~/.bashrc
The command appends to ~/.bashrc, persistently changing the user shell environment. It is transparent but should require confirmation and idempotence checks.
Moyen
knowledge/install.md:228
Hidden file access
### API keys / env (shell profile or `~/.config/<tool>`)
The guide directs users to place API credentials in hidden shell or tool configuration files. This is standard setup, but weak file permissions could expose secrets.
Moyen
knowledge/install.md:243
Hidden file access
# ~/.profile or ~/.bashrc — scope keys to tools that need them
The guide directs users to place API credentials in hidden shell or tool configuration files. This is standard setup, but weak file permissions could expose secrets.
Moyen
knowledge/install.md:252
Hidden file access
- **subfinder**: `~/.config/subfinder/provider-config.yaml` — add GitHub/rapid7/etc. tokens to unloc
The guide directs users to place API credentials in hidden shell or tool configuration files. This is standard setup, but weak file permissions could expose secrets.
Moyen
knowledge/install.md:254
Hidden file access
- **httpx/gau**: gau reads `~/.gau.toml` for alienvault/wayback keys (BugHound shares this file).
The guide directs users to place API credentials in hidden shell or tool configuration files. This is standard setup, but weak file permissions could expose secrets.
Moyen
knowledge/install.md:255
Hidden file access
- **sqlmap**: no config needed; use `--batch` + `--answers` for automation; keep `~/.sqlmap` for ses
The guide retains sqlmap sessions in a hidden home directory. Those sessions can contain target details and assessment artifacts.
Moyen
knowledge/install.md:273
Hidden file access
`~/.config/opencode/opencode.jsonc` — add only the servers you'll use; disable the rest (`"enabled":
The guide instructs users to edit the hidden OpenCode configuration and register executable MCP servers. This changes persistent agent tooling behavior.
Faible
knowledge/install.md:69
Hardcoded URL
git clone --depth 1 https://github.com/danielmiessler/SecLists.git ~/wordlists/SecLists
This is an executable clone or install command that downloads third-party security tooling from the network. The repository is identified, but the command does not pin a commit.
Faible
knowledge/install.md:70
Hardcoded URL
git clone --depth 1 https://github.com/swisskyrepo/PayloadsAllTheThings.git ~/wordlists/PayloadsAllT
This is an executable clone or install command that downloads third-party security tooling from the network. The repository is identified, but the command does not pin a commit.
Faible
knowledge/install.md:71
Hardcoded URL
git clone --depth 1 https://github.com/aw-junaid/bug-bounty.git ~/wordlists/aw-junaid-bug-bounty
This is an executable clone or install command that downloads third-party security tooling from the network. The repository is identified, but the command does not pin a commit.
Faible
knowledge/install.md:78
Hardcoded URL
sudo apt install -y sqlmap # or: git clone https://github.com/sqlmapproject/sqlmap && pytho
This is an executable clone or install command that downloads third-party security tooling from the network. The repository is identified, but the command does not pin a commit.
Faible
knowledge/install.md:119
Hardcoded URL
obscura fetch https://example.com # one-shot render
The guide provides an executable browser or scraper command that makes a network request. It uses example.com, but users are expected to substitute an engagement target.
Faible
knowledge/install.md:122
Hardcoded URL
obscura scrape https://example.com # parallel scrape (needs worker binary)
The guide provides an executable browser or scraper command that makes a network request. It uses example.com, but users are expected to substitute an engagement target.
Faible
knowledge/install.md:130
Hardcoded URL
git clone https://github.com/ekomsSavior/bizlogic && cd bizlogic
This is an executable clone or install command that downloads third-party security tooling from the network. The repository is identified, but the command does not pin a commit.
Faible
knowledge/install.md:209
Hardcoded URL
git clone --depth 1 https://github.com/danielmiessler/SecLists.git ~/wordlists/SecLists
This is an executable clone or install command that downloads third-party security tooling from the network. The repository is identified, but the command does not pin a commit.
Faible
knowledge/methodology.md:111
Hardcoded URL
ffuf -u https://host/FUZZ -w seclists/... -of json # only paths NOT already in urls.t
This is an active ffuf command template for path discovery against a target host. It must remain confined to authorized scope and rate limits.
Faible
knowledge/tools.md:135
Hardcoded URL
git clone https://github.com/ekomsSavior/bizlogic && cd bizlogic
This is an executable clone or install command that downloads third-party security tooling from the network. The repository is identified, but the command does not pin a commit.

Facteurs de risque

⚙ Commandes externes (50)
knowledge/install.md:114 knowledge/install.md:284-291 knowledge/install.md:219 knowledge/install.md:19 knowledge/install.md:49 knowledge/install.md:52 knowledge/install.md:78 knowledge/install.md:99 knowledge/install.md:206 knowledge/payloads.md:56 knowledge/payloads.md:56 SKILL.md:13 SKILL.md:14 SKILL.md:15 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:26 SKILL.md:28 SKILL.md:31 SKILL.md:32 SKILL.md:34 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:40 SKILL.md:42 SKILL.md:46 SKILL.md:47 SKILL.md:48 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:53 SKILL.md:54 SKILL.md:60 SKILL.md:61 SKILL.md:62 SKILL.md:64 SKILL.md:65 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:74 SKILL.md:75 SKILL.md:76 SKILL.md:77
🌐 AccĂšs rĂ©seau (37)
knowledge/install.md:15 knowledge/install.md:21 knowledge/install.md:22 knowledge/install.md:69 knowledge/install.md:70 knowledge/install.md:71 knowledge/install.md:78 knowledge/install.md:105 knowledge/install.md:115 knowledge/install.md:116 knowledge/install.md:119 knowledge/install.md:122 knowledge/install.md:130 knowledge/install.md:209 knowledge/methodology.md:111 knowledge/methodology.md:134 knowledge/payloads.md:101 knowledge/payloads.md:39 knowledge/payloads.md:42 knowledge/payloads.md:43 knowledge/tools.md:135 knowledge/vuln-types.md:43 knowledge/vuln-types.md:21 SKILL.md:37 SKILL.md:50 SKILL.md:87 SKILL.md:88 SKILL.md:89 SKILL.md:90 SKILL.md:91 SKILL.md:92 SKILL.md:93 SKILL.md:94 SKILL.md:95 SKILL.md:96 SKILL.md:97 SKILL.md:98
📁 Accùs au systùme de fichiers (34)
knowledge/install.md:116 knowledge/install.md:117 knowledge/install.md:147 knowledge/install.md:169 knowledge/install.md:210 knowledge/install.md:228 knowledge/install.md:243 knowledge/install.md:252 knowledge/install.md:254 knowledge/install.md:255 knowledge/install.md:273 knowledge/install.md:116 knowledge/install.md:117 knowledge/install.md:147 knowledge/install.md:169 knowledge/install.md:210 knowledge/install.md:228 knowledge/install.md:243 knowledge/install.md:252 knowledge/install.md:254 knowledge/install.md:255 knowledge/install.md:273 knowledge/install.md:219 knowledge/methodology.md:125 knowledge/payloads.md:61 knowledge/payloads.md:84 knowledge/payloads.md:63 knowledge/tools.md:125 knowledge/tools.md:154 knowledge/vuln-types.md:77 knowledge/vuln-types.md:72 SKILL.md:14 SKILL.md:71 SKILL.md:89
🔑 Variables d’environnement (15)
knowledge/install.md:234 knowledge/install.md:246 knowledge/install.md:139 knowledge/install.md:232 knowledge/install.md:233 knowledge/install.md:235 knowledge/install.md:236 knowledge/install.md:237 knowledge/install.md:238 knowledge/install.md:244 knowledge/install.md:245 knowledge/install.md:247 knowledge/install.md:281 SKILL.md:36 SKILL.md:36

Motifs détectés

Network scanning tools×4System password file access×3
Audité par: codex
Partager et citer ce rapport

Partagez le rapport d’évaluation versionnĂ©, le badge neutre, la carte intĂ©grable et les citations. Skillstore prĂ©sente les preuves sans dĂ©cider si ce Skill est sĂ»r.

Ouvrir le rapport versionné
Évaluation de sĂ©curitĂ©

Copier le lien du rapport

https://skillstore.io/skills/yangtech-gh-awesome-bug-bounty/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/yangtech-gh-awesome-bug-bounty/security.svg)](https://skillstore.io/skills/yangtech-gh-awesome-bug-bounty?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/yangtech-gh-awesome-bug-bounty?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/yangtech-gh-awesome-bug-bounty/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/yangtech-gh-awesome-bug-bounty.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citations académiques (APA · BibTeX · CFF)

Citation APA

yangtech-gh. (2026). awesome-bug-bounty security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/yangtech-gh-awesome-bug-bounty/audits/1

Citation BibTeX

@techreport{yangtech-gh-yangtech-gh-awesome-bug-bounty-2026, author = {yangtech-gh}, title = {awesome-bug-bounty security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/yangtech-gh-awesome-bug-bounty/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "awesome-bug-bounty security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "yangtech-gh" date-released: "2026-09-24" url: "https://skillstore.io/skills/yangtech-gh-awesome-bug-bounty/audits/1" identifiers: - type: other value: "skillstore:yangtech-gh-awesome-bug-bounty:audit:1" description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Faible
55
Architecture
85
Maintenabilité
87
Contenu
65
Communauté
91
Conformité aux spécifications

Ce que vous pouvez créer

Create a Scoped Hunt Plan

Turn program rules into a phased reconnaissance and testing plan with rate limits and exclusions.

Choose a Verification Workflow

Select appropriate proxy, scanner, and replay tools for a suspected vulnerability class.

Standardize Team Reports

Convert reproduced findings into consistent, evidence-focused reports with impact and remediation.

Essayez ces prompts

Build a Beginner Plan 
Create a safe bug bounty plan for [authorized program]. Use the stated scope, exclusions, rate limits, and test window. Start with passive checks.
Select a Testing Playbook 
For suspected [vulnerability type] on [in-scope feature], provide a non-destructive checklist, required evidence, stop conditions, and suitable tools.
Review a Candidate Finding 
Assess this authorized test result: [redacted evidence]. Identify missing controls, reproduction steps, likely impact, false-positive risks, and safe verification steps.
Design a Multi-Surface Workflow 
Design a deduplicated workflow for [authorized program] covering web, API, authentication, and MCP surfaces. Include tool boundaries, rate caps, evidence gates, and reporting.

Bonnes pratiques

  • Confirm written authorization, scope, exclusions, rate limits, and test windows before any active request.
  • Use minimal-impact proofs and stop when testing could change data, disrupt service, or expose unrelated users.
  • Redact credentials and personal data, then reproduce each finding before reporting it.

Éviter

  • Do not run scanners, payloads, or reconnaissance against targets outside the approved scope.
  • Do not execute unpinned installers or privileged commands without reviewing sources and obtaining confirmation.
  • Do not submit automated findings without stable reproduction, impact evidence, and duplicate checks.

Foire aux questions

Does this skill authorize security testing?
No. You must have explicit permission and follow the program rules for every target.
Can it run security tools?
It provides commands and MCP setup guidance, but execution should require user confirmation and validated scope.
Does it guarantee a valid vulnerability?
No. Scanner output and hypotheses remain candidates until a human reproduces them with clear evidence.
Can it help write reports?
Yes. It provides a structure for evidence, impact, severity, reproduction, and remediation.
Are cloud API keys required?
No. The skill documents local, deterministic, and no-key options for several workflows.
Is every installation command safe to copy directly?
No. Review versions, integrity checks, privileges, destination paths, and upstream instructions before execution.

Détails du développeur

Licence

MIT

RĂ©vision Skillstore

r1

Avis de version

L’auteur n’a dĂ©clarĂ© aucune version.

DĂ©pĂŽt

https://github.com/yangtech-gh/awesome-bug-bounty/tree/361447dc4d96d5e24223e8e467bf1fb376905b1d/skills/awesome-bug-bounty

RĂ©f

1cda4003aa9ea65a9606af00b33e9c706ef03e62

RĂ©cence de maintenance

30/09/2026

Utilisation

0 téléchargements · 0 vues

Structure de fichiers

📁 knowledge/

📄 business-logic.md

📄 install.md

📄 methodology.md

📄 payloads.md

📄 tools.md

📄 vuln-types.md

📄 SKILL.md

Compétences associées

Tout afficher