bb-methodology

仓库创建 2026年5月5日最近提交 4 天前SkillHot 收录 20 天前

▸ 精选理由

强调思维框架与阶段确认，帮助猎手在未知情境中快速决策和切换模式。

这个 Skill 做什么

漏洞赏金的五阶段非线性工作流与批判性思维方法论引导。

在开始一次漏洞赏金或换目标时，用五阶段的非线性工作流配合批判性思维把思路理清，帮你决定下一步该做什么。把开发者心理、异常检测和 What‑If 实验等方法结合起来，并把工作路由到合适的工具。适合卡壳、切换阶段或想要总体策略时调用。

▸ 展开 SKILL.md 英文原文

Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next. Master orchestrator that combines the 5-phase non-linear hunting workflow with the critical thinking framework (developer psychology, anomaly detection, What-If experiments). Routes to all other skills based on current hunting phase. Also use when asking "what should I do next" or "where am I in the process."

垂直行业方法论决策框架猎手思维通用

3.1k

Stars

480

Forks

仓库内 Skill

+245

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/elementalsouls/Claude-BugHunter/main/skills/bb-methodology/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/elementalsouls/Claude-BugHunter/main/skills/bb-methodology/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Bug Bounty Methodology: Workflow + Mindset

Master orchestrator for hunting sessions. Combines the 5-phase non-linear workflow with the critical thinking framework that separates top 1% hunters from the rest.

---

## PART 0: MODE CONFIRMATION (Before Anything Else)

**Confirm the engagement type before deciding what counts as a finding.** The same target produces a different report shape depending on which mode applies. Getting this wrong is the single biggest waste of time in this workflow — answer it explicitly before Phase 0.

| Engagement type | What counts as a finding | What gets rejected |
|---|---|---|
| **Bug bounty** (H1 / Bugcrowd / Intigriti / private VDP) | Impact-demonstrate

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有