Best bug bounty skills, page 2

Flags API endpoints whose data or actions look like they should need a login but currently don't, as part of authorized security testing.

uphiago/recon-skills

A skill your agent uses when starting or restructuring an authorized external web and API assessment.

uphiago/recon-skills

Mobile (Android + iOS) application penetration testing methodology.

SnailSploit/Claude-Red

Bugcrowd-specific reporting tactics complementing report-writing

sickn33/agentic-awesome-skills

Perform structured reconnaissance and attack surface enumeration for authorized penetration tests, CTF challenges, and bug bounty programs.

briiirussell/cybersecurity-skills

Attack cameras via RTSP, ONVIF, Axis config when 554 open. An agent skill from uphiago/recon-skills.

uphiago/recon-skills

Map subdomains via crt.sh and subfinder at recon kickoff. An agent skill from uphiago/recon-skills.

uphiago/recon-skills

Screenshot all live hosts for rapid visual triage and technology fingerprinting.

uphiago/recon-skills

Complete bug bounty workflow

sickn33/agentic-awesome-skills

Domain assessment and web application mapping - subdomain discovery, port scanning, endpoint enumeration, API discovery, and attack surface analysis.

transilienceai/communitytools

Hunting skill for auth bypass vulnerabilities. An agent skill from elementalsouls/Claude-BugHunter.

elementalsouls/Claude-BugHunter

Hunting skill for cache poison vulnerabilities. An agent skill from elementalsouls/Claude-BugHunter.

elementalsouls/Claude-BugHunter

Hunting skill for sqli vulnerabilities. An agent skill from elementalsouls/Claude-BugHunter.

elementalsouls/Claude-BugHunter

Probe a target for accidentally-public admin / debug / introspection endpoints — Spring Boot Actuator, Apache server-status, Prometheus metrics, GraphQL playground, Swagger UI, phpMyAdmin…

jeremylongshore/tons-of-skills-marketplace

Triage ASM/recon output for ownership before testing — separate the target's real assets from namespace-collision noise.

elementalsouls/Claude-BugHunter

Hunting skill for business logic vulnerabilities. An agent skill from majiayu000/claude-skill-registry.

majiayu000/claude-skill-registry

Draft and file a HackerOne report in the browser, with a proof-of-concept package and demo-video notes.

forefy/.context

Map a bug-bounty scope and rank targets by payout, crowding, and freshness.

forefy/.context

Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi — report templates, human tone guidelines, impact-first writing, CVSS 3.1 scoring, title formula, impact statement formula, severity…

elementalsouls/Claude-BugHunter

Audit all open HackerOne-sourced VULN Jira tickets and their linked engineering child items to identify what needs action.

bitwarden/ai-plugins

Write security findings and assessment reports — severity scoring with CVSS and business impact, reproducible proof of concept, remediation guidance, executive summaries, and coordinated disclosure.

trilwu/secskills

Entry P0 primary router and operating doctrine for HackSkills.

yaklang/hack-skills

Enumerate web technologies, headers, endpoints, and metadata from a target

NeoTheCapt/RedteamAgent

Reconnaissance and methodology playbook. An agent skill from langbyyi/CyberStrikeAI-SRC.

langbyyi/CyberStrikeAI-SRC

Operate Cyberful as an authorized application-security control room.

cyberful/cyberful

A skill your agent uses whenever the user wants to find, shortlist, vet, or enrich US cybersecurity firms — pen-testing/red team, security audits, vCISO, SOC 2 readiness, incident response, managed…

jeremylongshore/tons-of-skills-marketplace

Plans and runs authorized reconnaissance to enumerate a target's external attack surface (DNS, subdomains, ports, web tech) and produces a prioritized report.

criptogus/agent-evolve-network