blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
5
claude
bug-bounty-methodology
Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
/
Plugin bug-bounty-methodology from marketplace libre-secops in Ormus-Solutions/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (2)
recon-methodologyReconnaissance methodology for authorized bug bounty programs: passive recon (certificate transparency, search engine and code dorking, historical URLs), in-scope active recon (subdomain enumeration, live host probing, content and JavaScript analysis), and attack surface mapping. Use when scoping re
vuln-report-writingGuide to vulnerability reports that get accepted and triaged: title writing, CVSS v3.1 scoring, reproduction steps, impact writing, the report lifecycle, chaining, evidence, and minimal PoC scripts. Use when drafting or reviewing a bug bounty or disclosure report.
Slash commands (2)
/bug-bounty-methodology:recon-planGenerate a reconnaissance plan for an authorized bug bounty target: passive and active recon phases within the program's scope, tool suggestions, an attack surface map, and testing priorities.
/bug-bounty-methodology:vuln-reportWrite a bug bounty vulnerability report for a confirmed finding: descriptive title, reproduction steps, HTTP evidence, proof of concept, impact, and remediation.
Subagents (2)
bug-bounty-hunterUse this agent when planning testing on an authorized bug bounty program (HackerOne, Bugcrowd, Intigriti, YesWeHack) and you need a scope-respecting methodology: passive and active recon, attack surface mapping, and test focus areas such as IDOR, SSRF, auth bypass, and API flaws. It produces an enga
vuln-report-writerUse this agent when you have a confirmed finding from an authorized program and need to write or improve the submission report. It produces a clear title, CVSS v3.1 vector, CWE classification, reproduction steps a triager can follow, HTTP evidence, business impact, and remediation, formatted for Hac
More from Ormus-Solutions/LibreSecOps-Claude-Code
All 33 plugins →compliance-frameworks
claudeCompliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
2 skills · 2 commands · 2 agents
5
container-security
claudeContainer security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
2 skills · 2 commands · 2 agents
5
devsecops-pipelines
claudeSecurity-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
5
forensics-analysis
claudeDigital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
5
Identity and access management: IAM architecture, SSO and MFA design, RBAC/ABAC/ReBAC access control models, authentication flow review, and access audits.
2 skills · 2 commands · 2 agents
5
Similar plugins
cra-readiness
claudeGet products ready for the EU Cyber Resilience Act (Regulation 2024/2847). Four deterministic stdlib scripts: a scope classifier that sorts a portfolio into default, important class I/II and critical (Annex III/IV), blocks conformity routes Article 32 does not allow, checks support periods and names the CSIRT for Article 14 reports; an Article 14 clock for the 24h/72h/14-day/one-month deadlines live since 11 September 2026; an Annex I/II/VII gap check before the EU declaration of conformity; and an SBOM floor check for CycloneDX and SPDX. Ships cs-cra-officer agent, /cs-cra-readiness and /cs-cra-report commands, 3 cited references and an Article 14 runbook.
1 skill · 2 commands · 1 agent
alirezarezvani/claude-skills 29,725
agentic-bug-hunter
claudeAI-powered bug bounty toolkit — recon, vulnerability hunting, validation gates, and submission-ready reports for HackerOne, Bugcrowd, Intigriti, and Immunefi.
26 skills · 43 commands
awarexone/Agentic-Bug-Hunter 5,846
claude-bughunter
claude83-skill bug-hunting & external red-team bundle — 58 hunt-* web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, Burp MCP integration. Skills auto-load by topic; 15 slash commands.
83 skills · 15 commands
elementalsouls/Claude-BugHunter 5,641
touch-recon
claudeMobile reconnaissance — understand the app's tech stack, architecture, dependencies, and health for takeover. Use when asked to "understand this app", "mobile assessment", or "app health".
1 skill
jeremylongshore/tons-of-skills-marketplace 2,917
Casefile
codexPersistent security case tracking for bug bounties, CTFs, and security audits.
1 skill · 1 MCP server
hashgraph-online/awesome-codex-plugins 1,566
acm-ccs-skills
claudeTwelve CCS-specific skills for security-conference submission strategy, grounded in the official ACM CCS 2026 Call for Papers, call for artifacts, HotCRP cycle sites, and SIGSAC award and steering pages.
12 skills
brycewang-stanford/Awesome-Journal-Skills 1,413
Maintain bug-bounty-methodology?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins33 plugins