claude

bugbounty-methodology

Use when hunting on an in-scope bug bounty program and you need a complete, repeatable methodology that takes you from scope reading to payout.

0 on GitHubby Muhammad Izaz Haiderv1.0.0MITupdated 16 days agobugbounty
/

Plugin bugbounty-methodology from marketplace agent-arsenal in mizazhaider-ceh/AgentArsenal. Commands read from the repo's manifest — 12 days ago.

What it installs

Skills (4)

  • bugbounty-methodology

    Use when hunting on an in-scope bug bounty program and you need a complete, repeatable methodology that takes you from scope reading to payout. Covers the five phases of a professional hunt (scope and rules of engagement, reconnaissance, application mapping, systematic exploitation per bug class, an

  • bugbounty-methodology-exploitation-phase

    Use when you have a mapped in-scope target and need the systematic exploitation phase of a bug bounty hunt. Covers the ordered per-bug-class testing sequence (access control and IDOR, authentication, XSS, SQLi, SSRF, file upload, business logic, APIs), how to work one class across the full surface b

  • bugbounty-methodology-recon-phase

    Use when you are in the reconnaissance phase of an in-scope bug bounty hunt and need the exact ordered pipeline. Covers passive subdomain collection (subfinder, amass passive, certificate transparency), DNS resolution and live-host probing (dnsx, httpx), paced port scanning, content discovery (ffuf)

  • bugbounty-methodology-reporting-phase

    Use when a finding is validated on an in-scope bug bounty target and needs to become a payout-ready report. Covers the triage-before-writing checklist (clean-session reproduction, impact confirmation, duplicate search), the report structure triagers reward (specific title, justified severity, number

View source on GitHub

More from mizazhaider-ceh/AgentArsenal

All 353 plugins →

web-sqli

claude

Use when testing a web application for SQL injection on an authorized engagement.

7 skills

0

nmap-methodology

claude

Use when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.

6 skills

0

privesc-linux

claude

Use when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.

6 skills

0

web-xss

claude

Use when testing a web application for cross-site scripting on an authorized engagement.

6 skills

0

ad-enumeration

claude

Use when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.

5 skills

0

api-security-testing

claude

Use when testing REST, GraphQL, or internal APIs on an authorized engagement.

5 skills

0

Similar plugins

headroom-skill

claude

Skill: add headroom-ai compress() to a Python or TypeScript app to cut LLM input tokens (tool outputs, logs, JSON, chat history). No API key.

1 skill

headroomlabs-ai/headroom 79,508

ppt-master

claude

Generate natively editable PPTX from PDF / DOCX / URL / Markdown — real DrawingML shapes, text boxes, charts, and animations. Note: run `pip install -r requirements.txt` inside the installed plugin directory for the Python post-processing scripts to work.

1 skill

hugohe3/ppt-master 76,375

brightdata-plugin

claude

Web scraping, Google search, structured data extraction, and MCP server integration powered by Bright Data. Includes 7 skills: scrape any webpage as markdown (with bot detection/CAPTCHA bypass), search Google with structured JSON results, extract data from 40+ websites (Amazon, LinkedIn, Instagram, TikTok, YouTube, and more), orchestrate Bright Data's 60+ MCP tools, built-in best practices for Web Unlocker, SERP API, Web Scraper API, and Browser API, Python SDK best practices for the brightda...

21 skills

anthropics/claude-plugins-official 47,076

python-development

claudecodex

Modern Python development with Python 3.12+, Django, FastAPI, async patterns, and production best practices

16 skills · 1 command · 3 agents

wshobson/agents 42,461

Bright Data

claude

Web scraping, Google search, structured data extraction, and MCP server integration powered by Bright Data. Includes 7 skills: scrape any webpage as markdown (with bot detection/CAPTCHA bypass), search Google with structured JSON results, extract data from 40+ websites (Amazon, LinkedIn, Instagram, TikTok, YouTube, and more), orchestrate Bright Data's 60+ MCP tools, built-in best practices for Web Unlocker, SERP API, Web Scraper API, and Browser API, Python SDK best practices for the brightda...

21 skills

anthropics/knowledge-work-plugins 35,601

Maintain bugbounty-methodology?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins353 plugins