<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
---
name: bug-bounty
description: >-
  Bug bounty hunting techniques for discovering and reporting security vulnerabilities in applications and APIs.
domain: cybersecurity
subdomain: bug-bounty
tags:
  - bug-bounty
  - security
version: "1.0"
author: defconxt
license: AGPL-3.0
---

# bug bounty

## Overview

Bug bounty hunting techniques for discovering and reporting security vulnerabilities in applications and APIs.

## When to Use

Activate this domain when tasks involve bug bounty techniques, methodologies, or tools.

## Quick Reference

```bash
# List available techniques
ls skills/bug-bounty/techniques/

# Run a specific technique agent
python3 skills/bug-bounty/techniques/*/scripts/agent.js --help
```

## Capabilities

| Capability | Description |
|------------|-------------|
| Technique Assessment | Evaluate bug bounty posture |
| Tool Integration | Leverage specialized bug bounty tooling |
| Reporting | Generate structured findings |
| Automation | Script common bug bounty workflows |

## Workflow

1. **Scope** — Define bug bounty assessment boundaries
2. **Discover** — Identify targets and attack surface
3. **Assess** — Apply relevant techniques
4. **Document** — Record findings with evidence
5. **Report** — Generate actionable recommendations

## Techniques

See individual technique directories under `techniques/` for detailed implementations.

## References

- OWASP Testing Guide
- NIST SP 800-115 Technical Guide to Information Security Testing
- MITRE ATT&CK Framework
