<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: writing-bug-bounty-reports
description: >-
  Write clear, impactful reports that maximize payout and facilitate rapid triage.
domain: cybersecurity
subdomain: bug-bounty
tags:
  - reporting
  - bug-bounty
  - communication
  - triage
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: []
---

# Writing Bug Bounty Reports

## Overview

Write clear, impactful reports that maximize payout and facilitate rapid triage.

## Prerequisites

| Requirement | Install |
|---|---|
| Markdown editor | Structured reports |
| Screenshot tools | Evidence |
| Python 3.10+ | For agent tooling |

## Key Concepts

Effective reports include clear title, severity, step-by-step
reproduction, impact assessment, and remediation guidance.

## Quick Reference

```bash
node agent.js generate --vuln-type ssrf --severity high
node agent.js validate --report report.md
node agent.js cvss --vector 'AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N'
node agent.js format --report report.md --platform hackerone
```

## Workflow

1. Document with clear title
2. Assign CVSS severity
3. Write reproduction steps
4. Capture evidence
5. Assess impact
6. Provide remediation
7. Submit

## Verification

- Verify all sections
- Confirm repro accurate
- Validate CVSS
- Check evidence
- Verify formatting

## References

- OWASP Testing Guide — https://owasp.org/www-project-web-security-testing-guide/
- MITRE ATT&CK — https://attack.mitre.org/
- NIST SP 800-53 — https://csf.tools/reference/nist-sp-800-53/
