What security methodologies does this skill implement?

The skill follows proven industry standards, specifically incorporating the Jason Haddix methodology for web application analysis and comprehensive reconnaissance.

Which security tools are supported in these workflows?

It provides optimized workflows for industry-standard tools including Amass, Subfinder, Nuclei, ffuf, httpx, Dalfox, and various Seclists configurations.

Can I use this for automated XSS hunting?

Yes, the skill includes specialized pipelines for parameter extraction and automated XSS testing using tools like ParamSpider, Gxss, and Dalfox.

Does this skill require specific environmental setup?

Yes, it assumes a Linux-based environment (like Kali or Ubuntu) with Go, Python, and Ruby installed to support the various security tools mentioned.

Red Team Security & Bug Bounty Tools

Name: Red Team Security & Bug Bounty Tools
Author: claudiodearaujo

byclaudiodearaujo

•

Seguridad y Pruebas

Automates advanced security reconnaissance and vulnerability discovery using proven red-team methodologies and industry-standard toolsets.

This skill integrates professional security research techniques and automated workflows to streamline the discovery of attack surfaces and web vulnerabilities. It implements methodologies used by top bug bounty hunters, covering everything from initial ASN lookups and multi-source subdomain enumeration to technology fingerprinting and automated XSS hunting. By providing structured command sequences and analytical frameworks like the Jason Haddix method, it serves as a comprehensive companion for security researchers and developers performing deep-dive security audits and penetration testing.

Características Principales

01Historical URL mining and automated API endpoint enumeration

021 GitHub stars

03Comprehensive technology stack fingerprinting and technology-specific scanning

04Automated multi-source subdomain enumeration and live host discovery

05Advanced vulnerability scanning for XSS, CVEs, and sensitive misconfigurations

06Implementation of the Jason Haddix 'Heat Map' methodology for application analysis

Casos de Uso

01Conducting comprehensive reconnaissance for bug bounty programs and security research

02Performing automated security audits and vulnerability assessments on web infrastructure

03Identifying hidden attack surfaces, sensitive files, and undocumented API endpoints

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro red-team-tools

For use in Claude.ai and ChatGPT

Download Skill