Does it require pre-installed software?

Yes, to execute the commands, you should have a Linux-based environment (like Kali or Ubuntu) with Go, Python, and the relevant security tools installed.

Can I use this for bug bounty hunting?

Yes, it specifically incorporates proven methodologies from top bug bounty hunters for effective reconnaissance and vulnerability discovery within defined scopes.

Does this skill provide automated reporting?

It assists in documenting findings and organizing tool outputs, making it significantly easier to generate comprehensive vulnerability reports for clients or bug bounty platforms.

What tools does this skill help automate?

It provides automated workflows and configurations for industry-standard tools including Amass, Subfinder, Nuclei, httpx, ffuf, and Dalfox.

How does it handle API security?

The skill includes specific modules for API enumeration, fuzzing endpoints with custom wordlists, and testing various HTTP methods for authorization bypasses.

Red Team Methodology & Bug Bounty Tools

Name: Red Team Methodology & Bug Bounty Tools
Author: claudiodearaujo

byclaudiodearaujo

•

安全与测试

Automates security reconnaissance and vulnerability discovery using proven red team methodologies and industry-standard security tools.

This skill equips security researchers and developers with a comprehensive workflow for performing penetration testing and bug bounty hunting directly within Claude. It integrates powerful tools like Amass, Subfinder, and Nuclei to automate subdomain enumeration, live host discovery, and technology fingerprinting. By following established methodologies—including the Jason Haddix method for application analysis—users can systematically identify attack surfaces, hunt for XSS vulnerabilities, and audit API endpoints while maintaining structured project tracking and professional reporting standards.

主要功能

01Automated subdomain enumeration and live host discovery

02Advanced XSS hunting pipelines and parameter extraction

03Comprehensive technology fingerprinting and stack analysis

04Integrated vulnerability scanning with Nuclei templates

05Systematic content discovery and hidden endpoint fuzzing

061 GitHub stars

使用场景

01Identifying hidden API endpoints and testing for common web vulnerabilities

02Conducting a comprehensive security audit of a web application's attack surface

03Automating reconnaissance workflows for active bug bounty programs

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro red-team-tools

For use in Claude.ai and ChatGPT

Download Skill