Security Bounty Hunter is a specialized Claude Code skill designed to streamline the discovery of remotely reachable vulnerabilities. It prioritizes practical exploitability over theoretical best-practice violations, focusing on high-severity patterns like SSRF, authentication bypass, and RCE. By filtering out low-signal findings and focusing on user-controlled data paths, it helps developers and security researchers prepare high-quality, actionable submissions for bounty platforms like HackerOne, Huntr, or Bugcrowd.
主要功能
01Includes a built-in quality gate to verify exploitability and impact before submission
02Prioritizes remotely reachable, user-controlled attack paths over local-only issues
03Automates the triage of static analysis results to eliminate low-signal noise
04Targets high-impact vulnerabilities including SQLi, RCE, SSRF, and Path Traversal
05Provides a standardized reporting structure for professional vulnerability disclosures
06214,597 GitHub stars
使用场景
01Scanning open-source or private repositories for bounty-eligible security flaws
02Preparing detailed technical reports for responsible disclosure programs
03Triaging potential security risks in web application endpoints and request handlers