Download

Skill UI

Browse and discover 9185+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Bug Bounty , found 21 results

Default Newest Most Downloaded

API Fuzzing Bug Bounty

api-fuzzing-bug-bounty

sickn33/antigravity-awesome-skills

Provides step-by-step API fuzzing and exploitation tactics for REST, SOAP, and GraphQL during bug bounty or penetration tests, covering reconnaissance, auth bypass, IDOR, injection, and GraphQL-specific attacks.

API Fuzzing Techniques

api-fuzzing-for-bug-bounty

sickn33/antigravity-awesome-skills

Guides bug bounty hunters through API fuzzing and penetration testing, covering REST, SOAP, and GraphQL recon, authentication bypass, IDOR methods, injections, method abuse, GraphQL attacks, and payload delivery techniques.

Comprehensive API Security Testing Workflow

api-security-testing

sickn33/antigravity-awesome-skills

A specialized workflow guide for comprehensive security testing of REST and GraphQL APIs. It systematically covers critical security aspects such as authentication validation (OAuth2, JWT), authorization checks (IDOR, privilege escalation), input validation (SQL/NoSQL injection), rate limiting enforcement, and secure error handling. Ideal for vulnerability assessment, bug bounty programs, and pre-deployment security audits.

Red Team Recon Toolkit

sickn33/antigravity-awesome-skills

Centralizes proven red team methodologies into an automated reconnaissance and vulnerability discovery workflow that sequences asset discovery, live host validation, fingerprinting, content hunting, and exploit surface analysis for bug bounty and defensive assessments.

Red Team Recon Methodology

red-team-tools-and-methodology

sickn33/antigravity-awesome-skills

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

Web Application Security Testing Workflow

web-security-testing

sickn33/antigravity-awesome-skills

This comprehensive workflow guides users through a multi-phase process for assessing web application security. It is designed to systematically test for common vulnerabilities listed in the OWASP Top 10, including SQL injection, XSS, broken authentication, and access control issues. Ideal for professional penetration testing, security auditing, and bug bounty hunting.

API Fuzzing Bug Bounty

api-fuzzing-for-bug-bounty

zebbern/claude-code-guide

Guides bug bounty hunters through REST, SOAP, and GraphQL API fuzzing to uncover authentication weaknesses, IDOR, injections, and endpoint bypasses while outlining practical reconnaissance and exploitation workflows.

Red Team Recon Methodology

red-team-tools-and-methodology

zebbern/claude-code-guide

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

Subfinder Subdomain Enumeration

performing-subdomain-enumeration-with-subfinder

mukul975/Anthropic-Cybersecurity-Skills

Use ProjectDiscovery’s Subfinder to passively enumerate target domains’ subdomains, configure API sources, and stream results to httpx/dnsx/nuclei for validation, rate control, and attack-surface mapping during penetration tests or bug bounty reconnaissance.

Systematic Vulnerability Identification Methodology

offensive-bug-identification

SnailSploit/Claude-Red

A comprehensive methodology for discovering potential software vulnerabilities. It outlines advanced techniques including static analysis, dynamic analysis, fuzzing, taint tracking, and modern attack surface mapping (e.g., kernel, drivers). Ideal for professional code audits, bug bounty hunting, and building robust vulnerability research pipelines.

File Upload Vulnerability Checklist

offensive-file-upload

SnailSploit/Claude-Red

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

GraphQL Security Vulnerability Assessment

offensive-graphql

SnailSploit/Claude-Red

A comprehensive checklist designed for assessing the security posture of GraphQL endpoints. It covers advanced vulnerabilities such as introspection abuse, IDOR, query depth/complexity DoS, injection attacks (SQLi/NoSQLi), and authorization bypass mechanisms. Essential for professional penetration testing and bug bounty hunting.

Language