bb-methodology

IndexedMIT★ 3

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/gl1tch0x1-bb-methodology

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

The publisher has not written a description yet.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions: not checked yet.

What's inside

Skill name: bb-methodology
Description: None
License: MIT
Instructions: 18 lines in SKILL.md · view on GitHub

Agent Skills spec issues

missing YAML frontmatter
name: missing
description: missing

Files (1)

SKILL.md

SKILL.md (first lines)

# Advanced Bug Bounty Methodology

## 5-Phase Non-Linear Workflow
1. **Intelligence Gathering**: Beyond recon. Read tech blogs by company devs, check their GitHub for coding patterns.
2. **Deep Surface Mapping**: Build a state machine of the app. Map every transition.
3. **Anomaly Probing**: Look for response time variances, header inconsistencies, and logic gaps.
4. **Targeted Exploitation**: Apply the A->B chain method.
5. **Impact Maximization**: Chain to ATO or RCE.

## Developer Psychology Framework
- **The "Happy Path" Bias**: Developers test what should work. You test what shouldn't.
- **The "Internal" Illusion**: If it's behind a VPN or internal, it's often less secure.
- **The "Refactor" Risk**: New code replacing old code is the most fertile ground for bugs.

## Route Selection: Wide vs. Deep
- **Wide**: Scan 100 subdomains for quick wins (403 bypass, open S3).
- **Deep**: Spend 3 days on ONE complex feature (e.g., the billing system).

From gl1tch0x1/SecAgent, MIT.

Signals

Stars: 3
Forks: 0
Open issues: 0
Last commit (this folder): Jun 1, 2026 (5 months ago)

From GitHub (fetched Oct 24, 2026).

Details

License: MIT
Repository: github.com/gl1tch0x1/SecAgent
Website: github.com/gl1tch0x1/cog-ai
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: GitHub github-graphql