Skip to content
Get packs

SRC Hunter Bug Bounty Workflow

Guides an agent through authorized bug bounty and SRC vulnerability hunting, from recon to report.

Source Download skill
Repository
zhaoxuya520/reverse-skill
Stars
43,969
Licence
MIT
Files
15 files

What it does

This skill gives an AI agent a structured playbook for security testing of programs run by Security Response Centers (SRCs) and bug bounty platforms. It walks the agent through five phases (intake, passive recon, active enumeration, vulnerability hunting, and report writing), with reference files covering about 19 attack types, payload lists, WAF bypass ideas, Chinese software fingerprints and default credentials, and case statistics. It is meant to be used only when there is a documented scope and authorization.

Great for

  • Security researchers who take part in authorized bug bounty or SRC programs
  • Penetration testers who need a checklist for a defined in-scope target
  • Students learning a bug bounty workflow in a lab or authorized environment

Skip it if

  • Testing systems without written authorization or outside the program scope, since this is illegal and violates program rules
  • Pure source code audits, which the SKILL.md itself says belong to a different skill
  • Simple CTF puzzles or general defensive security questions, which the skill says are out of scope

Try asking

  • “Help me plan recon for an in-scope subdomain of a company running a bug bounty program on HackerOne”
  • “Walk me through testing this API endpoint for IDOR, using the arbitrary-x-authz playbook”
  • “Write a report for a confirmed open redirect, with reproduction steps and CVSS 4.0 impact”
Step-by-step guide: how to use SRC Hunter Bug Bounty WorkflowInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 15 original files, the MIT licence and an attribution note.

    src-hunter.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip src-hunter.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip src-hunter.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Confirm written scope and authorization before any active testing; the skill itself forbids auto-granting authorization
  • Load only the playbook you need and leave the payload and WAF bypass files closed unless the user explicitly asks and scope is granted
  • Verify the payload corpus integrity (Git hash and the referenced security review) rather than disabling antivirus when it flags payloads

What's inside

  • .claude-plugin/marketplace.json
  • README.en.md
  • README.md
  • references/dictionaries/00-index.md
  • references/dictionaries/chinese-srcfingerprints.md
  • references/dictionaries/default-credentials-cn.md
  • references/industry/00-index.md
  • references/industry/banking-finance.md
  • references/industry/telecom-isp.md
  • references/methodology/00-index.md
  • references/methodology/01-attack-priority.md
  • references/methodology/02-bypass-toolkit.md
  • references/methodology/03-evidence-discipline.md
  • references/methodology/04-control-gap-hunting.md
  • SKILL.md

Redistributed unmodified from zhaoxuya520/reverse-skill under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.