bug bounty recon

    1

    Structured bug bounty recon methodology and checklist runner based on curated industry resources.

    $15

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned

    Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIDeepSeekDeepSeekMuseMuse+22 more

    bug bounty recon

    Example session with this skill installed

    bug-bounty-recon checklist init --target example.com --out runs/example_project

    • Read your context and instructions
    • Compiled the bug bounty recon

    Recon run initialized for target example.com. A new directory has been created at runs/example_project containing the checklist and log files.

    Recon Checklist Initialization

    Step IDStep DescriptionStatus
    scopeConfirm program scope + authorisationPENDING
    learn-basicsHTTP, networking, Linux basicsPENDING
    setupUbuntu box, Burp, local web serverPENDING
    asset-discoveryPassive sources: crt.sh, Shodan, CensysPENDING
    subdomainssubfinder / Amass enumerationPENDING
    probe-livednsx resolve, httpx probe live hostsPENDING
    port-scannmap / naabu port scanPENDING
    crawl-fuzzkatana, waybackurls, ffuf / feroxbusterPENDING
    nuclei-scannuclei with updated templatesPENDING
    lab-practicePractise the vuln class in a lab firstPENDING
    manual-testTest by vuln class: XSS, CSRF, IDOR, SSRFPENDING
    reportWrite a clear, reproducible reportPENDING

    Next steps

    • Run bug-bounty-recon checklist mark scope done --run runs/example_project --note "Authorized per H1 program rules" to enable scanning.
    • Execute bug-bounty-recon subfinder example.com --out runs/example_project to begin subdomain discovery.
    • Review runs/example_project/checklist.md to track your progress.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    A bug bounty recon methodology for authorised testing: scope the target, discover assets, enumerate subdomains, scan ports and templates with nmap, nuclei and subfinder, and report what you found — with a learning path from beginner to hunting. Includes a 12-step checklist runner, tool wrappers that log real output, a 27-tool catalogue and 4 agent command prompts. For authorised, in-scope testing only. Built from the curated k3lick/bug-bounty-resources collection; the collection itself stays free on GitHub.

    Find more skills like this on the Claude Skills Marketplace, the Codex Skills Marketplace and the Gemini Skills Marketplace, or browse Claude Skills for Testing & Debugging.

    Wraps only subfinder, nmap, and nuclei. Requires local installation of security tools. Checklist marks are user-reported, not verified. Best for Ubuntu environments.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before buying a skill.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scan

    Security scan passed 4 days ago

    Software
    Python

    Permissions

    Terminal / Shell
    Network Access
    Read Files
    Write Files
    Environment Variables
    Listed4 days ago

    What's inside

    Frequently Asked Questions

    This skill solves the issue of fragmented recon workflows by providing a centralized CLI checklist and logging system that enforces a consistent methodology from asset discovery to final reporting.

    The skill is optimized for Linux environments (specifically Ubuntu) and requires Python 3.8+; it is designed to work with AI agents that have local shell execution capabilities.

    You receive the core recon workflow logic, the CLI checklist runner, and pre-configured logging wrappers for industry-standard tools like subfinder, nmap, and nuclei.

    No, you must have the external tools (like subfinder or nuclei) installed on your system; this skill acts as the intelligent orchestration and logging layer that wraps around them.

    The skill includes a dedicated 'Learning Path Guidance' feature that provides curated resources on networking, Linux, and vulnerability classes to help you master the methodology.

    The skill provides a structured directory for every target, where the checklist runner logs all scope authorizations, tool outputs, and manual notes into a verifiable audit trail.

    New in Testing & Debugging