🎯 Claude CyberSecurity Skills

Claude Code Skills + for HackerOne & Bugcrowd hunters. Recon → Hunt → Validate → Report. End-to-end.

---

What is this?

Claude CyberSecurity Skills transforms Claude Code into a bug bounty hunting partner that knows the workflow, the tools, the payloads, and the platforms.

Most security repos give you a tool list or a methodology PDF. This gives you 30 production-grade Skills that Claude auto-loads when you describe a task — each one wired to real tools (subfinder, nuclei, sqlmap, ffuf, dalfox, etc.), with custom payloads, validation gates, and HackerOne/Bugcrowd-specific report templates.

Tell Claude: "hunt this new H1 program at target.com" Claude: chains program-selection → scope-analysis → subdomain-enum → asset-discovery → fingerprinting → suggested vuln vectors → ready-to-fire commands.

📖 For the full deep-dive: see PROJECT_REPORT.md — comprehensive 22-section report covering architecture, all 30 skills, playbooks, arsenal, ROI analysis, and roadmap.

---

🧭 The Workflow

                  ┌─────────────────┐
                  │  1. PRE-HUNT    │  pick program • parse scope • mind-map
                  └────────┬────────┘
                           │
                  ┌────────▼────────┐
                  │   2. RECON      │  subdomains • assets • JS • params
                  └────────┬────────┘  (continuous monitoring optional)
                           │
                  ┌────────▼────────┐
                  │   3. HUNT       │  15 vuln classes • chained playbooks
                  └────────┬────────┘
                           │
                  ┌────────▼────────┐
                  │  4. VALIDATE    │  7-Question Gate • 4 pre-submit gates
                  └────────┬────────┘
                           │
                  ┌────────▼────────┐
                  │   5. REPORT     │  H1 / Bugcrowd / Intigriti templates
                  └─────────────────┘

---

📚 The 30 Skills

Phase 1 — Pre-Hunt (3)

#	Skill	Trigger phrases
01	program-selection	"should I hunt this program", "pick H1 target"
02	scope-analysis	"parse this scope", "what's in scope"
03	threat-modeling-mindmap	"threat model this app", "mind map target"

Phase 2 — Recon (6)

#	Skill	Trigger phrases
04	subdomain-enum	"enumerate subdomains", "subfinder run"
05	asset-discovery	"find live hosts", "probe with httpx"
06	fingerprinting	"tech stack", "what's running"
07	js-analysis	"analyze JS", "find endpoints in JS"
08	content-discovery	"fuzz directories", "find parameters"
09	continuous-monitoring	"monitor target", "alert on new subdomain"