Does this skill require external API keys?

While the core methodology works offline, many integrated tools like Amass or Shodan require personal API keys for comprehensive external data gathering.

What security tools does this skill support?

The skill provides workflows and configurations for industry-standard tools including Amass, Subfinder, httpx, Nuclei, ffuf, Dalfox, and WayBackUrls.

Is the Jason Haddix methodology included?

Yes, it incorporates the 'Haddix Method' for application analysis, focusing on high-priority areas like file uploads, API endpoints, and multi-tenancy logic.

Can I use this skill to automate bug hunting?

Yes, it includes structured methodologies and shell scripts to automate the end-to-end recon process from subdomain discovery to vulnerability scanning.

Red Team Security & Bug Bounty

Name: Red Team Security & Bug Bounty
Author: claudiodearaujo

byclaudiodearaujo

•

Security & Testing

Automates security reconnaissance and bug bounty hunting workflows using proven red team methodologies and expert tool configurations.

This skill provides a comprehensive framework for security researchers to perform thorough attack surface mapping and vulnerability discovery within Claude Code. It implements sophisticated workflows from top bug bounty hunters, covering multi-stage subdomain enumeration, live host discovery, technology fingerprinting, and automated XSS hunting. By leveraging established tools like Amass, Nuclei, and Subfinder, it helps users build robust security pipelines to identify critical vulnerabilities and document findings for professional reporting.

Key Features

01Jason Haddix methodology for deep application analysis

021 GitHub stars

03Live host identification with technology stack fingerprinting

04Vulnerability scanning integration with Nuclei templates

05Automated XSS hunting and parameter discovery pipelines

06Comprehensive multi-source subdomain enumeration and discovery

Use Cases

01Conducting internal security audits on corporate attack surfaces

02Automating the discovery of shadow IT and exposed web endpoints

03Performing initial reconnaissance for bug bounty programs

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro red-team-tools

For use in Claude.ai and ChatGPT

Download Skill