jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
Methodology reference for Mastermind Bug Bounty runtime. Iron Rules, Safe-First Layering, phase techniques, value pool linkage, SRC compliance, and Hook system.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
AI/LLM security testing specialist. Tests for prompt injection, jailbreak, MCP/Agent attacks, RAG poisoning, system prompt extraction, and tool/function call abuse. Optional phase.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
An API testing skill that discovers how endpoints use parameters and then tests those endpoints with realistic values and targeted variations. An endpoint is a URL or operation that an application exposes for requests.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
Access control bypass specialist. Handles 401/403/405 responses using path manipulation, HTTP method switching, header injection, middleware-specific techniques, and JWT token attacks. Third phase in the pipeline.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
A cryptography and encoding analysis tool for extracting keys, decoding data, examining JSON Web Tokens, and reversing custom signatures or obfuscation. Cryptography protects data by transforming it so only intended users can read or verify it.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
★ Exploit + Report: vulnerability exploitation specialist. Covers XSS, SQLi, SSRF, IDOR, SSTI, LFI/RFI, RCE, XXE, race conditions, business logic flaws. Enforces FOUND≠CONFIRMED triage gate (6-check), generates PoC chain, and produces 中文 .docx HackerOne/SRC-format reports. Final required phase.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
A web reconnaissance tool for collecting and examining JavaScript files, identifying the technologies a site uses, finding API routes, and checking source code for exposed secrets or leaked data.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
Report generation specialist. Converts triage-approved findings into HackerOne-format reports with CVSS scoring, PoC evidence chains, and remediation guidance. Final phase in the pipeline.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
401/403/405 authentication bypass techniques. Covers path manipulation, HTTP method switching, header injection, protocol downgrade, multi-position fuzzing, and middleware- specific bypass strategies with full payload dictionary.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
Web Cache Poisoning detection and exploitation. Covers unkeyed headers, parameter cloaking, cache key normalization, XSS via cache, and DoS via cache. Targets: CDN (Cloudflare/Akamai/Fastly), reverse proxy (Varnish/Nginx), application-level caching (Redis/Memcached).
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
An API testing method that uses values returned by one endpoint as inputs to test other endpoints. An API is a set of web interfaces that software uses to exchange data.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
Dependency version fingerprinting and CVE matching. Fastest ROI: identify framework/library versions from JS, headers, error pages, default paths, then match against known CVEs (Fastjson, Shiro, Log4j, Spring, Struts2, Laravel, etc.).
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
GraphQL API security testing v2. Coverage: introspection bypass (6 techniques), clairvoyance field brute-force, alias-based rate limit bypass, batch query IDOR, depth/cyclic query DoS, persisted queries bypass, field suggestion leak, and subscription hijacking.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
HTTP Request Smuggling detection and exploitation. Covers CL.TE, TE.CL, TE.TE variants, front-end/back-end parsing discrepancies, WAF bypass via smuggling, and cache poisoning chaining. Uses burpsuite + fetch for timing and differential response analysis.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
A guide to collecting and analyzing JavaScript files from a website. It extracts API details such as URLs, methods, content types, parameter names, required fields, and authentication requirements, then maps them together.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
JWT (JSON Web Token) attack methodology. Covers Bearer removal bypass, algorithm confusion (alg:none / RS256→HS256 / empty sig), secret brute force with public wordlists + JS-extracted keywords, kid/jku/jwk header injection, claims manipulation, cross-service token reuse, JWKS endpoint analysis, and multi-role…
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
OAuth 2.0 / OpenID Connect / SSO attack methodology. redirecturi manipulation, state parameter bypass, CSRF on authorization endpoint, code/accesstoken interception, PKCE bypass, implicit flow hijack, and cross-tenant token reuse.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
Passive reconnaissance: subdomain enumeration via crt.sh/DNS history, Shodan/Censys IP intelligence, favicon hash matching for tech stack, Wayback Machine URL history, WHOIS data. All free, no target contact.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
Prototype Pollution detection and gadget chaining. Covers server-side (Node.js merge/deep-extend, Python class pollution) and client-side (DOM clobbering, DOMPurify bypass, jQuery deep-extend). Includes gadget chains for RCE via EJS/Pug/Handlebars and XSS via DOMPurify bypass.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
A guide to testing race conditions, which happen when simultaneous requests produce an unsafe result. It also covers time-of-check to time-of-use (TOCTOU) flaws, where a value changes between checking it and using it.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
Source code leak detection via GitHub, Gitee, and search engine dorking. Uses tech stack fingerprints to construct targeted search queries for leaked source code, configs, and credentials.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
Vulnerability class encyclopedia. Detection signals, exploitation techniques, and impact demonstration for XSS, SQLi, SSRF, IDOR, SSTI, path traversal, file upload, XXE, CSRF, CORS, prototype pollution, and business logic flaws.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
A guide to testing WebSocket connections, which keep a live two-way link between a browser and a server. It covers authentication, access control, injected messages, replayed messages, and connection exhaustion.
jinyimeng01/mastermind-bug-bounty
Skill Claude CodeCodex
Mastermind Bug Bounty workflow orchestrator. Drives the 6-phase bug bounty lifecycle with 6-Hook middleware. Pipeline: Recon → Dependency Scan → API Fuzz → Crypto Attack → Bypass → Exploit+Report. AI 优势赛道: API Fuzz (值池联动) + Crypto Attack (JWT/AES/编码).