hellodqy/mastermind-bug-bounty
44 agent markdown files indexed from hellodqy/mastermind-bug-bounty. Install any of them pinned to an exact hash with mdr add hellodqy/mastermind-bug-bounty/<name>.
mastermind-bug-bounty skill
hellodqy/mastermind-bug-bounty · SKILL.md · Four-phase autonomous bug bounty orchestration. Phase 0 maps external assets with deterministic Python helpers, Phase 1…
v4.7.0 · audit A · 14 stars
ai-security-agent skill
hellodqy/mastermind-bug-bounty · agents/ai_security/SKILL.md · AI/LLM security reasoning agent. Explore AI features as connected systems of prompts, tools, memory, retrieval, and…
git:20260709.c284c01 · audit A · 14 stars
attack-surface-analyst skill
hellodqy/mastermind-bug-bounty · agents/analyst/SKILL.md · Rank reconnaissance-derived attack surfaces and design evidence-driven tests without active exploitation.
git:20260711.c1d38ba · audit A · 14 stars
api-fuzz-agent skill
hellodqy/mastermind-bug-bounty · agents/api_fuzz/SKILL.md · API exploration agent. Use endpoint signatures and real response values to expand attack surfaces; do not stop at the…
git:20260711.d202fe9 · audit A · 14 stars
autonomous-attacker skill
hellodqy/mastermind-bug-bounty · agents/attacker/SKILL.md · Test ranked attack surfaces autonomously, preserve evidence, and turn new access into additional attack-chain…
git:20260711.c1d38ba · audit A · 14 stars
bypass-agent skill
hellodqy/mastermind-bug-bounty · agents/bypass/SKILL.md · Access-control bypass agent. Treat 401/403/405 as routing clues, not as final answers; connect bypasses to privilege…
git:20260709.a882698 · audit A · 14 stars
crypto-attack-agent skill
hellodqy/mastermind-bug-bounty · agents/crypto_attack/SKILL.md · Crypto and token reasoning agent. Interpret keys, tokens, signatures, encrypted fields, and their downstream leverage.
git:20260709.a882698 · audit A · 14 stars
exploit-agent skill
hellodqy/mastermind-bug-bounty · agents/exploit/SKILL.md · Exploitation and impact-validation agent. Turn promising findings into confirmed impact, then keep chaining from the…
git:20260709.8be07f4 · audit A · 14 stars
recon-agent skill
hellodqy/mastermind-bug-bounty · agents/recon/SKILL.md · Asset reconnaissance agent. Map externally exposed assets and produce structured evidence for later AI reasoning…
git:20260709.a882698 · audit A · 14 stars
report-agent skill
hellodqy/mastermind-bug-bounty · agents/report/SKILL.md · Report generation agent. Convert verifier-confirmed findings into a fixed evidence-based report without adding…
git:20260916.a5be4e5 · audit A · 14 stars
account-takeover skill
hellodqy/mastermind-bug-bounty · skills/account_takeover/SKILL.md · Analyze login, recovery, verification, MFA, session refresh, and account binding flows when a weakness may let one user…
git:20260915.240c761 · audit A · 14 stars
ai-security skill
hellodqy/mastermind-bug-bounty · skills/ai_security/SKILL.md · Treat AI systems as chains of prompt, retrieval, memory, tools, and permissions.
git:20260914.819e838 · audit A · 14 stars
api-fuzz skill
hellodqy/mastermind-bug-bounty · skills/api_fuzz/SKILL.md · Explore API behavior using real parameters and values before generic fuzzing.
git:20260709.c284c01 · audit A · 14 stars
api-gateway skill
hellodqy/mastermind-bug-bounty · skills/api_gateway/SKILL.md · Analyze gateway/backend parsing, routing, authentication, versioning, and batch-operation differences when an API edge…
git:20260915.d2c52f2 · audit A · 14 stars
auth-bypass skill
hellodqy/mastermind-bug-bounty · skills/auth_bypass/SKILL.md · Reason about authorization barriers and whether blocked endpoints can lead to usable access.
git:20260709.c284c01 · audit A · 14 stars
business-logic skill
hellodqy/mastermind-bug-bounty · skills/business_logic/SKILL.md · Test multi-step business workflows when server-side state, value, ownership, or transition invariants may be bypassed…
git:20260914.819e838 · audit A · 14 stars
cache-poisoning skill
hellodqy/mastermind-bug-bounty · skills/cache_poisoning/SKILL.md · Analyze cache key confusion as a path to stored impact.
git:20260914.819e838 · audit A · 14 stars
crypto-attack skill
hellodqy/mastermind-bug-bounty · skills/crypto_attack/SKILL.md · Interpret encryption, signing, encoding, and key material as leverage for later attack-chain expansion.
git:20260709.c284c01 · audit A · 14 stars
data-linkage skill
hellodqy/mastermind-bug-bounty · skills/data_linkage/SKILL.md · Connect response values to later request parameters and keep expanding the attack graph after each finding.
git:20260709.c284c01 · audit A · 14 stars
dependency-cve skill
hellodqy/mastermind-bug-bounty · skills/dependency_cve/SKILL.md · Map observed technologies to plausible CVE paths, then require safe verification before promotion.
git:20260709.c284c01 · audit A · 14 stars
deserialization skill
hellodqy/mastermind-bug-bounty · skills/deserialization/SKILL.md · Test serialized objects, polymorphic payloads, message formats, and naming lookups when untrusted data may instantiate…
git:20260914.819e838 · audit A · 14 stars
file-upload skill
hellodqy/mastermind-bug-bounty · skills/file_upload/SKILL.md · Analyze upload, conversion, preview, archive, and storage pipelines when file content or metadata may cross execution…
git:20260914.819e838 · audit A · 14 stars
graphql-test skill
hellodqy/mastermind-bug-bounty · skills/graphql_test/SKILL.md · Treat GraphQL schemas and resolvers as expandable attack graphs.
git:20260914.819e838 · audit A · 14 stars
http-smuggling skill
hellodqy/mastermind-bug-bounty · skills/http_smuggling/SKILL.md · Consider request smuggling only when architecture hints make it relevant, and connect confirmation to downstream impact.
git:20260914.819e838 · audit A · 14 stars
idor-test skill
hellodqy/mastermind-bug-bounty · skills/idor_test/SKILL.md · Test object- and function-level authorization when identifiers, tenants, ownership fields, or nested resources may…
git:20260914.819e838 · audit A · 14 stars
injection-test skill
hellodqy/mastermind-bug-bounty · skills/injection_test/SKILL.md · Test parser and interpreter boundaries when user-controlled values reach database queries, templates, commands…
git:20260914.819e838 · audit A · 14 stars
js-analysis skill
hellodqy/mastermind-bug-bounty · skills/js_analysis/SKILL.md · Extract client-side attack surface from JS and sourcemaps without dictating the order of investigation.
git:20260709.c284c01 · audit A · 14 stars
jwt-attack skill
hellodqy/mastermind-bug-bounty · skills/jwt_attack/SKILL.md · Reason about JWT trust boundaries and whether token control can become privilege escalation.
git:20260709.c284c01 · audit A · 14 stars
mail-code skill
hellodqy/mastermind-bug-bounty · skills/mail_code/SKILL.md · Create and monitor a disposable test mailbox when an authorized registration, recovery, email-verification, or…
git:20260915.240c761 · audit A · 14 stars
oauth-sso skill
hellodqy/mastermind-bug-bounty · skills/oauth_sso/SKILL.md · Analyze OAuth/OIDC/SSO flows as identity-chain attack surfaces.
git:20260914.819e838 · audit A · 14 stars
passive-recon skill
hellodqy/mastermind-bug-bounty · skills/passive_recon/SKILL.md · Collect external context without touching the target aggressively.
git:20260709.a882698 · audit A · 14 stars
path-traversal skill
hellodqy/mastermind-bug-bounty · skills/path_traversal/SKILL.md · Test file and archive path resolution when user-controlled names or paths may escape an intended storage root or select…
git:20260914.819e838 · audit A · 14 stars
prototype-pollution skill
hellodqy/mastermind-bug-bounty · skills/prototype_pollution/SKILL.md · Reason about object merge behavior and whether pollution reaches an exploitable gadget.
git:20260915.d2c52f2 · audit A · 14 stars
race-condition skill
hellodqy/mastermind-bug-bounty · skills/race_condition/SKILL.md · Identify business actions where concurrent execution can multiply value or bypass limits.
git:20260914.819e838 · audit A · 14 stars
source-leak skill
hellodqy/mastermind-bug-bounty · skills/source_leak/SKILL.md · Search public code and exposed SCM/build artifacts for credentials, identifiers, internal routes, and business context…
git:20260914.819e838 · audit A · 14 stars
ssrf-test skill
hellodqy/mastermind-bug-bounty · skills/ssrf_test/SKILL.md · Test server-side URL retrieval, callback, proxy, import, and preview features for network-boundary crossing and…
git:20260914.819e838 · audit A · 14 stars
subdomain-takeover skill
hellodqy/mastermind-bug-bounty · skills/subdomain_takeover/SKILL.md · Verify dangling DNS delegations and deprovisioned third-party bindings when a scoped subdomain may be claimable and…
git:20260915.d2c52f2 · audit A · 14 stars
type-confusion skill
hellodqy/mastermind-bug-bounty · skills/type_confusion/SKILL.md · Analyze weak comparison, coercion, numeric precision, Unicode narrowing, and cross-language serialization differences…
git:20260915.d2c52f2 · audit A · 14 stars
vuln-classes skill
hellodqy/mastermind-bug-bounty · skills/vuln_classes/SKILL.md · A compact routing skill for choosing vulnerability hypotheses; detailed payloads live in references, not here.
git:20260711.c1d38ba · audit A · 14 stars
vuln-report-writing skill
hellodqy/mastermind-bug-bounty · skills/vuln_report_writing/SKILL.md · Write submission-ready vulnerability reports from verifier-confirmed findings. Use whenever Mastermind enters Phase 3…
git:20260916.a5be4e5 · audit A · 14 stars
websocket-test skill
hellodqy/mastermind-bug-bounty · skills/websocket_test/SKILL.md · Explore WebSocket state, authentication, subscriptions, and replay as chained attack surfaces.
git:20260914.819e838 · audit A · 14 stars
xml-parser-security skill
hellodqy/mastermind-bug-bounty · skills/xml_parser_security/SKILL.md · Test XML, XInclude, XSLT, SVG, SOAP, SAML, and Office-document processing when parser features may cross file, network…
git:20260915.d2c52f2 · audit A · 14 stars
xss-test skill
hellodqy/mastermind-bug-bounty · skills/xss_test/SKILL.md · Test reflected, stored, DOM, and client-rendered injection when untrusted data reaches an executable browser context…
git:20260914.819e838 · audit A · 14 stars
mastermind-workflow skill
hellodqy/mastermind-bug-bounty · workflow/SKILL.md · Four-phase autonomous bug bounty workflow. Python handles deterministic collection and verifier support; AI owns…
v4.7.0 · audit A · 14 stars
Source
github.com/hellodqy/mastermind-bug-bounty · 14 stars · license none · pushed 2026-09-16