Skip to content

BountyForge v2.0.0 — Full Bug Bounty Engine

Choose a tag to compare

View all tags
@Jeffreyxdev Jeffreyxdev released this 12 Jul 12:07
· 14 commits to main since this release
v2.0.0
103233e

What's New in v2.0.0

This is a major merge of the upstream orchestration engine (v1.1.0) with the Jeffreyxdev fork's comprehensive manual methodology, plus new reference systems for triage and disclosed-report learning.

New Reference Files

  • references/supervisor.md — Full finding triage and vetting pipeline:

    • 4 sequential gates: Reality Check, Impact Validation, Deduplication, Report Quality
    • Impact tier system (T0–T4) with severity floors
    • Common false positive patterns and how to detect them
    • Severity escalation counter-arguments for triager pushback
    • Batch triage mode with structured output format

  • references/knowledge.md — Disclosed report learning system:

    • 6 report sources (HackerOne API, Bugcrowd, Intigriti, Google dorks, Solodit)
    • The "What Changed" method — learn from fix diffs and grep your target for the same anti-pattern
    • 6 universal patterns extracted from top-paid reports across all programs
    • Program-specific intel gathering template
    • Anti-pattern library (Django, Express, Laravel, GraphQL, GitHub Actions)
    • Pre-hunt knowledge pipeline script

SKILL.md Enhancements

  • Auto-update system — checks upstream VERSION at session start, warns if stale
  • SSTI "Where to Test" — email templates, PDF generators, error messages, search queries
  • IDOR disposable email & phone guide — Guerrilla Mail, Mailinator, YOPmail, SMSPool, Quackr, Gmail +alias trick, full two-account creation workflow with API examples
  • HTTP Request Smuggling — CL.TE, TE.CL, H2.CL, TE obfuscation with PoC example
  • Cache Poisoning / Web Cache Deception — unkeyed headers, parameter cloaking, fat GET
  • Business Logic — negative quantities, price tampering, workflow skip, role escalation
  • XSS Chains — escalation paths from Medium to Critical (CSRF theft, service worker, credential theft)
  • Android / Mobile Hunting — cert pinning bypass, exported activities, deep links, WebView bridge
  • Turbo Intruder — single-packet race condition attack template
  • CI/CD — Expression Injection PoC template, 10 real-world GHSAs with severity ratings, expanded A→B chains (impostor commit, OIDC token theft)
  • Human Tone Rules — anti-AI writing patterns for believable reports
  • 60-Second Pre-Submit Checklist — gate every report before sending
  • 18 vulnerability classes with full testing checklists, bypass tables, and escalation chains

Changed

  • VERSION bumped 1.1.0 → 2.0.0
  • SKILL.md expanded from ~260 lines to ~1,070 lines
  • Description updated to cover smart contracts, web/API, CI/CD, LLM/AI, and all major BB platforms
  • References to supervisor.md and knowledge.md integrated throughout the orchestration pipeline

What Makes This Powerful

The skill now covers the full lifecycle:

  1. Recon — subdomain enumeration, technology fingerprinting, source code grep patterns
  2. Learn — disclosed report analysis, "What Changed" method, threat modeling
  3. Hunt — 18 bug classes, bypass tables, A→B signal chains, top 1% mindset
  4. Validate — 7-Question Gate, 4 pre-submission gates, CVSS 3.1 scoring
  5. Report — canonical format, platform-specific templates, severity escalation language

Full Changelog: f31f6e8...103233e

Assets 2
Loading