Перейти к содержимому

I Built a CLAUDE.md for Bug Bounty. Here's What's In It.

LoganSec

0:00 / 0:00

I Built a CLAUDE.md for Bug Bounty. Here's What's In It.

7 376 просмотров · 6 месяцев назад
LoganSec
8,34 тыс. подписчиков
7 376 просмотров · 6 месяцев назад
I've been using Claude Code for almost every hunt lately; but out of the box, it doesn't think like a bug bounty hunter. So, I built a system to fix that. A CLAUDE.md that primes the mindset. And a set of custom skills that give it the tools to act on it. In this video I'm breaking down the whole setup. Every file, what's in it, and why I built it the way I did. What's covered: → CLAUDE.md: how I prime Claude to approach a new target, recon methodology, output formatting, and OpSec rules → triager.md: simulates a real Bugcrowd triager before anything gets submitted. Brutal. Honest. Protects the account. → report-draft.md: structures findings into clean, submission-ready reports → hypothesis.md: generates attack hypotheses for a given target surface All files are live on GitHub. Grab them, break them, rebuild them your way. github.com/logan-sec/claude-code-bb Get the free JS Recon Automation Kit: https://forms.gle/RsGu6qoCJBGFjQjL8 I’m releasing the script to the private email list first. It turns a HAR file into organized JS files, LinkFinder endpoints, SecretFinder hits, and gf-filtered attack surface for manual bug bounty review. — 𝕏 @LoganOpSec GitHub: github.com/logan-sec #bugbounty #cybersecurity #claude #ethicalhacking