Red Team Tools And Methodology
This skill should be used when the user asks to "follow red team methodology", "perform bug bount…
by dokhacgiakhoa · MIT
The skill
This skill should be used when the user asks to "follow red team methodology", "perform bug bounty hunting", "automate reconnaissance", "hunt for XSS vulnerabilities", "enumerate subdomains", or needs security researcher techniques and tool configurations from top bug bounty hunters.
Red Team Tools and Methodology
Purpose
Implement proven methodologies and tool workflows from top security researchers for effective reconnaissance, vulnerability discovery, and bug bounty hunting. Automate common tasks while maintaining thorough coverage of attack surfaces.
Inputs/Prerequisites
- Target scope definition (domains, IP ranges, applications)
- Linux-based attack machine (Kali, Ubuntu)
- Bug bounty program rules and scope
- Tool dependencies installed (Go, Python, Ruby)
- API keys for various services (Shodan, Censys, etc.)
Outputs/Deliverables
- Comprehensive subdomain enumeration
- Live host discovery and technology fingerprinting
- Identified vulnerabilities and attack vectors
- Automated recon pipeline outputs
- Documented findings for reporting
Core Workflow
🧠 Knowledge Modules (Fractal Skills)
1. 1. Project Tracking and Acquisitions
2. 2. Subdomain Enumeration
3. 3. Live Host Discovery
4. 4. Technology Fingerprinting
5. 5. Content Discovery
6. 6. Application Analysis (Jason Haddix Method)
7. 7. Automated XSS Hunting
8. 8. Vulnerability Scanning
9. 9. API Enumeration
10. 10. Automated Recon Script
11. Essential Tools
12. Key API Endpoints to Check
13. XSS Filter Testing
14. Example 1: Quick Subdomain Recon
15. Example 2: XSS Hunting Pipeline
16. Example 3: Comprehensive Scan
Use this skill
Connect your agent to the Skill Store MCP server and ask for it by ref: dokhacgiakhoa/red-team-tools-and-methodology-74415788759.
Details
- Publisher
- dokhacgiakhoa
- Category
- Security › Application security
- License
- MIT
- Updated
- 2026-06-11
References
More from dokhacgiakhoa
- 3D Web Experience Expert in building 3D experiences for the web - Three.js, React Three Fiber, Spline, WebGL, and i…
- Ab Test Setup Structured guide for setting up A/B tests with mandatory gates for hypothesis, metrics, and execu…
- Accessibility Compliance Accessibility Audit You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive…
- Active Directory Attacks This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerbero…