Search the entire bug bounty knowledge base for techniques, payloads, and methodologies. Use this to find information about specific vulnerability types, attack techniques, bypass methods, or security testing approaches.

Get payloads and attack vectors for a specific vulnerability category. Returns relevant payload lists, bypass techniques, and exploitation methods from PayloadsAllTheThings and HackTricks.

Read a specific file from the bug bounty knowledge base. Use this after searching to read the full content of a relevant file.

Browse the directory structure of the bug bounty knowledge base. Use this to discover what topics and categories are available.

Get real-world bug bounty reports, both accepted and rejected. Use accepted reports for methodology and impact examples. Use rejected reports to understand what NOT to submit.

Evaluate whether a potential bug bounty finding is likely to be accepted or rejected, based on historical patterns of accepted and rejected reports. Provide vulnerability details to get an assessment.

Get structured bug bounty testing methodology and checklists. Returns step-by-step approaches for testing specific vulnerability types or general web application testing.

Get rs0n's (Harrison Richardson) battle-tested bug bounty methodology from the DEFCON 32 Bug Bounty Village workshop. This is the PRIMARY methodology that should guide all testing. Covers four pillars: Recon, Injection, Logic, and Cloud.

Get cloud-specific security testing information for AWS, Azure, GCP, and other cloud platforms.

Get WAF (Web Application Firewall) bypass techniques for specific vulnerability types.

Browse available SecLists wordlists by category. Returns directory listings of available wordlists for directory brute-forcing, subdomain enumeration, fuzzing, password testing, and more.

Get the contents of a specific SecLists wordlist file. Use this to retrieve wordlists for directory brute-forcing, fuzzing, subdomain enumeration, or other testing tasks.

Search for wordlists across SecLists by filename or keyword. Use this to find the right wordlist for a specific testing task.

Get a recommended wordlist for a specific testing task. Returns the best SecLists wordlist based on common bug bounty use cases.