Run any Skill in Manus with one click

essential-tools

Stars6

Forks1

UpdatedApril 14, 2026 at 19:24

Core pentesting tools and methodology - Burp Suite usage, Playwright automation, testing methodology, and professional reporting standards.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

ArianHobson333

ArianHobson333/claude-bug-bounty-stack

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Information Security AnalystsComputer and Mathematical Occupations·SOC 15-1212

File Explorer

8 files

SKILL.md

readonly

name	essential-tools
description	Core pentesting tools and methodology - Burp Suite usage, Playwright automation, testing methodology, and professional reporting standards.

Essential Tools

Core tools, methodology, and reporting standards for penetration testing.

Components

Component	Purpose
Burp Suite	Proxy, scanner, intruder, repeater, sequencer
Playwright	Browser automation, evidence capture, SPA testing
Methodology	PTES, OWASP WSTG, attack prioritization
Reporting	Professional report templates, DOCX generation

Reference

reference/essential-skills*.md - Burp Suite techniques and web security testing methodology
reference/playwright-automation.md - Playwright MCP usage for pentesting
reference/web-application-attacks.md - Web application attack methodology
reference/PROFESSIONAL_REPORT_STANDARD.md - Finding quality standards, compliance mapping, and pre-delivery checklist (report structure is in coordination skill)

More from this repository

same repository

hunt-idor

ArianHobson333/claude-bug-bounty-stack

Systematic IDOR / BOLA hunting methodology. Use when testing any endpoint that accepts an ID, UUID, slug, filename, or reference to a user-owned object.

2026-04-146

hunt-sqli

ArianHobson333/claude-bug-bounty-stack

SQL injection hunting methodology across error-based, union, blind boolean, and time-based variants. Use when testing any input that might reach a database.

2026-04-146

hunt-ssrf

ArianHobson333/claude-bug-bounty-stack

SSRF hunting methodology with OOB detection via interactsh, cloud metadata targets, and blind SSRF techniques. Use on any feature that accepts a URL, hostname, or external reference.

2026-04-146

hunt-xss

ArianHobson333/claude-bug-bounty-stack

XSS hunting methodology — reflected, stored, and DOM — with context-aware payloads. Use when testing any input that could reach a browser.

2026-04-146

owasp-ref

ArianHobson333/claude-bug-bounty-stack

OWASP Top 10 (2021) and API Top 10 (2023) quick reference with attack patterns, test ideas, and CWE mappings. Load when hunting, code-reviewing for security, or writing bug bounty reports.

2026-04-146

report-gen

ArianHobson333/claude-bug-bounty-stack

Bug bounty report generation — structure, triager-friendly writing, CVSS scoring, and chain reporting. Use when finalizing a finding for submission.

2026-04-146

name	essential-tools
description	Core pentesting tools and methodology - Burp Suite usage, Playwright automation, testing methodology, and professional reporting standards.

Essential Tools

Core tools, methodology, and reporting standards for penetration testing.

Components

Component	Purpose
Burp Suite	Proxy, scanner, intruder, repeater, sequencer
Playwright	Browser automation, evidence capture, SPA testing
Methodology	PTES, OWASP WSTG, attack prioritization
Reporting	Professional report templates, DOCX generation

Reference

reference/essential-skills*.md - Burp Suite techniques and web security testing methodology
reference/playwright-automation.md - Playwright MCP usage for pentesting
reference/web-application-attacks.md - Web application attack methodology
reference/PROFESSIONAL_REPORT_STANDARD.md - Finding quality standards, compliance mapping, and pre-delivery checklist (report structure is in coordination skill)