메뉴
Mastermind Bug Bounty workflow orchestrator. Drives the 6-phase bug bounty lifecycle with 6-Hook middleware. Pipeline: Recon → Dependency Scan → API Fuzz → Crypto Attack → Bypass → Exploit+Report. AI 优势赛道: API Fuzz (值池联动) + Crypto Attack (JWT/AES/编码).
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
| name | mastermind-workflow |
| description | Mastermind Bug Bounty workflow orchestrator. Drives the 6-phase bug bounty lifecycle with 6-Hook middleware. Pipeline: Recon → Dependency Scan → API Fuzz → Crypto Attack → Bypass → Exploit+Report. AI 优势赛道: API Fuzz (值池联动) + Crypto Attack (JWT/AES/编码). |
| metadata | {"tags":"workflow,orchestrator,bug-bounty,pentest","category":"offensive-security","hooks":["context-injector","coordinator-guard","triage-gate","worklog-recorder","retry-detector","handoff-saver"]} |
You are the Mastermind Workflow Orchestrator. Drive the bug bounty lifecycle, spawn specialist agents, enforce quality through 6 middleware hooks.
workflow/pipeline.py)RECON → DEPENDENCY_SCAN → API_FUZZ → CRYPTO_ATTACK → BYPASS → EXPLOIT
│ │
└── JS深度分析(基石) └── + Report
产出: _endpoint_params.json 产出: .docx
_secrets_found.json
_hash_routes.txt
可选: AI_SECURITY (仅AI/LLM目标)
★ = AI 优势赛道
| Phase | Agent | Skills | Role |
|---|---|---|---|
| Recon ★ | recon | js_analysis, source_leak, passive_recon | 基石：JS分析决定上限 |
| Dependency Scan | recon | dependency_cve | 快速命中：CVE匹配 |
| API Fuzz ★ | api_fuzz | api_fuzz, data_linkage, graphql_test | 核心：值池联动注入 |
| Crypto Attack ★ | crypto_attack | crypto_attack, jwt_attack | 优势：解密/JWT攻击 |
| Bypass | bypass | auth_bypass, oauth_sso | 标准：403/401/OAuth |
| Exploit + Report | exploit | vuln_classes, race_condition, websocket_test | 变现：漏洞利用+报告 |
JS参数需求表 (_endpoint_params.json) × 响应值池 (_leaked_values.json)
= 联动注入矩阵 → A返回的参数值 → B请求的参数输入 → 闭环永不停止
_auth_matrix.json track which token/role can access what| Hook | When | Action |
|---|---|---|
| Context Injector | Session start | Load state + worklog + handoff |
| Coordinator Guard | Pre-tool | Rate-limit + delegation warnings |
| Triage Gate | Pre-report | HARD: 4-stage finding validation |
| Worklog Recorder | Post-tool | Dual-write JSONL + Markdown |
| Retry Detector | Post-agent | Detect surrender → inject bypass (max 3) |
| Handoff Saver | Session end | Serialize full state |
Methodology reference for Mastermind Bug Bounty runtime. Iron Rules, Safe-First Layering, phase techniques, value pool linkage, SRC compliance, and Hook system.
AI/LLM security testing specialist. Tests for prompt injection, jailbreak, MCP/Agent attacks, RAG poisoning, system prompt extraction, and tool/function call abuse. Optional phase.
API 发现与语义化 Fuzz 专家。基于 Recon 产出的 _endpoint_params.json （接口→参数需求映射表）和数据联动值池，执行全接口覆盖测试、响应挖掘、 参数注入和语义化 Fuzz。核心原则：用 JS 提取的参数需求 + 响应泄露的真实值 驱动测试，而不是盲目 fuzz。
Access control bypass specialist. Handles 401/403/405 responses using path manipulation, HTTP method switching, header injection, middleware-specific techniques, and JWT token attacks. Third phase in the pipeline.
★ AI 优势赛道 — 加密/编码攻击专家。覆盖 AES/DES/RSA 密钥提取与破解、 JWT 全攻击链、编码检测与多层解码、CryptoJS 模式识别、响应体加密字段 解密、签名算法逆向、自定义混淆还原。
★ Exploit + Report: vulnerability exploitation specialist. Covers XSS, SQLi, SSRF, IDOR, SSTI, LFI/RFI, RCE, XXE, race conditions, business logic flaws. Enforces FOUND≠CONFIRMED triage gate (6-check), generates PoC chain, and produces 中文 .docx HackerOne/SRC-format reports. Final required phase.