菜单
Bug bounty workflow using Deep Eye for recon/scan and high-signal report writing (HackerOne/Bugcrowd). Use for bug bounty, VDP, HackerOne, Bugcrowd, bounty report, /bug-bounty. Only in-scope program assets.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/zakirkun/deep-eye --skill bug-bounty命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
Blue team defense using Deep Eye outputs for detection engineering, IR content, and hardening. Use for blue team, SOC, SIEM, detection engineering, threat hunting, IR triage, hardening, /blue-team.
CTF methodology with optional Deep Eye on lab targets you own. Use for CTF, HTB, picoCTF, web/pwn/rev/crypto/forensics, /ctf. Educational only.
Authorized penetration testing with Deep Eye (this repo). Use for pentest, penetration test, vulnerability assessment, web/API/mobile scan, OWASP testing, /pentest. Requires written authorization. Never scan unauthorized targets.
基于 SOC 职业分类
正在显示 SKILL.md
| name | bug-bounty |
| description | Bug bounty workflow using Deep Eye for recon/scan and high-signal report writing (HackerOne/Bugcrowd). Use for bug bounty, VDP, HackerOne, Bugcrowd, bounty report, /bug-bounty. Only in-scope program assets. |
Policy first. Deep Eye accelerates surface coverage; impact + PoC win bounties.
Enable in vulnerability_scanner.enabled_checks:
enabled_checks:
- idor
- api_bola_deep
- jwt_deep
- oauth_testing
- graphql_deep
- ssrf_cloud
- cloud_misconfig
- cors_csp
- open_redirect_deep
- stored_xss
- sql_injection
- xss
- ssrf
- mass_assignment
Optional: ai_triage.enabled, bug_bounty.enabled (Markdown under reports/bounty/).
python deep_eye.py --setup
python deep_eye.py -u https://IN_SCOPE -v --formats json,html
python deep_eye.py -u https://IN_SCOPE --scope-nl "only /api/* host target.com"
python deep_eye.py -u https://IN_SCOPE --retest-new reports/prior.json
OpenAPI: openapi.enabled: true + source.
idor, api_bola_deepjwt_deep, oauth_testing, login_replayssrf_cloud, cloud_misconfiggraphql_deepstored_xsssecret_scanning)## Summary
## Steps to reproduce
## PoC
## Impact
## Remediation
## Environment
Finding keys: type, severity, url, parameter, payload, evidence, remediation.
Respect rate limits; redact PII; check duplicates; show delta impact on partial dupes.