redteam-report-template
Agent skill for Security Engineer, Customer Success Manager, Technical Writer, published by elementalsouls. Project details and file access are provided by the publisher.
2,138,994 AI resources indexedWorking toward the world’s largest AI resource index.
Reusable instructions for compatible AI agents.
Counts cover every published resource in this section. A resource can belong to several fields and platforms.
Agent skill for Security Engineer, Customer Success Manager, Technical Writer, published by elementalsouls. Project details and file access are provided by the publisher.
Agent skill for Security Engineer, Growth Marketer, Business Development, published by elementalsouls. Project details and file access are provided by the publisher.
Agent skill for Security Engineer, ML / AI Engineer, Data Analyst, published by elementalsouls. Project details and file access are provided by the publisher.
Agent skill for Security Engineer, Backend Developer, DevOps / SRE, published by elementalsouls. Project details and file access are provided by the publisher.
Agent skill for Security Engineer, Backend Developer, DevOps / SRE, published by elementalsouls. Project details and file access are provided by the publisher.
Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next. Master orchestrator that combines the 5-phase non-linear hunting workflow with the critical thinking framework (developer psychology, anomaly detection, What-If experiments). Ro...
Bugcrowd-specific reporting tactics complementing report-writing: VRT category search-and-fallback strategy when no exact match exists, manual severity override when VRT defaults underrate impact, severity-request paragraph as first body section, OOS-clause rebuttal templates (rate limiting on au...
Evidence-capture and PoC-redaction discipline for bug-bounty submissions: cookie redaction protocol (which fields to mask, Preview annotation / Burp panel hiding / DevTools workflow), PII black-bar discipline (what to mask in other-user data — names, emails, phones, faces — vs what is safe to lea...
External SSL VPN / remote-access appliance attack matrix — Cisco ASA/AnyConnect, Fortinet FortiGate/FortiOS, Citrix NetScaler/ADC, Palo Alto GlobalProtect, Pulse Secure / Ivanti Connect Secure, SonicWall, F5 Big-IP. Covers version fingerprinting, CVE matrix (2018-2026), AAA backend identification...
End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secret/URL/JWT/Firebase grep, pinned-cert extraction, exported-component enumeration, Frida runtime instrumentation templates, intent-injection probes. Built from ...
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege analysis. Covers IAM enumeration (aws iam, az role, gcloud iam), STS/AssumeRole chaining, Azure Managed Identity abuse (via SSRF/leak), GCP service account JSON ...
Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt learning (disclosed reports, tech stack research, mind maps, threat modeling), vulnerability hunting (IDOR, SSRF, XSS, auth bypass, CSRF, race conditions, SQ...
Try a broader search or clear some filters.
Platform labels describe intended use. Read each resource's author credits, requirements and available access methods.