Security Bounty Hunter

Hunt for exploitable, bounty-worthy security issues. Bias toward remotely reachable, user-controlled attack paths — discard patterns that bounty platforms routinely reject as informative or out of scope.

When to Use

• Scanning a repository for exploitable vulnerabilities
• Preparing a Huntr, HackerOne, or similar bounty submission
• Triage where the question is "does this actually qualify for a payout?" rather than "is this theoretically unsafe?"

When NOT to Use

For broad best-practices audits, use security-scan or evaluate-repository instead.

In-Scope Patterns