Quality

Hunting Methodology guides a non-linear bug bounty workflow from recon and surface mapping through payload testing, validation, chaining, and reporting. Use it to prioritize targets, cover variants, and avoid repeating exhausted paths.

Information Disclosure Hunting finds exposed credentials, leaked secrets, debug endpoints, and other confidentiality-only issues. Use it when checking for .env or .git exposure, Spring Actuator leaks, source disclosure, or stack traces.

OAuth Hunt finds authorization and identity bugs in OAuth 2.0/2.1, OIDC, SAML SSO, and JWT flows. Use it when testing login, token, redirect, PKCE, claim, or federation logic in web apps, MCP servers, GitOps tools, and identity providers.

RCE Hunter finds remote code execution attack surfaces in web apps, OSS libraries, CI/CD, containers, and agent tools. Use it when user input may reach shells, deserializers, template engines, loaders, or git and curl commands.

Refutation Banner Over A Confirming Panel checks report titles, headings, and figure labels for verdict words and internal labels that can misstate a result. Use it after a run or revision pass when a fidelity finding must stay in the right section and the rest of the report should stay neutral.

Revdiff reviews diffs, files, and documents in a terminal overlay with inline annotations. Use it to inspect changes in git, hg, or jj and answer questions about revdiff usage, config, themes, or keybindings.

Revdiff reviews diffs, files, and documents in a terminal overlay with inline annotations. Use it to inspect changes, capture review comments, and answer questions about revdiff configuration, themes, and keybindings.

Revdiff provides interactive diff and file review in the pi harness. Use it when you explicitly want revdiff, interactive annotations, or captured review comments inside pi.

Revdiff Plan reviews the last Codex assistant message in a revdiff TUI overlay for inline annotations. It extracts the latest rollout response, lets you comment on the plan, and loops until the review is complete.

Triage Validation applies a gate-based checklist to bug bounty findings. Use it to confirm scope, reproducibility, impact, and whether an issue should be submitted or killed.

Variant Analysis Integrity helps you track which model variant produced each table row, case study, saliency map, or ablation before you cut or shrink a family member. It also clarifies what evidence from one variant does and does not support about the larger method family.

Vulnerability Classes provides testing patterns for common web application flaws such as IDOR, SSRF, XSS, auth bypass, GraphQL, OAuth, race conditions, and file upload issues. Use it when validating security controls or triaging suspected bugs.