hack-scope

What problem does it solve?

This Skill helps security professionals and bug bounty hunters quickly understand and define the scope of a security assessment or bug bounty program, preventing accidental out-of-scope testing and guiding reconnaissance efforts.

Core Features & Use Cases

• VDP Analysis: Parses Vulnerability Disclosure Program documents to extract key details like program URLs, contact methods, and response times.
• Scope Definition: Clearly identifies in-scope and out-of-scope assets, including domains, applications, APIs, and infrastructure.
• Constraint Identification: Extracts critical testing constraints such as rate limits, testing windows, and disclosure timelines.
• Attack Planning: Helps in prioritizing targets and mapping the attack surface based on the defined scope.
• Use Case: When starting a new bug bounty on a target, use this skill to read their VDP policy, list all allowed domains and subdomains, and note any specific restrictions on testing methods.

Quick Start

Use the hack-scope skill to analyze the VDP document and outline the engagement scope.