jinyimeng01

jinyimeng01/mastermind-bug-bounty

jinyimeng01/mastermind-bug-bounty

jinyimeng01/mastermind-bug-bounty

Access control bypass specialist. Handles 401/403/405 responses using path manipulation, HTTP method switching, header injection, ...

Web Cache Poisoning detection and exploitation. Covers unkeyed headers, parameter cloaking, cache key normalization, XSS via cache...

★ Exploit + Report: vulnerability exploitation specialist. Covers XSS, SQLi, SSRF, IDOR, SSTI, LFI/RFI, RCE, XXE, race conditions,...

GraphQL API security testing v2. Coverage: introspection bypass (6 techniques), clairvoyance field brute-force, alias-based rate l...

JS 文件全量采集与深度分析。双通道（雪瞳+自主探测）下载 JS，本地按域名组织， 逐文件深度读取提取完整请求签名（URL + Method + Content-Type + 参数名 + 是否必填 + Auth要求），构建接口-参数需求映射表，作为后续所有阶段...

JWT (JSON Web Token) attack methodology. Covers Bearer removal bypass, algorithm confusion (alg:none / RS256→HS256 / empty sig), s...

Passive reconnaissance: subdomain enumeration via crt.sh/DNS history, Shodan/Censys IP intelligence, favicon hash matching for tec...

Reconnaissance specialist. 双通道（雪瞳+自主探测）JS文件全量采集与深度分析， 技术栈指纹识别，API端点+完整请求签名提取（方法/Content-Type/参数/Auth）， SPA路由发现，硬编码凭据提取，源码泄露检测，依赖版本...

Report generation specialist. Converts triage-approved findings into HackerOne-format reports with CVSS scoring, PoC evidence chai...

Source code leak detection via GitHub, Gitee, and search engine dorking. Uses tech stack fingerprints to construct targeted search...

Mastermind Bug Bounty workflow orchestrator. Drives the 6-phase bug bounty lifecycle with 6-Hook middleware. Pipeline: Recon → Dep...