Bug Bounty Master Workflow Full pipeline: Recon - Learn - Hunt - Validate - Report. One skill for everything. THE ONLY QUESTION THAT MATTERS "Can an attacker do this RIGHT NOW against a real user who has taken NO unusual actions -- and does it cause real harm (stolen money, leaked PII, account takeover, code execution)?" If the answer is NO -- STOP. Do not write. Do not explore further. Move on. Theoretical Bug = Wasted Time. Kill These Immediately: | Pattern | Kill Reason | |---|---| | "Could theoretically allow..." | Not exploitable = not a bug | | "An attacker with X, Y, Z conditions could…