{"id":21520711,"url":"https://github.com/defparam/h1stats","last_synced_at":"2025-04-09T22:16:55.380Z","repository":{"id":47686667,"uuid":"361327148","full_name":"defparam/h1stats","owner":"defparam","description":"a tool that compiles a csv of all h1 program stats","archived":false,"fork":false,"pushed_at":"2023-07-02T20:58:12.000Z","size":91,"stargazers_count":47,"open_issues_count":0,"forks_count":10,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-04-09T22:16:47.080Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/defparam.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-04-25T04:03:10.000Z","updated_at":"2025-03-10T01:06:57.000Z","dependencies_parsed_at":"2023-02-01T03:15:50.297Z","dependency_job_id":null,"html_url":"https://github.com/defparam/h1stats","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/defparam%2Fh1stats","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/defparam%2Fh1stats/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/defparam%2Fh1stats/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/defparam%2Fh1stats/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/defparam","download_url":"https://codeload.github.com/defparam/h1stats/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248119288,"owners_count":21050755,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-24T01:03:08.890Z","updated_at":"2025-04-09T22:16:55.355Z","avatar_url":"https://github.com/defparam.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# h1stats - h1 Program Stats Scraper\nThis python3 script will call out to HackerOne's graphql API and scrape all currently active programs for information and stats on every h1 program. All programs and their stats get tabulated into a generated CSV file. From here you can compare and contrast all program stats to pick high fidelity targets. Furthermore, you can supply your h1 session cookie to the script to also compile in all private programs to the CSV.\n\n## Thanks\n@pmnh -- for maintaining a compatability fork\n\n# Data Collected:\n - Program Name\n - Program URL\n - Program Type (Public or Private)\n - Clear Program (Yes/No)\n - Offers Bounties (Yes/No)\n - Bounty Splitting (Yes/No)\n - Max Critical (USD)\n - Max High (USD)\n - Max Medium (USD)\n - Max Low (USD)\n - Average Bounty Max (USD)\n - Average Bounty Min (USD)\n - Top Bounty Max (USD)\n - Top Bounty Min (USD)\n - Resolved Reports\n - Reports Received in 90 Days\n - Total Bounties Paid (USD)\n - Total Bounties Paid in 90 Days (USD)\n - Avg Time to First Response (Hours)\n - Avg Time to Triage (Hours)\n - Avg Time to Bounty (Hours)\n - Avg Time to Resolution (Hours)\n - Progam Age (Months)\n - Days Since Last Report\n\n## Install\nDue to HackerOne API changes requiring a CSRF token to make GraphQL API requests, this tool now uses BeautifulSoup 4 to parse the HTML and retrieve the CSRF token. To install this dependency:\n\n```\npip install -r requirements.txt\n```\n\n## Usage\nnormal usage (public programs): **python3 h1stats**\n\nauthenticated usage (public and private programs):\n**python3 h1stats [\\\u003cYour HackerOne __Host-session Token\\\u003e]**\n\n\n\n## WARNING (Authenticated Usage)\n**THIS SCRIPT HANDLES YOUR H1 SESSION TOKEN WHICH CONTAINS YOUR HACKERONE PRIVATE DATA AND THE PRIVATE DATA OF YOUR HACKERONE PROGRAMS. BECAREFUL WHEN HANDLING THIS TOKEN. THE AUTHORS ARE NOT LIABLE FOR ANY MISUSE OF THIS SCRIPT OR YOUR HACKERONE SESSION TOKEN. PLEASE USE AT YOUR OWN RISK. DO NOT PUBLISH ANY CSVs WITH HACKERONE PRIVATE PROGRAM DATA.**\n\nFor authenticated usage It is suggested that you assign your token into a variable once using `export` and pushing the env variable into the script's argument list (as shown in the examples).\n\n\n## Examples\nAuthenticated Flow (Public and Private):\n```\nbash\u003e export H1CRED=\"JGH92kd9...b5e\" # HackerOne session cookie\nbash\u003e python3 h1stats $H1CRED\n  _     _ ____  _        _\n | |__ / / ___|| |_ __ _| |_ ___\n | '_ \\| \\___ \\| __/ _` | __/ __|\n | | | | |___) | || (_| | |_\\__ \\\n |_| |_|_|____/ \\__\\__,_|\\__|___/\n\n                      defparam\n\n[+] Using specified session cookie\n[+] Collecting public and private data...\n[+] Please wait... (this may take several minutes)\n[+] Collecting... (400 programs)\n[+] Wrote all data to: h1stats-PRIVATE-2021-4-24.csv\n[+] Warning: this data contains private information under NDA, do not publish!\n[+] Done!\n```\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdefparam%2Fh1stats","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdefparam%2Fh1stats","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdefparam%2Fh1stats/lists"}