Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/reddelexc/hackerone-reports

Top disclosed reports from HackerOne
https://github.com/reddelexc/hackerone-reports

bugbounty csrf hackerone idor rce reports security sql-injection ssrf writeups xss xxe

Last synced: 2 days ago
JSON representation

Top disclosed reports from HackerOne

Awesome Lists containing this project

README 

        
Tops of HackerOne reports. All reports' raw info stored in `data.csv`.

Scripts to update this file are written in Python 3 and require `chromedriver` and `Chromium` executables at `PATH`.

Every script contains some info about how it works.

The run order of scripts:



1) `fetcher.py`

1) `uniquer.py`

1) `filler.py`

1) `rater.py`



Tops 100.



- [Top 100 upvoted reports](tops_100/TOP100UPVOTED.md)

- [Top 100 paid reports](tops_100/TOP100PAID.md)



Tops by bug type.



- [Top XSS reports](tops_by_bug_type/TOPXSS.md)

- [Top XXE reports](tops_by_bug_type/TOPXXE.md)

- [Top CSRF reports](tops_by_bug_type/TOPCSRF.md)

- [Top IDOR reports](tops_by_bug_type/TOPIDOR.md)

- [Top RCE reports](tops_by_bug_type/TOPRCE.md)

- [Top SQLi reports](tops_by_bug_type/TOPSQLI.md)

- [Top SSRF reports](tops_by_bug_type/TOPSSRF.md)

- [Top Race Condition reports](tops_by_bug_type/TOPRACECONDITION.md)

- [Top Subdomain Takeover reports](tops_by_bug_type/TOPSUBDOMAINTAKEOVER.md)

- [Top Open Redirect reports](tops_by_bug_type/TOPOPENREDIRECT.md)

- [Top Clickjacking reports](tops_by_bug_type/TOPCLICKJACKING.md)

- [Top DoS reports](tops_by_bug_type/TOPDOS.md)

- [Top OAuth reports](tops_by_bug_type/TOPOAUTH.md)

- [Top Account Takeover reports](tops_by_bug_type/TOPACCOUNTTAKEOVER.md)

- [Top Business Logic reports](tops_by_bug_type/TOPBUSINESSLOGIC.md)

- [Top REST API reports](tops_by_bug_type/TOPAPI.md)

- [Top GraphQL reports](tops_by_bug_type/TOPGRAPHQL.md)

- [Top Information Disclosure reports](tops_by_bug_type/TOPINFODISCLOSURE.md)

- [Top Web Cache reports](tops_by_bug_type/TOPWEBCACHE.md)

- [Top SSTI reports](tops_by_bug_type/TOPSSTI.md)

- [Top Upload reports](tops_by_bug_type/TOPUPLOAD.md)

- [Top HTTP Request Smuggling reports](tops_by_bug_type/TOPREQUESTSMUGGLING.md)

- [Top OpenID reports](tops_by_bug_type/TOPOPENID.md)

- [Top Mobile reports](tops_by_bug_type/TOPMOBILE.md)

- [Top File Reading reports](tops_by_bug_type/TOPFILEREADING.md)

- [Top Authorization Bypass reports](tops_by_bug_type/TOPAUTHORIZATION.md)

- [Top Authentication Bypass reports](tops_by_bug_type/TOPAUTH.md)

- [Top MFA reports](tops_by_bug_type/TOPMFA.md)



Tops by program.



- [Top Mail.ru reports](tops_by_program/TOPMAILRU.md)

- [Top HackerOne reports](tops_by_program/TOPHACKERONE.md)

- [Top Shopify reports](tops_by_program/TOPSHOPIFY.md)

- [Top Nextcloud reports](tops_by_program/TOPNEXTCLOUD.md)

- [Top Twitter reports](tops_by_program/TOPTWITTER.md)

- [Top X (formerly Twitter) reports](tops_by_program/TOPX\(FORMERLYTWITTER\).md)

- [Top Uber reports](tops_by_program/TOPUBER.md)

- [Top Node.js reports](tops_by_program/TOPNODEJSTHIRDPARTYMODULES.md)

- [Top shopify-scripts reports](tops_by_program/TOPSHOPIFYSCRIPTS.md)

- [Top Legal Robot reports](tops_by_program/TOPLEGALROBOT.md)

- [Top U.S. Dept of Defense reports](tops_by_program/TOPUSDEPTOFDEFENSE.md)

- [Top Gratipay reports](tops_by_program/TOPGRATIPAY.md)

- [Top Weblate reports](tops_by_program/TOPWEBLATE.md)

- [Top VK.com reports](tops_by_program/TOPVKCOM.md)

- [Top New Relic reports](tops_by_program/TOPNEWRELIC.md)

- [Top LocalTapiola reports](tops_by_program/TOPLOCALTAPIOLA.md)

- [Top Zomato reports](tops_by_program/TOPZOMATO.md)

- [Top Slack reports](tops_by_program/TOPSLACK.md)

- [Top ownCloud reports](tops_by_program/TOPOWNCLOUD.md)

- [Top GitLab reports](tops_by_program/TOPGITLAB.md)

- [Top Ubiquiti Inc. reports](tops_by_program/TOPUBIQUITIINC.md)

- [Top Automattic reports](tops_by_program/TOPAUTOMATTIC.md)

- [Top Coinbase reports](tops_by_program/TOPCOINBASE.md)

- [Top Verizon Media reports](tops_by_program/TOPVERIZONMEDIA.md)

- [Top Starbucks reports](tops_by_program/TOPSTARBUCKS.md)

- [Top Paragon Initiative Enterprises reports](tops_by_program/TOPPARAGONINITIATIVEENTERPRISES.md)

- [Top PHP (IBB) reports](tops_by_program/TOPPHP(IBB).md)

- [Top Brave Software reports](tops_by_program/TOPBRAVESOFTWARE.md)

- [Top Vimeo reports](tops_by_program/TOPVIMEO.md)

- [Top OLX reports](tops_by_program/TOPOLX.md)

- [Top concrete5 reports](tops_by_program/TOPCONCRETE5.md)

- [Top Phabricator reports](tops_by_program/TOPPHABRICATOR.md)

- [Top Pornhub reports](tops_by_program/TOPPORNHUB.md)

- [Top Localize reports](tops_by_program/TOPLOCALIZE.md)

- [Top Qiwi reports](tops_by_program/TOPQIWI.md)

- [Top WordPress reports](tops_by_program/TOPWORDPRESS.md)

- [Top The Internet reports](tops_by_program/TOPTHEINTERNET.md)

- [Top Open-Xchange reports](tops_by_program/TOPOPENXCHANGE.md)

- [Top Razer reports](tops_by_program/TOPRAZER.md)

- [Top Rockstar Games reports](tops_by_program/TOPROCKSTARGAMES.md)

- [Top GitHub Security Lab reports](tops_by_program/TOPGITHUBSECURITYLAB.md)

- [Top h1-ctf reports](tops_by_program/TOPH1CTF.md)

- [Top Valve reports](tops_by_program/TOPVALVE.md)

- [Top Yahoo! reports](tops_by_program/TOPYAHOO!.md)

- [Top Internet Bug Bounty reports](tops_by_program/TOPINTERNETBUGBOUNTY.md)

- [Top Concrete CMS reports](tops_by_program/TOPCONCRETECMS.md)

- [Top Sifchain reports](tops_by_program/TOPSIFCHAIN.md)

- [Top Curl reports](tops_by_program/TOPCURL.md)

- [Top Acronis reports](tops_by_program/TOPACRONIS.md)

- [Top TikTok reports](tops_by_program/TOPTIKTOK.md)

- [Top MTN Group reports](tops_by_program/TOPMTNGROUP.md)

- [Top Node.js reports](tops_by_program/TOPNODEJS.md)