6 ms·
GitHub repo of ALL known bug bounty platforms (45) and Halls of Fame (497)
- chrismeller 6y agoI expected the list of platforms to be a list of companies that actually have programs, not a list of companies that offer to manage the program for you...
- onionisafruit 6y agoSame, but only because I missed the word “platforms” when I read the title. I don’t know how many companies I would expect to be on a list like that, but certainly more than 45.
- chrismeller 6y agoGranted “platforms” was a weird phrase, but I assumed it was companies operating bug bounty programs because that’s the only thing I would expect to see on HN or care about seeing on HN. If I were looking for a company to host one for me I would have no trouble. 10 seconds on Google, literally.
- TomNomNom 6y agoIf you were a bug bounty hunter and wanted to sign up for as many platforms as possible to maximise your potential scope, this list would be really useful. Seems to me like useful content for hackers, which is what I would expect to see on Hacker News.
- caseyjohnellis 6y agoYeh, these are the different orgs that run programs on behalf of companies. For a list of the orgs running programs there’s about 2,300 of those here (also open-source and a contact work in progress): https://github.com/disclose/diodb https://github.com/disclose/diodb
- timvdalen 6y agoI opened a few random URLs from `hall-of-fame.txt` and I got a spam site, a few 404s and an about page.
- caseyjohnellis 6y agoPR just merged with 404s removed.
- onion2k 6y agoEvery list is a list of "all known things" unless the author intentionally left something off it. It doesn't mean the author knows about all of the platforms; only that they listed all the platforms they know of. As such, it's not a very useful description.
- rnestler 6y agoIt also means that the author of the list will add any additional "thing" to the list you tell them about :)
- caseyjohnellis 6y agoWelcome to open source :)