hackerone-reports

Live site: reddelexc.github.io/hackerone-reports

Tops of HackerOne reports. All reports' raw info stored in data.csv. Scripts to update this file are written in Python 3 and require chromedriver and Chromium executables at PATH. Every script contains some info about how it works. The run order of scripts:

1. fetcher.py
2. uniquer.py
3. filler.py
4. rater.py

Tops 100.

• Top 100 upvoted reports
• Top 100 paid reports

Tops by bug type.

• Top XSS reports
• Top XXE reports
• Top CSRF reports
• Top IDOR reports
• Top RCE reports
• Top SQLi reports
• Top SSRF reports
• Top Race Condition reports
• Top Subdomain Takeover reports
• Top Open Redirect reports
• Top Clickjacking reports
• Top DoS reports
• Top OAuth reports
• Top Account Takeover reports
• Top Business Logic reports
• Top REST API reports
• Top GraphQL reports
• Top Information Disclosure reports
• Top Web Cache reports
• Top SSTI reports
• Top Upload reports
• Top HTTP Request Smuggling reports
• Top OpenID reports
• Top Mobile reports
• Top File Reading reports
• Top Authorization Bypass reports
• Top Authentication Bypass reports
• Top MFA reports

Tops by program.

• Top Mail.ru reports
• Top HackerOne reports
• Top Shopify reports
• Top Nextcloud reports
• Top Twitter reports
• Top X / xAI reports
• Top Uber reports
• Top Node.js reports
• Top shopify-scripts reports
• Top Legal Robot reports
• Top U.S. Dept of Defense reports
• Top Gratipay reports
• Top Weblate reports
• Top VK.com reports
• Top New Relic reports
• Top LocalTapiola reports
• Top Zomato reports