GitHub repo of ALL known bug bounty platforms (45) and Halls of Fame (497) | Hacker News Reader

GitHub repo of ALL known bug bounty platforms (45) and Halls of Fame (497)

github.com

I expected the list of platforms to be a list of companies that actually have programs, not a list of companies that offer to manage the program for you...

Same, but only because I missed the word “platforms” when I read the title. I don’t know how many companies I would expect to be on a list like that, but certainly more than 45.

Yeh, these are the different orgs that run programs on behalf of companies. For a list of the orgs running programs there’s about 2,300 of those here (also open-source and a contact work in progress): https://github.com/disclose/diodb

Granted “platforms” was a weird phrase, but I assumed it was companies operating bug bounty programs because that’s the only thing I would expect to see on HN or care about seeing on HN.

If I were looking for a company to host one for me I would have no trouble. 10 seconds on Google, literally.

If you were a bug bounty hunter and wanted to sign up for as many platforms as possible to maximise your potential scope, this list would be really useful.

Seems to me like useful content for hackers, which is what I would expect to see on Hacker News.

I opened a few random URLs from `hall-of-fame.txt` and I got a spam site, a few 404s and an about page.

PR just merged with 404s removed.

Every list is a list of "all known things" unless the author intentionally left something off it. It doesn't mean the author knows about all of the platforms; only that they listed all the platforms they know of. As such, it's not a very useful description.

It also means that the author of the list will add any additional "thing" to the list you tell them about :)

Welcome to open source :)

Reply on news.ycombinator.com