RepoRecon helps bug bounty hunters find open-source repositories that are in scope for bug bounty programs.
It pulls data from several platforms:
- HackerOne
- Bugcrowd
- Intigriti
- YesWeHack
The data is refreshed automatically from the bounty-targets-data project and turned into a simple website you can browse.
- A GitHub Action runs on a schedule.
- It clones the bounty-targets-data repo.
scripts/extract_repos.pyparses the JSON files and writesdata/repos.json.- The static site in
index.htmlreadsdata/repos.jsonand shows a table you can filter.
- Clone this repo.
- Run
python scripts/extract_repos.pyto builddata/repos.json. - Open
index.htmlin your browser (or serve the folder with any static file server).
The data comes from:
https://github.com/arkadiyt/bounty-targets-data
MIT