From 0e8348681dc3cdae5ef2b4a4f41e6991f9096d00 Mon Sep 17 00:00:00 2001 From: arkadiyt <> Date: Thu, 17 Oct 2024 21:42:55 -0700 Subject: [PATCH] Re-enable hackenproof --- README.md | 2 +- config/README.md.erb | 2 +- lib/bounty-targets/cli.rb | 2 +- lib/bounty-targets/hackenproof.rb | 6 ++++-- 4 files changed, 7 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index a3a3e1b..cd5ee7e 100644 --- a/README.md +++ b/README.md @@ -11,7 +11,7 @@ Supported platforms: - Hackerone - Bugcrowd - Intigriti - +- Hackenproof - YesWeHack - Federacy diff --git a/config/README.md.erb b/config/README.md.erb index 9b4719d..7466ae4 100644 --- a/config/README.md.erb +++ b/config/README.md.erb @@ -12,7 +12,7 @@ Extra files: - [bugcrowd_data.json](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/bugcrowd_data.json): raw [Bugcrowd](https://bugcrowd.com) data. - [hackerone_data.json](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/hackerone_data.json): raw [Hackerone](https://hackerone.com) data. - [federacy_data.json](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/federacy_data.json): raw [Federacy](https://federacy.com) data. - +- [hackenproof_data.json](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/hackenproof_data.json): raw [Hackenproof](https://hackenproof.com) data. - [intigriti_data.json](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/intigriti_data.json): raw [Intigriti](https://www.intigriti.com) data. - [yeswehack_data.json](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/yeswehack_data.json): raw [YesWeHack](https://www.yeswehack.com/) data. - [hackerone_schema.graphql](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/hackerone_schema.graphql): Hackerone's graphql api schema. diff --git a/lib/bounty-targets/cli.rb b/lib/bounty-targets/cli.rb index a307020..6e38ca8 100644 --- a/lib/bounty-targets/cli.rb +++ b/lib/bounty-targets/cli.rb @@ -54,7 +54,7 @@ def scan!(output_dir) clients = { bugcrowd: BountyTargets::Bugcrowd.new, federacy: BountyTargets::Federacy.new, - # hackenproof: BountyTargets::Hackenproof.new, + hackenproof: BountyTargets::Hackenproof.new, hackerone: BountyTargets::Hackerone.new, intigriti: BountyTargets::Intigriti.new, yeswehack: BountyTargets::YesWeHack.new diff --git a/lib/bounty-targets/hackenproof.rb b/lib/bounty-targets/hackenproof.rb index ec1af92..0ab4abd 100644 --- a/lib/bounty-targets/hackenproof.rb +++ b/lib/bounty-targets/hackenproof.rb @@ -37,7 +37,8 @@ def directory_index ::Kernel.loop do retryable do - document = ::JSON.parse(::SsrfFilter.get("https://hackenproof.com/bug-bounty-programs-list?page=#{page}").body) + document = ::JSON.parse(::SsrfFilter.get("https://hackenproof.com/bug-bounty-programs-list?page=#{page}", + headers: {'hp-partners-bypass' => ENV.fetch('HACKENPROOF', nil)}).body) end programs.concat(document['programs'].map do |program| { @@ -60,7 +61,8 @@ def directory_index def program_scopes(program) retryable do - response = ::JSON.parse(::SsrfFilter.get("https://hackenproof.com/bug-bounty-programs-list/#{program[:slug]}").body) + response = ::JSON.parse(::SsrfFilter.get("https://hackenproof.com/bug-bounty-programs-list/#{program[:slug]}", + headers: {'hp-partners-bypass' => ENV.fetch('HACKENPROOF', nil)}).body) grouped = response['scopes'].group_by do |scope| scope['out_of_scope'] end