Skip to content

This repository detects new assets and targets from platforms like HackerOne and Bugcrowd and sends them directly to your specified Discord channel.๐Ÿš€^omidvaram be karetoon biad<3

License

Notifications You must be signed in to change notification settings

FARBODxME/Bugbounty_ScopeFinder

Folders and files

NameName
Last commit message
Last commit date

Latest commit

ย 

History

28 Commits
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 

Repository files navigation

Visitors Visitors

๐ŸŽฏ Scope Finder

Scope Finder is a Python script that monitors bug bounty program scopes (from HackerOne and Bugcrowd) and automatically sends new targets to your Discord channel via webhook. Ideal for bug bounty hunters who want to stay ahead and catch new assets as soon as they're added.

image

๐Ÿš€ Features

  • Fetches scopes from HackerOne and Bugcrowd
  • Detects new in-scope targets (URLs, websites)
  • Sends Discord embed notifications with detailed info:
    • Program name & link
    • Asset identifier & type
    • Bounty & submission status
    • Max severity, availability, confidentiality, integrity requirements
    • Max payout (For Bugcrowd)

โš™๏ธ Setup

Clone the repository, install requirements, set your Discord webhook, and run:

git clone https://github.com/FARBODxME/Bugbounty_ScopeFinder.git
cd Bugbounty_ScopeFinder
pip install -r requirements.txt

Set your Discord webhook

DISCORD_WEBHOOK_URL = "https://discord.com/api/webhooks/..."

Run the script:

python scope_finder.py

๐Ÿ“ How it works

  • Downloads the latest HackerOne and Bugcrowd scope data.

  • Compares with local JSON files (seen_h1.json and seen_bugcrowd.json) to track what youโ€™ve already seen.

  • If new targets are found, it sends a Discord embed and updates the JSON files.

๐Ÿ’กOn the first run, it skips sending to Discord (to avoid spam) but saves all data for future comparisons.

๐Ÿ“ธ Example Discord Embed:

image

โ—Notes

  • Make sure your webhook URL is kept secret.

  • The script persists state using JSON files (seen_h1.json, seen_bugcrowd.json), so donโ€™t delete them unless you want to reset history.

  • No database needed โ€“ simple & lightweight.


Happy hacking! ๐Ÿดโ€โ˜ ๏ธ

About

This repository detects new assets and targets from platforms like HackerOne and Bugcrowd and sends them directly to your specified Discord channel.๐Ÿš€^omidvaram be karetoon biad<3

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Sponsor this project

Packages

No packages published

Languages