├── Bugcrowd_data.txt
├── Federacy_data.txt
├── HackerOne_data.txt
├── Intigriti_data.txt
├── YesWeHack_data.txt
├── .gitignore
├── HackenProof_data.txt
├── .github
    └── FUNDING.yml
├── README.md
└── main


/Bugcrowd_data.txt:
--------------------------------------------------------------------------------
1 | 


--------------------------------------------------------------------------------
/Federacy_data.txt:
--------------------------------------------------------------------------------
1 | 


--------------------------------------------------------------------------------
/HackerOne_data.txt:
--------------------------------------------------------------------------------
1 | 


--------------------------------------------------------------------------------
/Intigriti_data.txt:
--------------------------------------------------------------------------------
1 | 


--------------------------------------------------------------------------------
/YesWeHack_data.txt:
--------------------------------------------------------------------------------
1 | 


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
1 | *_data.txt


--------------------------------------------------------------------------------
/HackenProof_data.txt:
--------------------------------------------------------------------------------
1 | 


--------------------------------------------------------------------------------
/.github/FUNDING.yml:
--------------------------------------------------------------------------------
1 | github: ["dwisiswant0"]
2 | custom: ["https://paypal.me/dw1s", "https://saweria.co/dwisiswant0", "https://unstoppabledomains.com/d/dwisiswant0.crypto"]
3 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # bounty-targets-alert
 2 | 
 3 | It's an watcher for new scopes added to **[bounty-targets-data](https://github.com/arkadiyt/bounty-targets-data)** and send you alert to Slack.
 4 | 
 5 | ![bounty-targets-alert](https://user-images.githubusercontent.com/25837540/91665191-098cf380-eb1e-11ea-916e-53675edb3987.png)
 6 | 
 7 | ## Dependencies
 8 | 
 9 | ### Pre-requisites
10 | 
11 | - curl _([libcurl](https://curl.haxx.se/libcurl/))_
12 | - [go1.13+](https://golang.org/dl/)
13 | 
14 | ### Requirements
15 | 
16 | - [jq](https://stedolan.github.io/jq/download/)
17 | - [anew](https://github.com/tomnomnom/anew)
18 | - [slackcat](https://github.com/dwisiswant0/slackcat)
19 | 
20 | 
21 | ## Usage
22 | 
23 | Based on [this](https://github.com/arkadiyt/bounty-targets-data#status), I recommend you to run this every hour in a cronjob.
24 | 
25 | ```bash
26 | ▶ crontab -e
27 | 0 * * * * /path/to/bounty-targets-alert/main https://hooks.slack.com/services/xxx/xxx/xxx
28 | ```
29 | 
30 | ## Contact
31 | 
32 | [![Twitter Follow](https://img.shields.io/twitter/follow/dwisiswant0.svg?style=social)](https://twitter.com/dwisiswant0)
33 | 
34 | Follow me at Twitter, DMs are always open.


--------------------------------------------------------------------------------
/main:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | # @dwisiswant0 </3 :")
 3 | 
 4 | PROGRAMS=(
 5 | 	"HackerOne"
 6 | 	"Bugcrowd"
 7 | 	"Intigriti"
 8 | 	"YesWeHack"
 9 | 	"HackenProof"
10 | 	"Federacy"
11 | )
12 | 
13 | alert() {
14 | 	curl -sL "${1}/$(sed -e 's/\(.*\)/\L\1/' <<< "${2}")_data.json" | \
15 | 		jq -r "${3}" | \
16 | 		anew "$(dirname "${BASH_SOURCE[0]}")/${2}_data.txt" | \
17 | 		awk '{print new ": `" $0 "`"}' new=":rocket: New targets from ${2}" | \
18 | 		slackcat
19 | }
20 | 
21 | fetch() {
22 | 	local REPO="https://github.com/arkadiyt/bounty-targets-data"
23 | 	local DATA="${REPO}/raw/master/data"
24 | 
25 | 	for PROGRAM in "${PROGRAMS[@]}"
26 | 	do
27 | 		local KEY_SCOPE="target"
28 | 		local KEY_TYPES="type"
29 | 
30 | 		case "${PROGRAM}" in
31 | 			"HackerOne")
32 | 				KEY_SCOPE="asset_identifier"
33 | 				KEY_TYPES="asset_type"
34 | 			;;
35 | 			"Intigriti")
36 | 				KEY_SCOPE="endpoint"
37 | 			;;
38 | 		esac
39 | 
40 | 		alert "${DATA}" "${PROGRAM}" ".[].targets.in_scope[] | [.${KEY_TYPES}, .${KEY_SCOPE}] | @json" &
41 | 	done
42 | 
43 | 	wait
44 | }
45 | 
46 | init() {
47 | 	[[ -z "${1}" ]] && {
48 | 		echo -e "No SLACK_WEBHOOK_URL specified!\n"
49 | 		echo -e "Usage:"
50 | 		echo -e "  ./${0} https://hooks.slack.com/services/xxx/xxx/xxx"
51 | 		exit
52 | 	}
53 | 
54 | 	fetch "${1}"
55 | }
56 | 
57 | export SLACK_WEBHOOK_URL="${1}"
58 | 
59 | init "${1}"


--------------------------------------------------------------------------------