Bug Bounty on a Sushi Belt – Automated Target Identification

Hacker News

Share card

Bug Bounty on a Sushi Belt – Automated Target Identification

Hi HN, I'm excited to share a project of mine called Bug Bounty Intelligence Stream. While automating my own bug bounty hunting, I realized the system detected more vulnerabilities than I could handle alone. Hence, I built this product. The concept is simple: users can subscribe to an event stream that delivers pre-verified targets for potential bug bounty and security research. I take no credit for any findings and do not report them myself, so any potential bounty earnings are entirely yours. This tool might also interest academics studying the state of web security. I talked to a lawyer in my home country and from a legal standpoint I should be in no trouble. You can imagine the product like a sushi belt. You just sit there and watch as the tasty stuff comes your way and you grab whatever you want. This is my first ever-product and I am hungry for feedback from you. Please use the coupon code HN100 to test for free for one month in the “per month” subscription. Some example detections include: Exposed .git, ssh-keys, docker-compose, .env, config Files Extremely outdated PHP, WordPress, Apache, FTP Public phpinfo() Leaked database backups On my to-do list are features like: Access to historical data Automatic extraction of contacts from security.txt files More complex detection capabilities Looking forward to your feedback! URL: https://cerast-intelligence.com/