Top disclosed reports from HackerOne
Last updated Jul 8, 2026
6.3k
Stars
1.1k
Forks
1
Issues
+14
Stars/day
Attention Score
87
Language breakdown
Python 100.0%
▸ Files
click to expand
README
Live site: reddelexc.github.io/hackerone-reports
Tops of HackerOne reports. All reports' raw info stored in data.csv. Scripts to update this file are written in Python 3 and require chromedriver and Chromium executables at PATH. Every script contains some info about how it works. The run order of scripts:
1) fetcher.py 1) uniquer.py 1) filler.py 1) rater.py
Tops 100.
Tops by bug type.- Top XSS reports
- Top XXE reports
- Top CSRF reports
- Top IDOR reports
- Top RCE reports
- Top SQLi reports
- Top SSRF reports
- Top Race Condition reports
- Top Subdomain Takeover reports
- Top Open Redirect reports
- Top Clickjacking reports
- Top DoS reports
- Top OAuth reports
- Top Account Takeover reports
- Top Business Logic reports
- Top REST API reports
- Top GraphQL reports
- Top Information Disclosure reports
- Top Web Cache reports
- Top SSTI reports
- Top Upload reports
- Top HTTP Request Smuggling reports
- Top OpenID reports
- Top Mobile reports
- Top File Reading reports
- Top Authorization Bypass reports
- Top Authentication Bypass reports
- Top MFA reports
- Top Mail.ru reports
- Top HackerOne reports
- Top Shopify reports
- Top Nextcloud reports
- Top Twitter reports
- Top X / xAI reports
- Top Uber reports
- Top Node.js reports
- Top shopify-scripts reports
- Top Legal Robot reports
- Top U.S. Dept of Defense reports
- Top Gratipay reports
- Top Weblate reports
- Top VK.com reports
- Top New Relic reports
- Top LocalTapiola reports
- Top Zomato reports
- Top Slack reports
- Top ownCloud reports
- Top GitLab reports
- Top Ubiquiti Inc. reports
- Top Automattic reports
- Top Coinbase reports
- Top Verizon Media reports
- Top Starbucks reports
- Top Paragon Initiative Enterprises reports
- Top PHP (IBB) reports.md)
- Top Brave Software reports
- Top Vimeo reports
- Top OLX reports
- Top concrete5 reports
- Top Phabricator reports
- Top Pornhub reports
- Top Localize reports
- Top Qiwi reports
- Top WordPress reports
- Top The Internet reports
- Top Open-Xchange reports
- Top Razer reports
- Top Rockstar Games reports
- Top GitHub Security Lab reports
- Top h1-ctf reports
- Top Valve reports
- Top Yahoo! reports
- Top Internet Bug Bounty reports
- Top Concrete CMS reports
- Top Sifchain reports
- Top Curl reports
- Top Acronis reports
- Top TikTok reports
- Top MTN Group reports
- Top Node.js reports
- Top Eternal reports
- Top Rocket.Chat reports
