Find Bug Bounty Outside Bug Bounty Platforms
1. Google Dorks
Link : Google Dork
2. Public Bug Bounty Program List
Link : Bugcrowd
Link : Firebounty
3. Top sites security.txt (I will create a bash script to automate this section, and I will post it soon!
3-1. Download top 1000000 domains from https://radar.cloudflare.com/domains
3-2. Check security.txt and .well-known/security.txt for main domain
3-3. Store these two paths in a paths file.
3-4. Run the two commands below:
cat domains | httpx -path paths -mc 200 -cl -ct -o result1
cat domains | while read d; do echo "www.$d"; done | httpx -path paths -mc 200 -cl -ct -o result2
#BugBounty #BugBountyTips