Re-enable hackenproof

arkadiyt · Oct 18, 2024 · 0e83486 · 0e83486
1 parent b3a87ad
commit 0e83486
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 5 deletions.
diff --git a/README.md b/README.md
@@ -11,7 +11,7 @@ Supported platforms:
 - Hackerone
 - Bugcrowd
 - Intigriti
-<!-- - Hackenproof -->
+- Hackenproof
 - YesWeHack
 - Federacy
 

diff --git a/config/README.md.erb b/config/README.md.erb
@@ -12,7 +12,7 @@ Extra files:
 - [bugcrowd_data.json](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/bugcrowd_data.json): raw [Bugcrowd](https://bugcrowd.com) data.
 - [hackerone_data.json](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/hackerone_data.json): raw [Hackerone](https://hackerone.com) data.
 - [federacy_data.json](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/federacy_data.json): raw [Federacy](https://federacy.com) data.
-<!-- - [hackenproof_data.json](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/hackenproof_data.json): raw [Hackenproof](https://hackenproof.com) data. -->
+- [hackenproof_data.json](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/hackenproof_data.json): raw [Hackenproof](https://hackenproof.com) data.
 - [intigriti_data.json](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/intigriti_data.json): raw [Intigriti](https://www.intigriti.com) data.
 - [yeswehack_data.json](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/yeswehack_data.json): raw [YesWeHack](https://www.yeswehack.com/) data.
 - [hackerone_schema.graphql](https://github.com/arkadiyt/bounty-targets-data/blob/master/data/hackerone_schema.graphql): Hackerone's graphql api schema.

diff --git a/lib/bounty-targets/cli.rb b/lib/bounty-targets/cli.rb
@@ -54,7 +54,7 @@ def scan!(output_dir)
       clients = {
         bugcrowd: BountyTargets::Bugcrowd.new,
         federacy: BountyTargets::Federacy.new,
-        # hackenproof: BountyTargets::Hackenproof.new,
+        hackenproof: BountyTargets::Hackenproof.new,
         hackerone: BountyTargets::Hackerone.new,
         intigriti: BountyTargets::Intigriti.new,
         yeswehack: BountyTargets::YesWeHack.new

diff --git a/lib/bounty-targets/hackenproof.rb b/lib/bounty-targets/hackenproof.rb
@@ -37,7 +37,8 @@ def directory_index
 
       ::Kernel.loop do
         retryable do
-          document = ::JSON.parse(::SsrfFilter.get("https://hackenproof.com/bug-bounty-programs-list?page=#{page}").body)
+          document = ::JSON.parse(::SsrfFilter.get("https://hackenproof.com/bug-bounty-programs-list?page=#{page}",
+            headers: {'hp-partners-bypass' => ENV.fetch('HACKENPROOF', nil)}).body)
         end
         programs.concat(document['programs'].map do |program|
           {
@@ -60,7 +61,8 @@ def directory_index
 
     def program_scopes(program)
       retryable do
-        response = ::JSON.parse(::SsrfFilter.get("https://hackenproof.com/bug-bounty-programs-list/#{program[:slug]}").body)
+        response = ::JSON.parse(::SsrfFilter.get("https://hackenproof.com/bug-bounty-programs-list/#{program[:slug]}",
+          headers: {'hp-partners-bypass' => ENV.fetch('HACKENPROOF', nil)}).body)
         grouped = response['scopes'].group_by do |scope|
           scope['out_of_scope']
         end