**Live site:** [reddelexc.github.io/hackerone-reports](https://reddelexc.github.io/hackerone-reports)

Tops of HackerOne reports. All reports' raw info stored in `data.csv`.
Scripts to update this file are written in Python 3 and require `chromedriver` and `Chromium` executables at `PATH`.
Every script contains some info about how it works.
The run order of scripts:

1) `fetcher.py`
1) `uniquer.py`
1) `filler.py`
1) `rater.py`

Tops 100.

- [Top 100 upvoted reports](docs/tops_100/TOP100UPVOTED.md)
- [Top 100 paid reports](docs/tops_100/TOP100PAID.md)

Tops by bug type.

- [Top XSS reports](docs/tops_by_bug_type/TOPXSS.md)
- [Top XXE reports](docs/tops_by_bug_type/TOPXXE.md)
- [Top CSRF reports](docs/tops_by_bug_type/TOPCSRF.md)
- [Top IDOR reports](docs/tops_by_bug_type/TOPIDOR.md)
- [Top RCE reports](docs/tops_by_bug_type/TOPRCE.md)
- [Top SQLi reports](docs/tops_by_bug_type/TOPSQLI.md)
- [Top SSRF reports](docs/tops_by_bug_type/TOPSSRF.md)
- [Top Race Condition reports](docs/tops_by_bug_type/TOPRACECONDITION.md)
- [Top Subdomain Takeover reports](docs/tops_by_bug_type/TOPSUBDOMAINTAKEOVER.md)
- [Top Open Redirect reports](docs/tops_by_bug_type/TOPOPENREDIRECT.md)
- [Top Clickjacking reports](docs/tops_by_bug_type/TOPCLICKJACKING.md)
- [Top DoS reports](docs/tops_by_bug_type/TOPDOS.md)
- [Top OAuth reports](docs/tops_by_bug_type/TOPOAUTH.md)
- [Top Account Takeover reports](docs/tops_by_bug_type/TOPACCOUNTTAKEOVER.md)
- [Top Business Logic reports](docs/tops_by_bug_type/TOPBUSINESSLOGIC.md)
- [Top REST API reports](docs/tops_by_bug_type/TOPAPI.md)
- [Top GraphQL reports](docs/tops_by_bug_type/TOPGRAPHQL.md)
- [Top Information Disclosure reports](docs/tops_by_bug_type/TOPINFODISCLOSURE.md)
- [Top Web Cache reports](docs/tops_by_bug_type/TOPWEBCACHE.md)
- [Top SSTI reports](docs/tops_by_bug_type/TOPSSTI.md)
- [Top Upload reports](docs/tops_by_bug_type/TOPUPLOAD.md)
- [Top HTTP Request Smuggling reports](docs/tops_by_bug_type/TOPREQUESTSMUGGLING.md)
- [Top OpenID reports](docs/tops_by_bug_type/TOPOPENID.md)
- [Top Mobile reports](docs/tops_by_bug_type/TOPMOBILE.md)
- [Top File Reading reports](docs/tops_by_bug_type/TOPFILEREADING.md)
- [Top Authorization Bypass reports](docs/tops_by_bug_type/TOPAUTHORIZATION.md)
- [Top Authentication Bypass reports](docs/tops_by_bug_type/TOPAUTH.md)
- [Top MFA reports](docs/tops_by_bug_type/TOPMFA.md)

Tops by program.

- [Top Mail.ru reports](docs/tops_by_program/TOPMAILRU.md)
- [Top HackerOne reports](docs/tops_by_program/TOPHACKERONE.md)
- [Top Shopify reports](docs/tops_by_program/TOPSHOPIFY.md)
- [Top Nextcloud reports](docs/tops_by_program/TOPNEXTCLOUD.md)
- [Top Twitter reports](docs/tops_by_program/TOPTWITTER.md)
- [Top X / xAI reports](docs/tops_by_program/TOPXXAI.md)
- [Top Uber reports](docs/tops_by_program/TOPUBER.md)
- [Top Node.js reports](docs/tops_by_program/TOPNODEJSTHIRDPARTYMODULES.md)
- [Top shopify-scripts reports](docs/tops_by_program/TOPSHOPIFYSCRIPTS.md)
- [Top Legal Robot reports](docs/tops_by_program/TOPLEGALROBOT.md)
- [Top U.S. Dept of Defense reports](docs/tops_by_program/TOPUSDEPTOFDEFENSE.md)
- [Top Gratipay reports](docs/tops_by_program/TOPGRATIPAY.md)
- [Top Weblate reports](docs/tops_by_program/TOPWEBLATE.md)
- [Top VK.com reports](docs/tops_by_program/TOPVKCOM.md)
- [Top New Relic reports](docs/tops_by_program/TOPNEWRELIC.md)
- [Top LocalTapiola reports](docs/tops_by_program/TOPLOCALTAPIOLA.md)
- [Top Zomato reports](docs/tops_by_program/TOPZOMATO.md)
- [Top Slack reports](docs/tops_by_program/TOPSLACK.md)
- [Top ownCloud reports](docs/tops_by_program/TOPOWNCLOUD.md)
- [Top GitLab reports](docs/tops_by_program/TOPGITLAB.md)
- [Top Ubiquiti Inc. reports](docs/tops_by_program/TOPUBIQUITIINC.md)
- [Top Automattic reports](docs/tops_by_program/TOPAUTOMATTIC.md)
- [Top Coinbase reports](docs/tops_by_program/TOPCOINBASE.md)
- [Top Verizon Media reports](docs/tops_by_program/TOPVERIZONMEDIA.md)
- [Top Starbucks reports](docs/tops_by_program/TOPSTARBUCKS.md)
- [Top Paragon Initiative Enterprises reports](docs/tops_by_program/TOPPARAGONINITIATIVEENTERPRISES.md)
- [Top PHP (IBB) reports](docs/tops_by_program/TOPPHP(IBB).md)
- [Top Brave Software reports](docs/tops_by_program/TOPBRAVESOFTWARE.md)
- [Top Vimeo reports](docs/tops_by_program/TOPVIMEO.md)
- [Top OLX reports](docs/tops_by_program/TOPOLX.md)
- [Top concrete5 reports](docs/tops_by_program/TOPCONCRETE5.md)
- [Top Phabricator reports](docs/tops_by_program/TOPPHABRICATOR.md)
- [Top Pornhub reports](docs/tops_by_program/TOPPORNHUB.md)
- [Top Localize reports](docs/tops_by_program/TOPLOCALIZE.md)
- [Top Qiwi reports](docs/tops_by_program/TOPQIWI.md)
- [Top WordPress reports](docs/tops_by_program/TOPWORDPRESS.md)
- [Top The Internet reports](docs/tops_by_program/TOPTHEINTERNET.md)
- [Top Open-Xchange reports](docs/tops_by_program/TOPOPENXCHANGE.md)
- [Top Razer reports](docs/tops_by_program/TOPRAZER.md)
- [Top Rockstar Games reports](docs/tops_by_program/TOPROCKSTARGAMES.md)
- [Top GitHub Security Lab reports](docs/tops_by_program/TOPGITHUBSECURITYLAB.md)
- [Top h1-ctf reports](docs/tops_by_program/TOPH1CTF.md)
- [Top Valve reports](docs/tops_by_program/TOPVALVE.md)
- [Top Yahoo! reports](docs/tops_by_program/TOPYAHOO!.md)
- [Top Internet Bug Bounty reports](docs/tops_by_program/TOPINTERNETBUGBOUNTY.md)
- [Top Concrete CMS reports](docs/tops_by_program/TOPCONCRETECMS.md)
- [Top Sifchain reports](docs/tops_by_program/TOPSIFCHAIN.md)
- [Top Curl reports](docs/tops_by_program/TOPCURL.md)
- [Top Acronis reports](docs/tops_by_program/TOPACRONIS.md)
- [Top TikTok reports](docs/tops_by_program/TOPTIKTOK.md)
- [Top MTN Group reports](docs/tops_by_program/TOPMTNGROUP.md)
- [Top Node.js reports](docs/tops_by_program/TOPNODEJS.md)
- [Top Eternal reports](docs/tops_by_program/TOPETERNAL.md)
- [Top Rocket.Chat reports](docs/tops_by_program/TOPROCKETCHAT.md)