Login

u/vs_bb20

r/hackthebox r/BugBountyNoobs r/bugbounty r/1stPrinciples_io r/tryhackme r/AlreadyHere
▲ 3 r/hackthebox

Bounty index on product hunt - would love a visitation and feedback

hey everybody ,
launched bounty-index on product hunt and would love some support .
Its a platform helping you discover bug bouty programs across 6 platform as of now , with additional functionalitites of creating a watchlist , historical data , charts of its performnace , compare 4 programs at once .
It is aimed to be a total free(nada money in my pocket) tool , no login required(only if you manage a watchlist).
Please go through the app once , Feedback are very much appreciated

product hunt link: https://www.producthunt.com/products/bounty-index?utm_source=other&utm_medium=social

tool : bountyindex.in

reddit.com
u/vs_bb20 — 8 days ago
▲ 1 r/tryhackme

Bug bounty on product hunt - would love a visitation and feedback

hey everybody ,
launched bounty-index on product hunt and would love some support .
Its a platform helping you discover bug bouty programs across 6 platform as of now , with additional functionalitites of creating a watchlist , historical data , charts of its performnace , compare 4 programs at once .
It is aimed to be a total free tool , no login required(only if you manage a watchlist).
Please go through the app once , Feedback are very much appreciated

product hunt link: https://www.producthunt.com/products/bounty-index?utm_source=other&utm_medium=social

tool : bountyindex.in

reddit.com
u/vs_bb20 — 8 days ago
▲ 0 r/BugBountyNoobs

Bounty index on product hunt - love a visitation

hey everybody ,
launched bounty-index on product hunt and would love some support .
Its a platform helping you discover bug bouty programs across 6 platform as of now , with additional functionalitites of creating a watchlist , historical data , charts of its performnace , compare 4 programs at once .
It is aimed to be a total free tool , no login required(only if you manage a watchlist).
Please go through the app once , Feedback are very much appreciated

product hunt link: https://www.producthunt.com/products/bounty-index?utm_source=other&utm_medium=social

tool : bountyindex.in

reddit.com
u/vs_bb20 — 8 days ago
▲ 2 r/BugBountyNoobs

Small update — what's shipped on bounty.index since launch

Immunefi is now indexed. They're not in arkadiyt/bounty-targets-data, so I wrote a scraper for their site directly. 181 programs, ~2,900 in-scope assets, top payout is LayerZero at $15M. If you don't touch web3, ignore. If you do — it's the same filter/search UI as the rest.

Per-program RSS feeds. Every program page now has an RSS feed of its scope changes at /rss/programs/{platform}/{slug}. Each entry is a diff: what was added, removed, or if the reward/safe-harbor changed. This is the free version of what bbradar.io gates behind their €89/yr Pro tier. Point your feed reader (Feedly, NetNewsWire, whatever) at any program you actually care about.

7-day activity chip on program pages. A small +N −M · 7d indicator when scope has actually changed recently. Answers "is this worth looking at today or is it dormant" without clicking in.

Company logos on program hero. Small polish, but the platform-only dot was ugly and hard to scan when you had a bunch of tabs open.

Cross-device sync for watchlist/compare (optional). Sign in with GitHub if you want your watchlist to follow you between machines. Fully optional — the localStorage path still works if you don't want an account. No email, no notifications, no marketing.

Preset landing pages for common filters — /programs/paying, /programs/safe-harbor, /programs/wildcard. Mostly SEO, but if those are your go-to filters they're bookmarkable.

Site's at bountyindex.in

Repo is at github.com/Varun2024/Bounty-index. Still solo, still free, still bootstrapped.

What I want feedback on: the RSS-per-program feature specifically. If you're a bounty hunter, does that actually change how you'd use the site, or is it a checkbox feature that no one will subscribe to? Blunt answers appreciated.

u/vs_bb20 — 11 days ago
▲ 2 r/BugBountyNoobs+1 crossposts

Built a scope lookup tool because I was tired of opening 5 tabs to check if a domain is in scope somewhere

Made this for my own recon and figured someone else might get use out of it.

The pain: find a domain during recon, then open HackerOne + Bugcrowd + Intigriti + YesWeHack + Federacy trying to figure out if any of them have it in scope. And sometimes miss that it was explicitly out-of-scope in a program — which is worse than not knowing, since testing banned assets can get you kicked.

Paste a domain into bounty.index and you get:

- Every program that has it in-scope

- Amber warning if any program has it explicitly out-of-scope, so you don't burn a program by accident

- Deduped by program, with slug hints when two programs share a name

Also has: filters (platform, payout, asset type, safe harbor), fuzzy search across program name AND scope identifiers, compare up to 4 programs side-by-side, watchlist for scope + reward changes over time, CSV/JSON export of any filtered set.

Free, no login required, no email capture. Refreshed daily from arkadiyt/bounty-targets-data.

bounty-index.vercel.app

Genuinely curious what would make it more useful for your recon workflow. Response-time indicators? Payout-history tracking? Something else?

u/vs_bb20 — 13 days ago
▲ 2 r/1stPrinciples_io+1 crossposts

Read this first — what r/1st is, and what it isn't

Most technical content online optimizes for looking smart. This sub optimizes for actually understanding.

The rule is simple: don't accept any technical idea until you can derive it. Not memorize the proof — derive the need. Why does this thing exist? What breaks without it? What's the simplest version of the problem it solves?

If you can answer that, the formula writes itself.

What belongs here:

- "I finally understood why backprop works — here's the version I wish I'd seen first."

- "Why do we need eigenvalues? I faked it for two years. Here's what clicked."

- "Derive Bayes' theorem in 4 lines, no formula lookup."

- "I don't get why consistent hashing matters. Walk me through the problem it solves."

What doesn't:

- Course recommendations, roadmap posts, "how do I start ML."

- LLM-generated explainers pasted with no thought.

- Anything that starts with "the formula is" instead of "the problem is."

The cultural bet: half-understanding posted clearly will teach more people than polished correctness ever does. Post the messy derivation. Be wrong. Get corrected. That's the loop.

Rules in the sidebar. Flairs for Derivation, Question, TIL-after-years, etc.

Welcome. Now go derive something.

reddit.com
u/vs_bb20 — 2 months ago