/bug-bounty-dorks

List of Google Dorks for sites that have responsible disclosure program / bug bounty program

Bug Bounty Dorks

List of Google Dorks to search for companies that have a responsible disclosure program or bug bounty program which are not affiliated with known bug bounty platforms such as HackerOne or Bugcrowd.

Pull requests are welcome!

Some of the dorks are sourced from Nightwatch Cybersecurity https://wwws.nightwatchcybersecurity.com/2019/05/04/finding-unlisted-public-bounty-programs-with-google-dorks/

Emad Shanab's tweet https://twitter.com/alra3ees/status/1147728448170942464

Kunal Pandey's tweet https://twitter.com/kunalp94/status/1180193592846868480

A:\fie's tweet https://twitter.com/emenalf/status/1099180292068294658

Aishwarya Kendle's blog post https://medium.com/@aishwaryakendle/how-we-hijacked-26-subdomains-9c05c94c7049

zseano's tweet https://twitter.com/zseano/status/1261292736478687232