Obb api?

[atmon3r]

An api on obb can be really interesting for dev's!

For researchers (with token):

• the ability to retrieve these statistics

• see the badges

• retrieve certificates

• etc...

For website owner:

• I'm basically thinking of a website check in the obb database (same results as the search page)

This would allow the website dev to create their own verification system and be even more responsive!

All this is a basic idea, there would be a lot to do around this

[x1admin]

An api on obb can be really interesting for dev's!

For researchers (with token):

• the ability to retrieve these statistics

• see the badges

• retrieve certificates

• etc...

For website owner:

• I'm basically thinking of a website check in the obb database (same results as the search page)

This would allow the website dev to create their own verification system and be even more responsive!

All this is a basic idea, there would be a lot to do around this

we already have API

[atmon3r]

Nice!! I did not find any information, sorry...
could you tell me more?

[x1admin]

Nice!! I did not find any information, sorry...
could you tell me more?

https://www.openbugbounty.org/api/1/sea ... google.com

[atmon3r]

Yeah! Perfect...
I suppose there are other endpoints ...
if you need help writing a documentation! it could be really interesting for dev's

[atmon3r]

Bump

Little idea for an openbugbounty addon firefox.



For the moment, it's just a hardcoded interface...
I'm blocking through the obb server configuration (access-control-allow-origin)

It really should not be much !!
imagine:

Code: Select all

https://www.openbugbounty.org/researchers/atmon3r/?output=json

On researchers detail page:

Code: Select all

if(isset($_GET['output']) && $_GET['output'] === 'json'){
	header('Content-type: application/json');
	echo json_encode($userInfo);
	exit;
}

$userInfo is output of your obb database....
In principle, that the data come out in json, xml .... May it matter !!
The only problem is with the html ....

I do not ask for more !!

[x1admin]

Addon will be show only researcher stats? For any researcher?

[atmon3r]

Addon will be show only researcher stats? For any researcher?

Yes only reseacher stats...
It will be necessary to configure a user for the use of the plugin. (either harcoded or a form in the plugin)

[secuninja]

is there some more information for api? schema?
i can collect information for specific domain, but not for researcher?
https://www.openbugbounty.org/api/1/sea ... google.com

[atmon3r]

is there some more information for api? schema?

To make a API properly, it would be enough to use the already existing code (html display) and make several out:
- json
- xml
- txt

Endpoint example to retrieve user info:

Code: Select all

https://www.openbugbounty.org/researchers/atmon3r/?output=json

Anyway, the info users are available in html!
The big problem that I encounter comes from the server obb configuration
It would be so interesting to have a functional API