In order to achieve an “endless” reading list, I used the HackerOne API to collect every single disclosed report on HackerOne within the last 5 years. Multiple people asked for the list – so here it is!
Over 6,000 reports included.
Disclaimer: This is data straight from the JSON response, some discrepancies exist as a result of mislabeling. Keep in mind, this is ONLY disclosed reports (Limited disclosure included).
Last Updated: 03/17/19