Synack Platform API Scripts

Custom created scripts for a better/faster experience at Synack Bug Bounty Platform.

Scripts:

• Download all in-scope IP's for host targets: scope_download.py
• Hydra open ports export: hydra_export.py

Usages:

• Do not forgot to change authorization headers for your user and target codename you want to process in the script which is used as hardcoded.
• Auth headers can be easily gathered from the web browser console with the command: sessionStorage.getItem('shared-session-com.synack.accessToken'); while logged in.
• Target codenames can also be easily gathered from URL, after clicking the target as: https://platform.synack.com/targets/<target-codename>/scope
• For scope_download.py script, max_page_count should be increased if the target scope is too big. It can also be confirmed with the curl command: curl -i -s -k -X $'GET' -H $'Host: platform.synack.com' -H $'Authorization: Bearer <auth-token>' $'https://platform.synack.com/api/targets/<target-code>/cidrs?page=<max-page-count>'. If it returns empty body while connected to the LP, then it can be said that the script covers all scope.

Credits:

• Thanks Rezn0k for his contributions on Hydra export script!