What's up <@&1173714882093396069>'s! 

Today I'm releasing an exclusive new script that I created to help you identify potential programs to hack on 🔥 

It uses your HackerOne session to pull down all your programs and their bounty stats data, and looks at a few key metrics:

- avg high payout vs max high ratio ≥ 75%
- avg crit payout vs max crit ratio ≥ 75%
- number of highs submitted ≥ 40%
- number of crits submitted ≥ 40%
- max payout > highest max crit bounty
- high + crit percentage (combined) ≥ 40%

With this data, you should be able to spot programs that are more anomalous in terms of their payout consistency, when compared to other programs!

To use the tool, first make sure you have installed the python dependencies:

```
pip install requests tqdm
```

Then you just run it like any other Python program:

```sh
usage: find_programs.py [-h] [-s SESSION] [-t TOKEN] [-f] [-m MIN_REQ] [-c]

options:
  -h, --help            show this help message and exit
  -s SESSION, --session SESSION
                        __Host-session cookie value from hackerone.com
  -t TOKEN, --token TOKEN
                        X-Csrf-Token value, you can fetch via: document.querySelector("meta[name=csrf-token]").getAttribute("content")
  -f, --force           Force re-fetch list of programs and program data
  -m MIN_REQ, --min_req MIN_REQ
                        Minimum number of identified features required to highlight a program in the output (default=1)
  -c, --check_auth      HackerOne auth check (for debug)
```

On the first run, you will want to provide `--session` and `--token` so you can fetch and cache all your program names and data.

Let me know if you have any questions, feedback, or improvements! Happy hacking