Programs

Programs

A program holds everything about one bug-bounty target:

• its scope and out-of-scope list;
• its rules of engagement;
• your notes;
• every asset XHack finds: subdomains, live URLs and JavaScript files.

XHack remembers what it found before, so after each recon run you can see exactly what is new.

Open Programs

• Desktop app: click Programs in the toolbar above the chat box.
• Web console: open Programs from the tools menu.

Create a program

1. Click + New program (+ New on the web console).
2. Fill in the details below.
3. Click Create.

Field	What to put in it
Name	The program's name or its main domain.
Platform and Program URL	Optional. For example HackerOne, and the program's page.
Tags	Optional. For example web, api.
Domains	The in-scope root domains, one per line. Recon only looks inside these.
Description	What the program is about.
In scope	What you are allowed to test.
Out of scope	What you must not touch.
Rules of engagement	The program's rules, such as rate limits or banned test types.
Notes	Anything else you want to remember, or want the AI to know.

The AI reads Description, In scope, Out of scope, Rules of engagement and Notes before it hunts. Copy them from the program's page as written. If a host or a kind of testing is off-limits, put it in Out of scope or Rules of engagement so the AI sees it.

Edit a program

Select the program and click Edit info.

Delete a program

Select the program and click Delete. This removes the program, its recon runs and all its recorded assets, so only use it when you are done with the program.

What you see on a program

Each program has four tabs:

Tab	What it shows
What's new	Assets found since the previous recon run.
All assets	Everything found so far, with search and a type filter.
Program info	The details you entered.
Recon runs	The history of runs.

Next steps

• Run recon and see what's new
• Turn on background monitoring
• Start a full hunt

Related

• Bug-Bounty Hunting, how it all fits together
• Start a hunt from an empty chat, the quick way to add a target