The goal of this program is to report ways around DataDome protection by implementing a scraping bot.
DataDome publishes these websites dedicated to researchers:
The technical challenge consists of scraping as much content as possible without being blocked by DataDome protection:
The report should contain:
A basic explanation of the attack vector used.
The code to reproduce the scraping scenario
The IP(s) used during the attack
The scraped content in the form of hashes contained in the page from the scraped pages (not hashes of the raw HTML files themselves) and HTTP requests return code (must be 200)
The scraping speed (in hits per sec.)
The report will be classified as a duplicate if a previous report generated the same code fix
| Scope Type | Scope Name |
|---|---|
| api | api-js.datadome.co |
| web_application | https://bounty-nodejs.datashield.co |
| web_application | https://bounty-fastly.datashield.co |
| web_application | https://bounty-nginx.datashield.co |
| web_application | *.captcha-delivery.com |
| web_application | js.datadome.co |
| Scope Type | Scope Name |
|---|---|
| undefined | Distributed attacks (scraping must be done using only 1 IP at a time). |
Firebounty have crawled on 2024-01-17 the program DataDome Bot Bounty on the platform Yeswehack.
FireBounty © 2015-2025