3186
Talk and help about bugbounty
hello write me on russian language and i maybe help u. Because my english is very bad and i don`t understood you
Читать полностью…
Yeah he is right.
Majority of PII goes to Medium unless you can use it to escalate more like if email is associated with anyone in the company and using that email you Bypass some admin or higher authority.
That's when it goes for critical or high!
Got a response that's it's actually a retool dummy data.
💔😣
Hi all, does anyone have an external peneteation testing checklist? If you have pls share it.
Читать полностью…
https://infosecwriteups.com/hack-stories-hacking-hackers-ep-3-11b1f0e002e8
Читать полностью…
https://book.cipherops.tech/bug-bounty-notes/readme/cipherops
Читать полностью…
You may report It but I'm 90% sure they will say the same!
And remaining 10% they might give you bounty or points or mark it as informative if it does not effect them.
i change the method to put i can upload file i have to copy past binary down there
Читать полностью…
do you mean that command is executed but no output?
Читать полностью…
Thanks for the clarification.
Unfortunately, the program staff sent a message after he Traiged it few hours after submission that the emails and usernames are dummy data by retool but he hasn't close the report.
The report is still open in Traiged state. What is likely to happen?
Читать полностью…
i can upload file to s3 for guest section to file like shell.php it worked but when trying to open it downloads the file directly
Читать полностью…
If you can then try to escalate it more because the company needs to know how knowing all these credentials can affect them.
Читать полностью…
Hello Hunters, I got NREUM loader account id, trustkey, agentid, license key and application id in a hardcoded source code. Should I report?
Читать полностью…
Yo does anyone know any bug bounty platforms that pay through crypto, I'm new to this
Читать полностью…