Questions tagged [bug-bounty]

Related to design, workings and operation of bug bounty programs. DO NOT use for questions about specific vulnerabilities, attack methods or anything unrelated to the mechanics of vulnerability reward programs.

5 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2 votes
1 answer

How to provide public key for security.txt?

When generating a security.txt file, it is recommended to digitally sign it. However, security researchers must not assume that the information used in the Encryption field is actually the key used to ...
2 votes
0 answers

Does Windows Server ship with any sensitive images in the filesystem?

I'm working with an interesting vulnerability I found which enables local file inclusion (LFI) on a target server. In summary, there is a PDF generation API endpoint which accepts an HTML string as ...
  • 21
1 vote
0 answers

How to reproduce following POC of dom based open redirection Vulnerability Flagged by burp suite scan

During scan, the burp suite flagged DOM open redirection vulnerability with the following POC. How can I reproduce it? Data is read from document.referrer and passed to xhr.send. The following value ...
1 vote
0 answers

Automating Clickjacking Attack

I found a clickjacking issue in a site and the site security team said me that i would require unusual user interaction. So I wrote a code above the iframe but I was not successful in achieving it. ...
0 votes
1 answer

XSS bypass in url

I have a website:"injection inside js", but " is escaped with \ and I'm trying to inject </script><script>alert() but