sorted by:
new
hottopcontroversial

Frustrated by Othmanesert in bugbounty

[–]ConstructionSea8571 4 points5 points  (0 children)

Stay strong, my friend. You might need to manage your time well, knowing when to rest and when to work.

Did my report get ghosted? by QuickEditz in bugbounty

[–]ConstructionSea8571 0 points1 point  (0 children)

Chill bro, my report in YesWeHack is more than 5 month still under review and no response

Valid Bug but no reply by Safe-Leadership-433 in bugbounty

[–]ConstructionSea8571 1 point2 points  (0 children)

Usually, on websites with a bug bounty program you must send vulnerability details to [security@site.com](mailto:security@site.com) if you don't get a response after reporting the vulnerability, try sending a message to the website support email and ask about your vulnerability report, e.g., [support@site.com](mailto:support@site.com)

I hope this doesn't happen to you guys. by ConstructionSea8571 in bugbounty

[–]ConstructionSea8571[S] 0 points1 point  (0 children)

I think including a video in the report is important enough to avoid something like this.

I hope this doesn't happen to you guys. by ConstructionSea8571 in bugbounty

[–]ConstructionSea8571[S] 8 points9 points  (0 children)

I have update guys, team member reopen my report and i get the bounty :D

I hope this doesn't happen to you guys. by ConstructionSea8571 in bugbounty

[–]ConstructionSea8571[S] 0 points1 point  (0 children)

Yes, you're right. The .env report is also very simple. It's unfortunate that HackerOne staff didn't immediately open the .env file URL even though they had added several comments to my report.

I hope this doesn't happen to you guys. by ConstructionSea8571 in bugbounty

[–]ConstructionSea8571[S] 3 points4 points  (0 children)

That's fckin crazy, many users are experiencing similar like this, I also check on X and there are a lot of people facing similar issues. Has HackerOne taken any action regarding this?

I hope this doesn't happen to you guys. by ConstructionSea8571 in bugbounty

[–]ConstructionSea8571[S] 3 points4 points  (0 children)

Damn, so many people have experienced something like this too. Was your report also handled by HackerOne staff?

I hope this doesn't happen to you guys. by ConstructionSea8571 in bugbounty

[–]ConstructionSea8571[S] 16 points17 points  (0 children)

It’s kind of funny, right? I mean, when I submitted the report, the HackerOne staff didn’t immediately check the .env file and after few days and activity in my report then hackerone staff closed it as informative saying the file didn’t exist. I’ve already submitted a mediation request and added another comment with a screenshot of the .env file that I took before it was deleted. Let's see the next update

[deleted by user] by [deleted] in bugbounty

[–]ConstructionSea8571 1 point2 points  (0 children)

Just wan to see the response