bug-bounty-domains

漏洞赏金域名 属于最知名公共漏洞赏金项目的域名。 不适用于非货币或私人项目 这些数据可能不准确或不完整。 如有任何差异，欢迎提交 Issue 及 PR。...

HackerOne: External programs revealing info

A bug in an authorization check was found by @1337coder on an endpoint that was showing the members of a team, as well as the team member groups that were set up. Example output: "id":1, "username":"dirk", "name":"dirk", "bio":"", "url":"https://hackerone.com/dirk" , "id":2, "name":"Admin",...