D2CMedia Bug Bounty Program

Bug Bounty Scope

The following websites are within the scope of the program:

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

General Requirements:

== Submission for pentesting.d2cmedia.ca is paused as we are currently working on fixing known vulnerabilities. ==

All reports will be analysed and followed-up.
Please provide a detailed report, URL, relevant screenshots, anything that will help us understand the issue and steps on how to reproduce. If possible, the remediation.

We will clearly state if we already got similar report or if you're the first one. Please include your Paypal account.

Testing Requirements:

== Submission for pentesting.d2cmedia.ca is paused as we are currently working on fixing known vulnerabilities. ==

Please be moderate if you use an automated script to generate lots of requests to the targeted domain. If you notice any major slow down, please stop immediately and let us know. We will collaborate to help us perform security audit as much as possible.

You cannot leak any information you were able to retrieve, nor delete it.

Possible Awards:

== Submission for pentesting.d2cmedia.ca is paused as we are currently working on fixing known vulnerabilities. ==

The reward will depend on the severity, we reserve the right to decide how critical the report is. We will be as much fair as possible.
The reward range from 150 to 500$ USD.

You need to be the first researcher reporting the vulnerability.

We reserve the right to award a smaller reward if we already know about the vulnerability but appreciate the additional details and time spent on it.

Special Notes:

== Submission for pentesting.d2cmedia.ca is paused as we are currently working on fixing known vulnerabilities. ==