Coordinated and Responsible Vulnerability Disclosure Free Bug Bounty Program 456,441 coordinated disclosures
244,448 fixed vulnerabilities
605 bug bounties with 1225 websites
12,323 researchers, 962 honor badges

DomainMOD Bug Bounty Program

DomainMOD runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of DomainMOD

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between DomainMOD and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

domainmod.org

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

No general requirements

Testing Requirements:

No testing requirements

Possible Awards:

As this is an open source project that doesn\'t generate revenue (quite the opposite, in fact), unfortunately I can\'t offer monetary compensation. I would be happy to recommend you on here or LinkedIn though, and I\'m open to other suggestions for compensation.

Special Notes:

I genuinely appreciate any bugs you can report! People like you are making the open source community better and more trustworthy one bug at a time!

Other Submissions Handling

Website owner want to receive information about other vulnerabilities

Notifications:

[email protected]

General Requirements:

No general requirements

Testing Requirements:

No testing requirements

Possible Awards:

As this is an open source project that doesn\'t generate revenue (quite the opposite, in fact), unfortunately I can\'t offer monetary compensation. I would be happy to recommend you on here or LinkedIn though, and I\'m open to other suggestions for compensation.

Special Notes:

I genuinely appreciate any bugs you can report! People like you are making the open source community better and more trustworthy one bug at a time!

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

 
Response Time  How quickly researchers get responses to their submissions.
Remediation Time  How quickly reported submissions are fixed.
Cooperation and Respect  How fairly and respectfully researchers are being treated.

Researcher's comments

No comments so far.

  Latest Patched

 23.10.2019 bricklink.com
 23.10.2019 gramha.net
 23.10.2019 deskgram.net
 22.10.2019 jpnn.com
 22.10.2019 iphoneitalia.com
 22.10.2019 biggo.com.tw
 22.10.2019 you2repeat.com
 21.10.2019 bfmtv.com
 21.10.2019 carbon38.com
 21.10.2019 register.it

  Latest Blog Posts

17.10.2019 by 0xrocky
Stored XSS
17.10.2019 by geeknik
The "S" in IOT is for Security
16.10.2019 by darknetguy
Best XSS Vectors
01.10.2019 by Renzi25031469
#Security 100%
18.09.2019 by Leon
SSRF | Reading Local Files from DownNotifier server

  Recent Recommendations

    23 October, 2019
     astroseekcom:
Thank you for informing me about xss vulnerability.
    23 October, 2019
     rendkul:
thanks for informing us about xss vulnerability.
    23 October, 2019
     raviakp1004:
Thanks for letting us know about this XSS vulnerability. We appreciate the quick feedback.
    23 October, 2019
     Mrrain_1996:
Thank you a lot for the information and the support on fixing the issue! Very friendly and kind contact.
    23 October, 2019
     faizan_mark:
Thank you a lot for the information and the support on fixing the issue! Very friendly and kind contact.