OpenBugBounty.org > Bug Bounty List > Emailresponder.eu Bug Bounty Program

Emailresponder.eu Bug Bounty Program

Emailresponder.eu runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of Emailresponder.eu

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between Emailresponder.eu and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

emailresponder.eu

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

Emailresponder.eu is an auto responder web application and thus stores very important user data.

We're especially interested in anything could be a threat to our system integrity and security.

Non intrusive vulnerabilities we're interested into:

- XSS
- CSRF
- Open Redirect
- Improper Access Control
- Credential stealing

etc..

Not interested in:

- Self XSS
- DDOS (please don't, its just lame)

Testing Requirements:

Feel free to use any tool as long as you don't compromise the system integrity (yes, you can use automated tools too).

Possible Awards:

I don't make any money from this site (on the opposite it costs me money), thus the only award i can give away is a mention on the site (if you wanna also have a link to any personal webpage, i'm fine with it).

Special Notes:

Both backend and frontend are hosted on some cheap VPS, please be patient cause it might be slow sometimes.

Other Submissions Handling

Website owner want to receive information about other vulnerabilities

Notifications:

Please directly notify [email protected] if you find any vulnerability found by intrusive testing (i.e. code injection).

General Requirements:

Also, i'm interested in any other vulnerability at any other level:

- code injection (both SQL and C#)
- possible exploits/abuse of any of the site functions
- directory traversal
- apache or any other service crashing due to user input
- exploits on the server machine
- gaining unauthorized access to the server in any way

Testing Requirements:

Feel free to use port scans, metasploit and any other tool you feel appropriate to explore my system or any of the services running on it, but try to not compromise system integrity or service availability.

Please advise if you're going to do something that you're aware it might be potentially dangerous for the integrity of the system.

Possible Awards:

Special Notes:

Both backend and frontend are hosted on some cheap VPS, please be patient cause it might be slow sometimes.

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

Latest Patched

Recent Recommendations

22 April, 2024

genoverband:

Thank you for your invaluable help in ensuring the security of our domain and its visitors!

10 April, 2024

Mars:

Hatim uncovered a XSS bug that we were able to quickly resolve. Thanks very much for your assistance and help.

8 April, 2024

Panthermedia:

Thanks to the support of Hatim Chabik, we were able to identify and solve an XSS bug.

5 April, 2024

pubpharm:

Pooja found a XSS vulnerability on our website and provided us with the needed Information for replication and fixing the issue. Which she verified afterwards.
We thank her for the reporting and assistance.

2 April, 2024