NeztCode.de Bug Bounty Program

Bug Bounty Scope

The following websites are within the scope of the program:

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

General Requirements:

Please provide a working PoC with CVSS score for the issue.

Feel free to go into more detail about it.
Please also provide a solution or a way to fix the problem.

You are welcome to add any other information that may be relevant for reproducing or solving the problem.

Testing Requirements:

Almost all possible attacks may be carried out on the site.
Social engineering, for example, is also allowed.

With the exception of not performing DoS/DDoS attacks.

Small impairments of the system may occur, as long as they do not affect the availability of the site for more than 1 minute.

Possible Awards:

Unfortunately, there is no reward in the form of money.
Please understand that my project is only a hobby project and I do not earn a single cent with it. I have monthly costs, which I spend for the joy of this project. Therefore I'm sorry that I can't offer any interesting rewards.

Nevertheless, I can very gladly give a recommendation for the profile.
In addition, you will be listed in our Hall of Fame, either anonymously or with your name and profile.

Special Notes:

First of all, thank you for taking the trouble to look for security vulnerabilities in general. I am very glad that there is such a site like Openbugbounty.
Even if there is nothing here, I would be happy if someone tries his luck just for fun.
I am open for everything and I am happy to make my site a bit more secure.

Thanks a lot! :)

Other Submissions Handling