OpenBugBounty.org > Bug Bounty List > Tall Guys Free Bug Bounty Program

Tall Guys Free Bug Bounty Program

Tall Guys Free runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of Tall Guys Free

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between Tall Guys Free and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

*.guysfree.com

*.tallguysfree.com

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

To be submitted on Open Bug Bounty, the vulnerability must be one of the following:
* XSS
* CSRF
* Open Redirect
* Improper Access Control

XSS string MUST be "OPENBUGBOUNTY" or "XSSPOSED". Varients such as "/OPENBUGBOUNTY/" or "%20OPENBUGBOUNTY%20" will be accepted

All other vulnerabilities can be submitted on https://tallguysfree.com/contact

Testing Requirements:

Please limit any automated scanners to a delay in order to avoid overloading our servers or becoming banned from our WAF.

Possible Awards:

* Hall of Fame listing

Special Notes:

Please be certain to review ISO 29147 before accessing our systems.

Other Submissions Handling

Website owner want to receive information about other vulnerabilities

Notifications:

We are especially interested in vulnerabilities not covered by Open Bug Bounty. Please include details and send us the information on https://tallguysfree.com/contact

PLEASE INCLUDE A VALID EMAIL ADDRESS SO WE CAN REACH YOU. YOUR EMAIL ADDRESS WILL NOT BE SHARED OR SOLD AND WILL BE USED EXCLUSIVELY TO CONTACT YOU REGARDING YOUR SUBMISSION.

General Requirements:

* Please refrain from uploading php/special images in an attempt to remote execute code. Our systems don't appear to be vulnerable to this (and we keep getting emails).

* Attacks such as Denial of Service (DoS/DDoS) are not eligible.

DO NOT share proof of concepts/demonstrations with anyone other than Tall Guys Free until you have received verification from us that the vulnerability is fixed.

Testing Requirements:

If you are testing for malicious reasons or intent, stop right now. What we want to prevent is malicious activity on our systems. With your help, we can achieve this.

Possible Awards:

* Hall of Fame
* PayPal, depending on the severity (impact) of the vulnerability
* ??? open to ideas :)

Special Notes:

UPON SUCCESSFULLY HACKING/GAINING UNAUTHORIZED INFORMATION, (YOU MUST IMMEDIATELY CEASE (STOP) YOUR ACTIVITIES AND ATTEMPTS AND ACCESS TO OUR SYSTEMS. YOU MAY NOT LEAK ANY INFORMATION YOU DISCOVER TO ANYONE EXCEPT TALL GUYS FREE UNDER ANY CIRCUMSTANCE. SUCH ACTIONS ARE ILLEGAL AND WILL ENSURE NO RECOGNITION OR PAYMENT WILL PROCEED. CRIMINAL PROSECUTION FOR LEAKING PRIVATE INFORMATION WILL OCCUR.

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

Latest Patched

Recent Recommendations

22 April, 2024

genoverband:

Thank you for your invaluable help in ensuring the security of our domain and its visitors!

10 April, 2024

Mars:

Hatim uncovered a XSS bug that we were able to quickly resolve. Thanks very much for your assistance and help.

8 April, 2024

Panthermedia:

Thanks to the support of Hatim Chabik, we were able to identify and solve an XSS bug.

5 April, 2024

pubpharm:

Pooja found a XSS vulnerability on our website and provided us with the needed Information for replication and fixing the issue. Which she verified afterwards.
We thank her for the reporting and assistance.

2 April, 2024