OpenBugBounty.org > Bug Bounty List > MalShare Bug Bounty Program

MalShare Bug Bounty Program

MalShare runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of MalShare

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between MalShare and researchers.

Bug bounty program allow private submissions only.

Bug Bounty Scope

The following websites are within the scope of the program:

*.malshare.com

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

All bugs must be reported ASAP. If you think you've found something, please let us know

Please also email any findings to [email protected] with a subject header:
[SECURITY][BUG] <Subject>

Testing Requirements:

Please include the following HTTP header on all testing requests:
X-BugTesting: <YourEmail>

Possible Awards:

Kudos / Twitter shoutout

Other Submissions Handling

Website owner want to receive information about other vulnerabilities

Notifications:

Please also email any findings to [email protected] with a subject header:
[SECURITY][BUG] <Subject>

PGP Key:

Show key

General Requirements:

All bugs must be reported ASAP. If you think you've found something, please let us know

Testing Requirements:

Please include the following HTTP header on all testing requests:
X-BugTesting: <YourEmail>

Possible Awards:

Kudos / Twitter shoutout

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

22 April, 2019

binit:

The MalShare team is highly responsive and co-operative. They take all the reports from their researchers seriously unlike many other platforms. Not only did they email me regarding the vulnerability I reported, but they also reached back to me through Twitter in less than 24 hours. I hope other researchers would also utilize their valuable time in looking for vulnerabilities in MalShare.

MalShare Bug Bounty Program

Bug Bounty Scope

Non-Intrusive Submissions Handling

Other Submissions Handling

Community Rating

Researcher's comments

Latest Patched

Latest Blog Posts

Recent Recommendations


Response Time How quickly researchers get responses to their submissions.
Remediation Time How quickly reported submissions are fixed.
Cooperation and Respect How fairly and respectfully researchers are being treated.