Page 1 of 1

Accounts and contact forms

Posted: Mon Nov 22, 2021 4:01 pm
by NNamiDC
Dear,

I'm new to bugbounty and also to OBB. Searched the forum but did not directly find an answer.

When testing a website having an active OBB program are we allowed to create an account or fill in contact forms?

If yes, should we use a certain reference so the website owner is able to separate these accounts or contact requests from valid ones?

Many thanks in advance.

Best regards,

Sam

Re: Accounts and contact forms

Posted: Fri Nov 26, 2021 7:39 am
by x1admin
Read program description

Re: Accounts and contact forms

Posted: Mon Nov 29, 2021 7:30 pm
by NNamiDC
Many thanks for your reply.

That was the first place I looked but, at least those I read, were very limited and beside "do not break" give no direction in what we can do.

Most websites/apps you are unable to test fully without an account so I suppose we are allowed to create one? But wouldn't it be a good idea to include a kind of reference so it can easily be separated from real ones.

Many thanks in advance.