Report Email Alerts Open Bug Bounty: 153,269 coordinated disclosures
Total Vulnerabilities Fixed: 74,737
150,773 vulnerable websites, 15,485 VIP websites
3,730 security researchers, 5,217 notification subscribers

DrStache Top Security Researcher of the Month Top VIP Security Researcher of the Month | Security Researcher Profile


Security researcher DrStache has already helped fix 1493 vulnerabilities.

Real name:
Florian Charbonneau

About me:
French student in Networking and Telecommunications
Security enthusiast

How to contact me:
[email protected]

Contact me as soon as possible so we can work together to quickly protect your users.

Experience in Application Security:
1-3 years

Award / Bug Bounty I prefer:
A thanks/profile recommendation will be really appreciated and is enough, but if you'd like:
~ Bug Bounty (PayPal / BTC)
~ Hall of Fame
~ Swag (T-shirt, sticker..)

Halls of Fame:
hackerone.com/drstache
bugcrowd.com/DrStache

cert.europa.eu/cert/newsletter/en/latest_HallOfFame_.html
success.trendmicro.com/vulnerability-response
security.olx.com/security-hall-of-fame.html

Follow me on:
Twitter


Research Statistics



Open Bug Bounty Certificate:Download
Total reports:4209
Total reports on VIP sites:205
Total patched vulnerabilities:1493
Total vulnerabilities on Hold (Open Bug Bounty):4
Recommendations received:29
Active since:31.07.2016
Top Security Researcher Awards: Top Security Researcher of the Month Top Security Researcher of the Month Top Security Researcher of the Month
Top VIP Security Researcher Awards: Top VIP Security Researcher of the Month Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week

Awards and Achievements


Number of Secured Websites

10+ Websites
50+ Websites
500+ Websites
WEB SECURITY VETERAN
1000+ Websites

Advanced Security Research

WAF Bypasser
CSRF Master
50+ Reports
AppSec Logic Master
50+ Reports
Fastest Fix
Fix in 24 hours

Outstanding Achievements

Secured OBB
OBB Advocate
Improved OBB

Commitment to Remediate and Patch

Patch Master
65% Patched
Patch Guru
75% Patched
Patch Lord
85% Patched

Recommendations and Recognition

REPUTABLE
10+ Recommends
FAMOUS
25+ Recommends
GLOBALLY TRUSTED
50+ Recommends

Recommendations and Acknowledgements

19 July, 2017
SimonFonteneau Simon Fonteneau from Lesfourmisduweb:

Merci a Drstache pour son signalement ! J'ai pu corriger a rapidement !

19 July, 2017
SMintrav SMINTRAV from MINTRAV:

Thank you DrStache, with you, we patched our issue you was extremely helpful, responsive and knowledgeable in pointing us to the Xss vulnerabilities on our websites !

22 March, 2017
JKrycha Josef Krycha from Canon Europe Ltd.:

DrStache reported multiple vulnerabilities in Canon websites ranging form reflected XSS's, SQL injections to information disclosure. All findings were valid and the communication with him was quick and efficient. Thank you for your help and best of luck!

9 March, 2017
bugfort26 NB. from CDC:

Merci pour ces échanges, qui auront permis de remotiver nos fournisseurs!

3 March, 2017
JNRIBETTE JN.RIBETTE from Kosmos:

Merci pour la détection des failles et pour les informations permettant de les corriger !

23 February, 2017
RCnfpt RSSI from CNFPT:

Un grand merci à Dr Stache pour les informations transmises.
Cela nous a permis de réagir rapidement. Encore merci et bonne continuation.

23 February, 2017
NicoBiot Nico B from CNFPT:

Merci à DrStache pour la détection de la faille et sa réactivité

20 February, 2017
fmplaw Florent.F from MEN - AC CRETEIL:

Une grande compétence et une super communication. Merci Dr Stache !

10 February, 2017
Brit_Hotel Jean-Manuel from Brit Hotel:

Un grand merci pour votre réactivité et votre aide ! ;)

7 February, 2017
meteociel Meteociel from Meteociel:

Thanks for the report of many XSS vulnerabilities for the Meteociel.fr site. Quick & precise answers.

Shows the first 10 recommendations. See all.

Please login via Twitter to add a recommendation


Reported Vulnerabilities

All Submissions VIP SubmissionsFeatured Submissions

Domain Reported Status Type
08.08.2017
On Hold
Cross Site Scripting
13.07.2017
On Hold
Cross Site Scripting
05.07.2017
patched
Cross Site Scripting
05.07.2017
patched
Cross Site Scripting
05.07.2017
On Hold
Cross Site Scripting
05.07.2017
patched
Cross Site Scripting
05.07.2017
patched
Cross Site Scripting
04.07.2017
On Hold
Cross Site Scripting
27.06.2017
unpatched
Cross Site Scripting
27.06.2017
unpatched
Cross Site Scripting
27.06.2017
unpatched
Cross Site Scripting
27.06.2017
unpatched
Cross Site Scripting
26.06.2017
patched
Cross Site Scripting
23.06.2017
patched
Cross Site Scripting
23.06.2017
patched
Cross Site Scripting
16.06.2017
unpatched
Cross Site Scripting
15.06.2017
patched
Cross Site Scripting
12.06.2017
unpatched
Cross Site Scripting
09.06.2017
patched
Cross Site Scripting
09.06.2017
patched
Cross Site Scripting


LATEST VIP SUBMISSIONS

generation-nt.com
Reported by login_denied Helped patch 58 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 5 recommendations
on 24.09.2017
letssingit.com
Reported by revydol Helped patch 31 vulnerabilities
Received 1 Coordinated Disclosure badges
on 24.09.2017
badshot.mit.edu
Reported by LewisBugBounty Helped patch 30 vulnerabilities
Received 2 Coordinated Disclosure badges
on 24.09.2017
shop.psg.fr
Reported by Muhd_Uwais_ Helped patch 50 vulnerabilities
Received 1 Coordinated Disclosure badges
Received 1 recommendations
on 24.09.2017
rapha.cc
Reported by OmniGooch Helped patch 1073 vulnerabilities
Received 5 Coordinated Disclosure badges
Received 5 recommendations
on 24.09.2017
rutraveller.ru
Reported by OmniGooch Helped patch 1073 vulnerabilities
Received 5 Coordinated Disclosure badges
Received 5 recommendations
on 24.09.2017
indiafreestuff.in
Reported by Chris5389 Helped patch 0 vulnerabilities
Received 0 Coordinated Disclosure badges
on 24.09.2017
steren.com.mx
Reported by Geek_Pwn Helped patch 0 vulnerabilities
Received 0 Coordinated Disclosure badges
on 24.09.2017
privatelink.de
Reported by Chris5389 Helped patch 0 vulnerabilities
Received 0 Coordinated Disclosure badges
on 24.09.2017
longau.com
Reported by login_denied Helped patch 58 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 5 recommendations
on 24.09.2017



LATEST SUBMISSIONS

local.adsack.com
Reported by ShivprasadSambhare Helped patch 256 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 2 recommendations
on 24.09.2017
local.sidneyherald.com
Reported by ShivprasadSambhare Helped patch 256 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 2 recommendations
on 24.09.2017
sargam.in
Reported by ShivprasadSambhare Helped patch 256 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 2 recommendations
on 24.09.2017
local.nrcolumbus.com
Reported by ShivprasadSambhare Helped patch 256 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 2 recommendations
on 24.09.2017
redber.ru
Reported by deadr00ts3c Helped patch 10 vulnerabilities
Received 0 Coordinated Disclosure badges
on 24.09.2017
psitest.com.ru
Reported by deadr00ts3c Helped patch 10 vulnerabilities
Received 0 Coordinated Disclosure badges
on 24.09.2017
minsoc.ru
Reported by deadr00ts3c Helped patch 10 vulnerabilities
Received 0 Coordinated Disclosure badges
on 24.09.2017
konditerprom.ru
Reported by deadr00ts3c Helped patch 10 vulnerabilities
Received 0 Coordinated Disclosure badges
on 24.09.2017
arkaim-avto.ru
Reported by deadr00ts3c Helped patch 10 vulnerabilities
Received 0 Coordinated Disclosure badges
on 24.09.2017
kge.ca
Reported by ShivprasadSambhare Helped patch 256 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 2 recommendations
on 24.09.2017