Coordinated and Responsible Vulnerability Disclosure Free Bug Bounty Program 267,673 coordinated disclosures
156,905 fixed vulnerabilities
215,584 websites, 17,470 VIP websites
7,195 researchers, 6,915 subscribers

porthunter | Security Researcher Profile


Security researcher porthunter has already helped fix 186 vulnerabilities.



Researcher reputation:  30

Real name:
Mike

About me:
[ R E D A C T E D ]

How to contact me:
Contact me ASAP via email ([email protected]) so we can work together to quickly protect your users! All communication will be kept private.

Alternative Contacts:
Twitter @porthunter

Experience in Application Security
over 5 years

Award / Bug Bounty I prefer:
An acknowledgment on my profile is enough but if you feel like treating me to something extra for my time I appreciate the following -

Bug Bounty (PayPal)
Swag (T-Shirt etc)
Public Recognition

Follow me on:
Twitter

Recommendations and Acknowledgements

    25 April, 2017
     adoptnik Erin from Wordnik:
As a small nonprofit, we are SO grateful to porthunter for helping us find a vulnerability on our site. Very kind and helpful, sent info that let us easily reproduce the issue and even helped us check the patch. A+++
    17 April, 2017
     GabWiny Gabor Boros from NA:
thank you Mike for reporting and willing to help with our security vulnerability
    18 March, 2017
     wpblock WPBlock from WPBlock:
Thanks to porthunter once again for helping us find and patch a security issue.

Please login via Twitter to add a recommendation

Awards and Achievements


Number of Secured Websites

10+ Websites
50+ Websites
500+ Websites
WEB SECURITY VETERAN
1000+ Websites

Advanced Security Research

WAF Bypasser
CSRF Master
30+ Reports
AppSec Logic Master
30+ Reports
Fastest Fix
Fix in 24 hours

Outstanding Achievements

Secured OBB
OBB Advocate
Improved OBB

Commitment to Remediate and Patch

Patch Master
55% Patched
Patch Guru
65% Patched
Patch Lord
75% Patched

Recommendations and Recognition

REPUTABLE
10+ Recommends
FAMOUS
25+ Recommends
GLOBALLY TRUSTED
50+ Recommends

Research Statistics



Total reports:402
Total reports on VIP sites:213
Total patched vulnerabilities:186
Recommendations received:3
Active since:15.03.2017
Top VIP Security Researcher Awards: Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week

Open Bug Bounty Certificate



Reported Vulnerabilities

All Submissions VIP Submissions

Domain Reported Status Type
22.04.2017
unpatched
Cross Site Scripting
22.04.2017
unpatched
Cross Site Scripting
22.04.2017
unpatched
Cross Site Scripting
22.04.2017
unpatched
Cross Site Scripting
22.04.2017
unpatched
Cross Site Scripting
22.04.2017
unpatched
Cross Site Scripting
22.04.2017
unpatched
Cross Site Scripting
22.04.2017
unpatched
Cross Site Scripting
22.04.2017
unpatched
Cross Site Scripting
22.04.2017
unpatched
Cross Site Scripting
22.04.2017
unpatched
Cross Site Scripting
22.04.2017
patched
Cross Site Scripting
22.04.2017
patched
Cross Site Scripting
22.04.2017
unpatched
Cross Site Scripting
22.04.2017
unpatched
Cross Site Scripting
22.04.2017
patched
Cross Site Scripting
22.04.2017
patched
Cross Site Scripting
22.04.2017
patched
Cross Site Scripting
22.04.2017
patched
Cross Site Scripting
22.04.2017
unpatched
Cross Site Scripting

  Latest Patched

      decolar.com
    Patched on 20.09.2018
      despegar.cl
    Patched on 20.09.2018
      despegar.com.ar
    Patched on 20.09.2018
      despegar.com.mx
    Patched on 20.09.2018
      axis.com
    Patched on 20.09.2018
      customs.go.kr
    Patched on 20.09.2018
      autotempest.com
    Patched on 19.09.2018
      tradekorea.com
    Patched on 19.09.2018
      radio.de
    Patched on 19.09.2018
      athensmagazine.gr
    Patched on 19.09.2018

  Recent Recommendations

    20 September, 2018
     Paruzzi_webm:
He pointed out a problem and was very helpfull in checking if I had fixed the problem.
    19 September, 2018
     franciscomesa:
Gh05tPT found a XSS vulnerability on our website and was quick to respond with technical detail. It's cool to find online researchers with this efficient profile.
    18 September, 2018
     iwayAG:
Thanks for the detailed report and the fast ans competent communication.
    18 September, 2018
     WebMore2:
Vielen Dank Armin für die gemeldete Schwachstelle. Wir könnten diese anhand deiner umfangreichen Informationen direkt beheben.
    18 September, 2018
     bencus23:
Thank you very much Rui for informing us about XSS (Cross Site Scripting) problem! You really helped us a lot! Big thanks!