Infosec Institute

Open Bug Bounty mentioned in the
Top 6 Bug Bounty programs of
2022 by the InfoSec Institute

The Hacker News

Open Bug Bounty named among the
Top 5 Bug Bounty programs of 2021
by The Hacker News

Platform update: please use our new authentication mechanism to securely use the Open Bug Bounty Platform.
For security researchers
Report a Vulnerability
Submit, help fixing, get kudos.
For website owners
Start a Bug Bounty
Run your bounty program for free.
1,691,657 coordinated disclosures
1,355,071 fixed vulnerabilities
1,967 bug bounty programs, 3,883 websites
45,210 researchers, 1,640 honor badges

raviakp1004Top-50 VIP Open Redirect Reporter Top Security Researcher of the Month Top VIP Security Researcher of the Month | Security Researcher Profile


Security researcher raviakp1004 has already helped fix 17983 vulnerabilities.



Researcher reputation:  610

Real name:
Ravi Ashok Prajapati

About me:
I Am a Whitehat Security Researcher, Bug Bounty Hunter.
I encourage you to contact me As soon as possible so we can work together to quickly protect your users! All communication will be kept private.

Note:-If You Fixed Your Website Vulnerability, Please Don't Forget To Give Me Recommendations and Acknowledgements In My Open Bug Bounty Profile. link below.

Certified Penetration Testing Engineer
mile2 cyber Security
Lic no. 10119-160-655-9757

Contact email:
Email address : [email protected] LinkedIn : https://www.linkedin.com/in/ravi-prajapati-346b15190Twitter : https://twitter.com/raviakp1004

Alternative Contacts:
Email address : [email protected]
https://www.linkedin.com/in/ravi-prajapati-346b15190

Certifications & Diplomas:
Certified Penetration Testing Engineer
mile2 cyber Security
Lic no. 10119-160-655-9757

Experience in Application Security
1-3 years

Award / Bug Bounty I prefer:
Paypal: https://www.paypal.com/paypalme/raviakp1004
# Bug Bounty ($$$$$)
# Hall Of Fame
# T-shirts, Sweats, Caps, Stickers, Keychains, gift, etc

Halls of Fame:
lastpass.com (182)
https://bugcrowd.com/lastpass/hall-of-fame

Follow me on:
Twitter
LinkedIn

Ethics and Rules:
Ravi Ashok Prajapati is required to abide by the ethics and rules of the Open Bug Bounty project. If you reasonably believe that rules are not respected, please report this to us.

Recommendations and Acknowledgements | Full List:

@p3k     13 January, 2024
    Twitter p3k Tobi from p3k.org:
It took a while but finally we patched the issue raviakp1004 has reported. Thanks for finding and reporting it. Keep up the good work, and all the best.
@cedric     12 December, 2023
    Twitter cedric Cedric from Dynamies:
Thank you very much Ravi for reporting the vulnerability and for the good and pleasant communication. Very professional, we definitely recommend him!
@Zorglubxx     23 September, 2023
    Twitter Zorglubxx Christian from Reves:
Thank you for reporting the vulnerability of our website!
@herrin     18 September, 2023
    Twitter herrin William Herrin from self:
raviakp1004 responsibly reported an XSS error he found on my web site, with appropriate information to replicate and correct the problem. Thank you!
@lcarnini     31 July, 2023
    Twitter lcarnini carnao from carnao:
Thanks for detecting and reporting a XSS vulnerability of our website.
@Deganius     3 May, 2023
    Twitter Deganius Chris from Thal:
Thank you for detecting and reporting a XSS vulnerability of our website. :-)
@nelsonglory     1 February, 2023
    Twitter nelsonglory nelsonglory from PH Freiburg:
Many thanks for your bug reporting
@rinconensalza     31 January, 2023
    Twitter rinconensalza Rinconensalza from ********:
Thanks for your help!
@kunstnet     25 July, 2022
    Twitter kunstnet Const from kn:
Thanks for your report!!!
@Marco_PK72     14 May, 2022
    Twitter Marco_PK72 Marco from Lerboristeria:
Thanks to Ravi for the responsible vulnerability reporting and the professional communication, we recommend him for sure.
Thank you!
@IT_Wolve     15 March, 2022
    Twitter IT_Wolve Markus from Pepperl+Fuchs SE:
Thanks Ravi for reporting the vulnerability. This allowed us to close the vulnerability and improve our website.
Excellent work!
@tsourbier     17 February, 2022
    Twitter tsourbier Thierry Sourbier from Sport Axon:
raviakp1004 reported 2 XSS vulnabilities on my site and promptly provided all the details to allow me to fix them. Very quick and professional communication.
@itsahappymedium     8 February, 2022
    Twitter itsahappymedium David from It's A Happy Medium:
Thanks to Ravi for disclosing a vulnerability on one of our client sites. He was prompt, courteous and very helpful in helping identify and resolve the issue.
@dynweb_net     28 January, 2022
    Twitter dynweb_net Heiner from DNS:
Very professional reporting, thank you for that! With Ravi's help, the issue could be fixed quickly.
@redsys     12 January, 2022
    Twitter redsys Timo Borst from ZBW:
Mr. Prajapati found an XSS issue on our website and reported it ethically and accurately to us. Following his hints, today we patched the issue. Thank you very much!
@companymatchdvd     11 January, 2022
    Twitter companymatchdvd David from CompanyMatch:
Thank you Ravi for reporting an XSS vulnerability on our website.
@NVAccess     5 January, 2022
    Twitter NVAccess NV Access from NV Access:
Raviakp1004 found an XSS vulnerability on our website and acted ethically by reporting it to us. Information we needed to reproduce the issue was provided, allowing us to fix it promptly. Thank you for your report.
@Remc0_K     28 December, 2021
    Twitter Remc0_K Remco from Radio Stad Montfoort:
raviakp1004 reported a XSS issue for our website, mailed an excellent example of it. We fixed it. Thank you for your work raviakp1004.
@vaibio     8 October, 2021
    Twitter vaibio Tomi from Alma Talent:
raviakp1004 found XSS vulnerability on our websites and reported it responsibly. We appreciate this and thank you very much!
@c2play     9 September, 2021
    Twitter c2play Wachhund from c2Play:
You seem to be an XSS hunter - thanks for the report and fast response! *FIXED* --Wachhund
@etuli     17 August, 2021
    Twitter etuli Cyril from etudes-litteraires.com:
Thanks for the report.
@StankyFinglebot     12 July, 2021
    Twitter StankyFinglebot Casebook from Casebook:
Very helpful, thank you!
@vitagrygar     7 June, 2021
    Twitter vitagrygar CSIRT member from VSB:
Mr. Prajapati found XSS flaw on our website and reported it swiftly and accurately, as expected from a professional security researcher. Thank you very much!
@xss2021     21 April, 2021
    Twitter xss2021 Admin from FVB:
Ravi found a XSS vulnerability on our website and acted ethically by reporting it to us, as well as providing the information we needed to reproduce the issue. Thank you for pointing this out!
@randomthing4ev1     22 January, 2021
    Twitter randomthing4ev1 randomthing4ev1 from School Name Withheld:
Thank you for pointing out the vulnerability on our website! Very responsive.
@OOOIIOIO     18 December, 2020
    Twitter OOOIIOIO Vasily from klerk.ru:
Thanks for helping us with our XSS issue.
@iCoccyx     23 November, 2020
    Twitter iCoccyx D@FsY from Annonces-Automobile.com:
Thank you RAVI for your quick reply and to report my problem. Good job ! You made the web better !
@RedLeoteca     27 July, 2020
    Twitter RedLeoteca Admin from Leoteca en Red:
Thank you very much for your support and efforts to help is. Highly appreciated.
@williambarnwell     25 June, 2020
    Twitter williambarnwell Bill Barnwell from Loyalist College:
Thanks for helping us with our XSS issue.
@DougMT1     23 March, 2020
    Twitter DougMT1 Doug Henderson from Media Temple:
Thanks very much for taking the time to report a problem.
@sust_it     4 March, 2020
    Twitter sust_it Admin from Sust-it:
Thanks for the report.
@fetchinfo     21 February, 2020
    Twitter fetchinfo CERTNRW from IT.NRW:
Thank you for the information
@CvlOperations     30 January, 2020
    Twitter CvlOperations Sean Purdy from CV-Library Ltd:
Thanks for your report.

Please login via Twitter to add a recommendation

Honor Badges


Number of Secured Websites

10+ Secured Websites Badge
50+ Secured Websites Badge
500+ Secured Websites Badge
Web Security Veteran Badge
10+ Websites
50+ Websites
500+ Websites
WEB SECURITY VETERAN
1000+ Websites

Advanced Security Research

WAF Bypasser Badge
CSRF Master Badge
AppSec Logic Master Badge
Fastest Fix Badge
WAF Bypasser
CSRF Master
30+ Reports
AppSec Logic Master
30+ Reports
Fastest Fix
Fix in 24 hours

Outstanding Achievements

Secured OBB Badge
OBB Advocate Badge
Improved OBB Badge
Secured OBB
OBB Advocate
Improved OBB

Commitment to Remediate and Patch

Patch Master Badge
Patch Guru Badge
Patch Lord Badge
Patch Master
55% Patched
Patch Guru
65% Patched
Patch Lord
75% Patched

Recommendations and Recognition

REPUTABLE Badge
FAMOUS Badge
GLOBALLY TRUSTED Badge
REPUTABLE
10+ Recommends
FAMOUS
25+ Recommends
GLOBALLY TRUSTED
50+ Recommends

Distinguished Blog Author

Distinguished Blog Author Badge
Distinguished Blog Author Badge
Distinguished Blog Author Badge
1 Post
3 Posts
5+ Posts

Research Statistics



Total reports:50646
Total reports on VIP sites:1949
Total patched vulnerabilities:17983
Total vulnerabilities on Hold (Open Bug Bounty):2267
Recommendations received:33
Active since:25.09.2019
Top Security Researcher Awards:Gold Star Top Security Researcher of the Month Gold Star Top Security Researcher of the Month Gold Star Top Security Researcher of the Month Gold Star Top Security Researcher of the Month Gold Star Top Security Researcher of the Month Gold Star Top Security Researcher of the Month Gold Star Top Security Researcher of the Month Gold Star Top Security Researcher of the Month Gold Star Top Security Researcher of the Month Gold Star Top Security Researcher of the Month Gold Star Top Security Researcher of the Month Gold Star Top Security Researcher of the Month Gold Star Top Security Researcher of the Month Gold Star Top Security Researcher of the Month
Top VIP Security Researcher Awards: Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week

Open Bug Bounty Certificate


Researcher Certificate

Reported Vulnerabilities

All Submissions VIP SubmissionsFeatured Submissions




No posts in blog yet










  Latest Patched

 05.03.2024 tonlesap.gov.kh
 05.03.2024 tatamotors.com
 04.03.2024 ncagr.gov
 04.03.2024 lf.diit.edu.ua
 04.03.2024 otterbox.com
 02.03.2024 noxx.to
 29.02.2024 novaubirata.mt.gov.br
 29.02.2024 pedralva.mg.gov.br

  Latest Blog Posts

04.12.2023 by BAx99x
Unmasking the Power of Cross-Site Scripting (XSS): Types, Exploitation, Detection, and Tools
04.12.2023 by a13h1_
$1120: ATO Bug in Twitter’s
04.12.2023 by ClumsyLulz
How I found a Zero Day in W3 Schools
04.12.2023 by 24bkdoor
Hack the Web like a Pirate: Identifying Vulnerabilities with Style
04.12.2023 by 24bkdoor
Navigating the Bounty Seas with Open Bug Bounty

  Recent Recommendations

    27 February, 2024
    GTCoSWeb:
Dipu1a helped notify us of a possible link exposure so we could remedy it quickly to avoid any issues.
    27 February, 2024
    novelgames:
Reported 2 vulnerabilities in our website.
    27 February, 2024
    novelgames:
Reported 4 vulnerabilities in our website.
    27 February, 2024
    Thierig:
Pooja found a bug on our website that would have allowed an XSS attack. After contacting Pooja we promptly received a clear and detailed description making it easy for us to fix the issue within minutes and we also took the opportunity to revise our security concept.




We appreciate Pooja’s professional conduct. Clear replication steps and prompt responses meant we were able to patch quickly.
    24 February, 2024
    novelgames:
Reported an XSS vulnerability in our website.