The ledger

Bounty writeups.

Real disclosed-bounty writeups — every entry states a real bounty, verified live against the article before it's listed. Dead links are dropped automatically.

44 writeups · $585.5k in bounties · checked today

All XSS4 IDOR5 SSRF3 SQL Injection1 RCE4 Access Control7 Account Takeover12 Info Disclosure11 CSRF1 Race Condition1 GraphQL1 Business Logic4 2FA3

SortHighest bounty Newest

I Earned $3500 and 40 Points for A GraphQL Blind SQL Injection Vulnerability.

GraphQLSQL Injectionprogram unnamed$3.5k3y ago

Blind SQL injection through a GraphQL endpoint — $3,500 and 40 points.

InfoSec Write-ups · InfoSec Write-ups ↗

Every bounty amount, date and link was verified against the original article before listing; articles are re-checked every 24 hours and dropped if they go offline. Content belongs to the original authors.