I Found a Critical Vulnerability — They Paid Me $15,500
IDORAccess Controlprogram unnamed$15.5k5mo ago
Recon-to-report walkthrough of a critical IDOR on a public SaaS program.
cyber security · Medium ↗The ledger
Bounty writeups.
Real disclosed-bounty writeups — every entry states a real bounty, verified live against the article before it's listed. Dead links are dropped automatically.
44 writeups · $585.5k in bounties · checked today
Bank offer IDOR Fix Bypassed — a $10,000 Bounty
IDORAccess Controlprogram unnamed$10k1y ago
Regression hunting: re-exploiting a 'fixed' IDOR through the fix itself.
bombon · Medium ↗IDOR: Creating a Share Link for Any Campaign Planner in Facebook Business
IDORFacebook$5.4k1y ago
IDOR in Campaign Planner — share links for any advertiser's campaign.
sancyty · Medium ↗Another day, Another IDOR vulnerability — $5000 Reddit Bug Bounty
IDORReddit$5k4y ago
Textbook IDOR on a Reddit endpoint — clean, reproducible, $5,000.
Roberto · InfoSec Write-ups ↗Caught an IDOR Vulnerability on a Private Program — Earned a $600 Bounty
IDORAccess Controlprogram unnamed$6001y ago
Realistic first-bounty shape: private program, modest IDOR, real payout.
Tanishx0h · Cybersecurity Write-ups ↗Every bounty amount, date and link was verified against the original article before listing; articles are re-checked every 24 hours and dropped if they go offline. Content belongs to the original authors.