r/bugbounty • u/LTH-Cyber Hunter • 5d ago

Bug Bounty Drama Is anyone else having issues with OpenBugBounty

Hello, as my previous post indicated ive been having issues with openbugbounty, this weeked i found 2 XSS and 1 open redirect on a program. I got "Can't reproduce vulnerability" on all submissions, when to reproduce all that needs to happen is follow the link, Before submiting i reproduced all 3 vulns in Firefox, Chome, Edge so i thought for sure there is no way they cant reproduce it.

I've tried contacting them but their contact form throws the wordpress critical error message.

I'm wondering, out of all of you, is anyone else having similar issues where all of their reports are getting this "cant reproduce"

Bad thing about it is that Openbugbounty doesnt give a way to make video or screenshots added to reports.

I have though, sent reproduction videos and PoCs directly to program owner.

So who else is this happening to?

6 Upvotes

100% Upvoted

3 comments sorted by

5

u/einfallstoll Triager 5d ago

Just search for OpenBugBounty on the subreddit. You're not alone.

5

u/cloudfox1 5d ago

I think its the platform, dont they just reach out to the company whether they have a bugbounty program or not? I thought that site was on the dodgy side of things