bobbylin has reached Level 4 with 75+ unique vulnerabilities discovered and they have proven to us that they understand web application vulnerabilities and how to discover them. If you run a bug bounty/vulnerability disclosure program and you are looking for an active, professional researcher, we recommend considering this user

bobbylin

Rank #53 — Level 4

88
unique bugs discovered
282 hours, 45 minutes and 15 seconds active hacking time

92
reports accepted
95 Accuracy

Vulnerability Types Found

Bug Submissions & total bug count

Hackevent (FirstBlood) Activity

Below you can find disclosed reports from our Hackevents which are events we host for our members to win rewards. You can find more information here.

Report Title	Event ID	Severity	Vulnerability Type
The patient email can be changed even though the application UI mentioned that this is not allowed.	FirstBlood v1	High	`Application/Business Logic`
Newly created Doctor account was able to search for patient info via the query api	FirstBlood v1	CRITICAL	`Application/Business Logic`
Account takeover of a doctor account is possible due to flawed logic in the registration process	FirstBlood v1	High	`Auth issues`
[Two Tales of Info leak] Site setting can be accessed and leaked a "x-site-req" header. This header can be used to get HackerBack event attendees info.	FirstBlood v1	CRITICAL	`Information leak/disclosure`

BugBountyHunter