We are busy working on a brand new website and platform. All of the content on this website is considered out-dated, however challenges and our members section are working as before. Stay tuned for updates!
lumbridge7 has reached Level 4 with 75+ unique vulnerabilities discovered and they have proven to us that they understand web application vulnerabilities and how to discover them. If you run a bug bounty/vulnerability disclosure program and you are looking for an active, professional researcher, we recommend considering this user
| Report Title | Event ID | Severity | Vulnerability Type |
|---|---|---|---|
| Default credentials on login page | FirstBlood v3 | CRITICAL | Auth issues |
| Stored XSS on drpanel | FirstBlood v3 | CRITICAL | Stored XSS |
| Business logic allows to book appointments with unavailable doctors | FirstBlood v3 | Low | Application/Business Logic |
| Open redirect | FirstBlood v3 | Informative | |
| Edit doctor page CSRF | FirstBlood v3 | Low | Cross Site Request Forgery |
Getting started
Learn about vulnerability types 
Getting started in bug bounties 
Test your knowledge
Free Web Application Challenges
Guides for your hunts 
ZSeano's Methodology
Effective Note Taking for bug bounties
Useful Resources 
Disclosed HackerOne Reports 
Our community
Endorsed Members
Hackevents 
Member Articles