My Experience Reporting Web Bugs to Microsoft (MSRC) for the First Time - Bug Bounty or No Bounty
2021-10-28 15:3:0 Author: www.debasish.in(查看原文) 阅读量:16 收藏

My Experience Reporting Web Bugs to Microsoft (MSRC) for the First Time - Bug Bounty or No Bounty

Its been more than 8 years since I played around with Web Bugs. Seems threat landscape and things has changed significantly. However recently i reported few "low hanging" web related problems to MSFT. Most of the issues were mostly configuration issues, and all of the issues are fixed now however no bounty paid. What i came to know, unlike Facebook VRP, MSRC doesn't pay researcher even if they make any changes as result of your report. 

Link to Official Acknowledgements - 

https://msrc.microsoft.com/update-guide/en-us/acknowledgement/online 



文章来源: http://www.debasish.in/2021/10/my-experience-reporting-web-bugs-to.html
如有侵权请联系:admin#unsafe.sh