Recent bug on Quora worth $500

awesomewebsites

Elite Member
Jr. Executive VIP
Jr. VIP
Joined
Nov 16, 2011
Messages
19,794
Reaction score
11,287
Screenshot_2021-10-15-10-16-36-940_com.google.android.gm.jpg

I had reported a bug 2 years back on Quora and got paid for it. While I was using Quora for some online work, I noticed the same bug was present against and reported it. Got paid for the same bug again.

Everyone should try bug bounty research. Especially those in IM filed have good chances as we regularly use popular online websites.
 
Good job. Do you use an automation tool to find them or just manually?
 
Good job. Do you use an automation tool to find them or just manually?
Yes. Most common automation tool that security researchers use is burp suite. I used the same for this bug.
 
Yes. Most common automation tool that security researchers use is burp suite. I used the same for this bug.
Do you use the pro version? I guess for you its worth it?
 
"I had reported a bug 2 years back on Quora and got paid for it. While I was using Quora for some online work, I noticed the same bug was present against and reported it. Got paid for the same bug again." Pretty good going !
 
how do you report the bug and get paid exactly.

Like do you report the bug first and show it, then ask for payment?

or you email them that you found a bug and will share it after payment?
 
You'll find the same bug again in the future for sure. Quora has low quality when it comes to management and moderation.
 
He got paid by hacker one directly.

I am leaving my country to become a hacker.

See ya in 2 years
 
Should be a post titled "How to make $500/day in Internet Marketing in 2021" :)
$500 a day is not realistic with bug hunting. Bug hunting has changed a lot. Like in past Facebook payed really well. But now their team does not accept valid bugs easily. I had four bugs triaged on Facebook this year and they later said that they make changes based on those reported bugs but they will not pay for these bugs. However, there is still lot of money to be made overall. And the competition in this field is still less than other types of IM ventures.
 
how do you report the bug and get paid exactly.

Like do you report the bug first and show it, then ask for payment?

or you email them that you found a bug and will share it after payment?
You submit the bug first , they validate it and then pay for it after fixing it. Most of the programs are fair or honest and pay if you submit a valid bug.
 
Back
Top