{"repo":"pdelteil/scammy-bbp","free":true,"listed":false,"github":"https://github.com/pdelteil/scammy-bbp","clone":"git clone https://github.com/pdelteil/scammy-bbp.git","description":"Self-hosted bug bounty programs that are \"scammy\" or unethical","language":null,"stars":177,"topics":[],"license":null,"category":"self-hosted-apps","readme_excerpt":"scammy-bbp Bug bounty programs that are \"scammy\" or unethical can sometimes involve promising rewards to researchers for identifying security flaws, but either delay payments, don't pay at all, or misuse the disclosed vulnerabilities. Signs of a Potentially Scammy Bug Bounty Program: - Unclear Terms and Conditions: Programs that don't clearly specify what vulnerabilities qualify for rewards or the amount of the reward. - No Transparent Payment Structure: Lack of details about payment timelines, payout methods, or cases where people report not getting paid. - Little to No Community Feedback: Lack of reputation or negative reviews from the infosec community. Hits: # of reports of being scammy Program Name Issues Reported Platform Source Hits Discussions --------------------------- ------------------------------------------------------- ------------ ---------------------- ------- ----- H&M No rewards 1 Self hosted Trusted hacker 2 Celonis Ignored reports 2 Self hosted Trusted hacker 1 TataPlay Automated Response, then no response Self hosted Trusted Hacker 1 Synack Reward Gatekeepers 10 Self hosted Trusted Hacker 1 Zeiss Ignored reports 2 Self hosted Trusted hacker 1 Alefed No impact but fixed 3 Self hosted+YesWeHack Trusted hacker 1 Cex.io Failed to pay 4 Self hosted Trusted hacker 1 Roche Patch & Pass 5 Duplicate Disguise 7 Duplicate Mirage 8 Smokescreen Smackdown 12 Self hosted Trusted Hacker 2 Zopa Scope Surprise! 9 Self hosted Trusted hacker 1 Atos Bounty Roulette 11 Self h","default_branch":null,"files":null,"tree":[],"storefront":"/r/pdelteil","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/pdelteil/scammy-bbp/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}