Hello There, Do you have bug bounty program that finding any vulnerability here will report to you and gain bounty?
Welcome to the forum
No there isn’t a bug bounty program. This is free hosting, and as such, there isn’t the cash flow to be able to offer a boutny for finding bugs\vulnerabilities.
ultimately the reward for finding bugs\vulnerabilities is that once they are fixed, your site here runs better and your account is more secure.
All that being said, given that you are responsible for building and securing your own site, the only thing you could really look to find bugs and vulnerabilities in are the security system and the client area.
2 Likes
For you: no, there is no bug bounty program.
For actual security researchers, we have a security.txt file on our website referencing a page on our website for more information. But since you were not able to find these obvious pages, I have very little faith in your “research” skills.
Please pay very close attention to the page with additional information, mainly the parts where it says what we do and don’t consider valid vulnerabilities.
4 Likes
https://www.infinityfree.com/security.txt
seems to be 404 rn
That’s because that’s not where it is stored. There is a standard directory these files are often stored in that is well known to security experts but not the general public
1 Like
And it has always been, because that’s not the URL where a security.txt file is published. The actual URL is here. Fully working, as it always has.
https://www.infinityfree.com/.well-known/security.txt
For more information, please read the official security.txt file website, that has more information about what the file contains, and where it can be found:
2 Likes
thanks for letting me know, I forgot about the .well-known/ convention.
This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.