Things to consider:
- Scope
- HoF
- Appreciation Letter
- Size of the company
- Country
- Response Time
- Static? Dynamic?
- Reviews online?
Below are some of my potential targets:
- GeekforGeeks
- Australian Government
- Australia Post
- City of LA (H1)
- Arrival
- Costco
- Achema
- Marel
- BBC
- Philips
- Nestle
- Unesco
- Aliter
- Zyxel
- Paytm
- Lenovo
- Drexel Univsersity
- Bosch-HoF-E
- University of Twente-HoF-e
- Looka-HoF-e-na
- FirstCry-HoF-E
- Microstrategy
- Empire Flippers
- BBC
- Agicap
- TomTom
- Geotab
- Swisscom
- Content King
- Bentley Systems
Below are people I follow on LinkedIn for choosing the right program:
- https://www.linkedin.com/in/vishalvishw10/recent-activity/all/
- https://www.linkedin.com/in/kartik-garg-6370b6232/
For choosing correct VDP program, I use:
- https://www.openbugbounty.org/
- https://blog.grahamzemel.com/the-best-vulnerability-disclosure-programs-less-competitive-bounties-a166acbbbd1b
- https://firebounty.com/
- https://github.com/cablej/hack-your-government
- https://chaos.projectdiscovery.io/
- https://greedybucks.medium.com/bug-bounty-programs-beginners-should-try-fe51cebe52a5
40 Google Dorks for Bug Bounty Programs
1. site:example.com inurl:bug inurl:bounty
2. site:example.com inurl:security intext:bounty
3. site:example.com inurl:security ext:txt
4. site:example.com inurl:responsible-disclosure
5. site:example.com inurl:/.well-known/security
6. site:example.com intext:bug bounty program
7. site:example.com intext:responsible disclosure program
8. site:example.com intext:vulnerability disclosure program
9. site:example.com intext:security rewards
10. site:example.com intext:bug bounty payout
11. site:example.com inurl:security ext:txt -inurl:hackerone -inurl:bugcrowd -inurl:synack
12. site:example.com inurl:responsible-disclosure -inurl:hackerone -inurl:bugcrowd -inurl:synack
13. site:example.com intext:bug bounty -inurl:hackerone -inurl:bugcrowd -inurl:synack
14. inurl:/security
15. inurl:/responsible-disclosure/ swag
16. inurl:’/responsible disclosure’ hoodie
17. responsible disclosure hall of fame
18. inurl:responsible disclosure $50
19. responsible disclosure europe
20. responsible disclosure white hat
21. white hat program
22. responsible disclosure r=h:nl
23. responsible disclosure r=h:uk
24. responsible disclosure r=h:eu
25. responsible disclosure bounty r=h:nl
26. responsible disclosure bounty r=h:uk
27. responsible disclosure bounty r=h:eu
28. responsible disclosure swag r=h:nl
29. responsible disclosure swag r=h:uk
30. responsible disclosure swag r=h:eu
31. responsible disclosure reward r=h:nl
32. responsible disclosure reward r=h:uk
33. responsible disclosure reward r=h:eu
34. “powered by bugcrowd” -site:bugcrowd.com
35. “submit vulnerability report”
36. “submit vulnerability report” | “powered by bugcrowd” | “powered by hackerone”
37. intext:”we take security very seriously”
38. site:responsibledisclosure.com
39. inurl:’vulnerability-disclosure-policy’ reward
40. site:_._.nl intext: security report reward