Ten years ago today I sent my first bug bounty report. It was to PayPal. Fascinating to see some things are very different now from then, but some things are still exactly like they were. Tweet added by Frans Rosén @fransrosen

Frans Rosén

2 years

Ten years ago today I sent my first bug bounty report. It was to PayPal. Fascinating to see some things are very different now from then, but some things are still exactly like they were.

15

16

405

shubs

@infosec_au

2 years

@fransrosen Wow. Just checked my email. My first payout was on the 10th of October, 2012. Thanks for the trip down memory lane.

1

59

Hisxo

@adrien_jeanneau

2 years

@fransrosen Aha! One of the first bugs I found and submitted was also on PayPal 😄

How I was able to list some internal information from PayPal #BugBounty

TL;DR : A page on domain manager.paypal.com was vulnerable to “Expression Language Injection” (JSTL) and I was able to extract some…

medium.com

0

3

16

Julien | MrTuxracer 🇪🇺

@MrTuxracer

2 years

@fransrosen Hahaha, I also got my first bounty from PayPal in 2012 😎

2

1

19

Thirumalaivasan

@thirumalai_luci

2 years

@fransrosen Great Mr. Frans would like to see those iPhone screenshots of XSS found during flight. Was fascinated when you explained in one of your talk !

0

1

Bishal

@bishal0x01

2 years

@fransrosen 🤩

0

1

yappare

@yappare

2 years

@fransrosen same in 2012 :). my first bounty payment was from Paypal as well.

0

1

4

Missoum Said

@missoum1307

2 years

@fransrosen This was the 10th dupe bug back then back the,I almost quit

2

1

12

xorb

@evil_xorb

2 years

@fransrosen 9 years ago my first bounty ;-)

0

1

3

T1nd19d

@t1nd19d

2 years

@fransrosen Your mindset changes at your first $$$$ bounty. It lets you realize that with work, focus and dedication they're is something to earn from this field. A Stored XSS, gave me a goal, paid for my OSCP and lead to a full-time job...

0

8

arthur aires

@arthurair_es

2 years

@fransrosen Very cool! Mine was not from paypal, but I received my first bounty from HackerOne via PayPal on 10/21/2021.

2

0

7

The hard truth

@sadatsomed

2 years

@fransrosen @Blaklis_ I’d like to see yours on this trend 🙏

0

Tuan Anh Nguyen 🇻🇳

@haxor31337

2 years

@fransrosen My first bug on h1 also is on the Paypal program but it gets Informative because I did not give PoC to improve more impact. I think if other hackers know it at that time maybe they can escalate it to higher impact 😢

0

6

Hamza Bettache

@Hamzab3t

2 years

@fransrosen Mine was back in 2014 😁 50$ Wow, it's been already 8 years ! Time flies !

1

0

2

Replies