What's new
By:

🔒 Closed Netflix Ampalaya spotted once again

Status
Not open for further replies.
Netflix’s goal is to deliver joy to our 117+ million members around the world, and it's the security team's job to keep our members, partners, and employees secure. We have been engaging with the security community to achieve this goal through programs like responsible disclosure and private bug bounty over the past 5 years. We are now publicly launching our bug bounty program through the Bugcrowd platform to continue improving the security of our products and services while strengthening our relationship with the community.
Guidelines
We require that all researchers:
  • Do not access customer or employee personal information, pre-release Netflix content, or Netflix confidential information. If you accidentally access any of these, please stop testing and submit the vulnerability.
  • Stop testing and report the issue immediately if you gain access to any non-public application or non-public credentials.
  • Do not degrade the Netflix user experience, disrupting production systems, or destroy data during security testing.
  • Perform research only within the scope set out below.
  • Use the Bugcrowd report submission form to report vulnerability information to us.
  • Collect only the information necessary to demonstrate the vulnerability.
  • Submit any necessary screenshots, screen captures, network requests, reproduction steps or similar using the Bugcrowd submission form (do not use third party file sharing sites).
  • When investigating a vulnerability, please only target your own account and do not attempt to access data from anyone else’s account.
  • Securely delete Netflix information that may have been downloaded, cached, or otherwise stored on the systems used to perform the research.
  • Follow the Bugcrowd “Coordinated Disclosure” You do not have permission to view the full content of this post. Log in or register now..
If you fulfill these requirements, Netflix will:
  • Work with you to understand and attempt to resolve the issue quickly (confirming the report within 7 days of submission);
  • Recognize your contribution to our Security Researcher Hall of Fame, if you are the first to report the issue and we make a code or configuration change based on the issue.
  • Pay you for your research for unique vulnerabilities that meet the guidelines listed below if you are the first to report the issue to us using the Bugcrowd portal.
To encourage responsible disclosure, Netflix will not bring a lawsuit against you or ask law enforcement to investigate you if we determine that your research and disclosure meets these requirements and guidelines.
If you have any questions regarding the Netflix program, please reach out to support@bugcrowd.com.

Targets
In scope
Target nameType
api*.netflix.comAPI
You do not have permission to view the full content of this post. Log in or register now.Website
secure.netflix.comWebsite
ichnaea.netflix.comWebsite
*.nflxvideo.netWebsite
*.nflxext.comWebsite
*.nflximg.netWebsite
help.netflix.comWebsite
dockhand.netflix.comWebsite
beacon.netflix.comWebsite
presentationtracking.netflix.comWebsite
nmtracking.netflix.comWebsite
customerevents.netflix.comWebsite
Netflix Mobile Application for iOSiOS
Netflix Mobile Application for AndroidAndroid
Secondary Targets (read below)Other
meechum.netflix.comWebsite
 
McDonaldTrump said:
Netflix’s goal is to deliver joy to our 117+ million members around the world, and it's the security team's job to keep our members, partners, and employees secure. We have been engaging with the security community to achieve this goal through programs like responsible disclosure and private bug bounty over the past 5 years. We are now publicly launching our bug bounty program through the Bugcrowd platform to continue improving the security of our products and services while strengthening our relationship with the community.
Guidelines
We require that all researchers:
  • Do not access customer or employee personal information, pre-release Netflix content, or Netflix confidential information. If you accidentally access any of these, please stop testing and submit the vulnerability.
  • Stop testing and report the issue immediately if you gain access to any non-public application or non-public credentials.
  • Do not degrade the Netflix user experience, disrupting production systems, or destroy data during security testing.
  • Perform research only within the scope set out below.
  • Use the Bugcrowd report submission form to report vulnerability information to us.
  • Collect only the information necessary to demonstrate the vulnerability.
  • Submit any necessary screenshots, screen captures, network requests, reproduction steps or similar using the Bugcrowd submission form (do not use third party file sharing sites).
  • When investigating a vulnerability, please only target your own account and do not attempt to access data from anyone else’s account.
  • Securely delete Netflix information that may have been downloaded, cached, or otherwise stored on the systems used to perform the research.
  • Follow the Bugcrowd “Coordinated Disclosure” You do not have permission to view the full content of this post. Log in or register now..
If you fulfill these requirements, Netflix will:
  • Work with you to understand and attempt to resolve the issue quickly (confirming the report within 7 days of submission);
  • Recognize your contribution to our Security Researcher Hall of Fame, if you are the first to report the issue and we make a code or configuration change based on the issue.
  • Pay you for your research for unique vulnerabilities that meet the guidelines listed below if you are the first to report the issue to us using the Bugcrowd portal.
To encourage responsible disclosure, Netflix will not bring a lawsuit against you or ask law enforcement to investigate you if we determine that your research and disclosure meets these requirements and guidelines.
If you have any questions regarding the Netflix program, please reach out to support@bugcrowd.com.

Targets
In scope
Target nameType
api*.netflix.comAPI
You do not have permission to view the full content of this post. Log in or register now.Website
secure.netflix.comWebsite
ichnaea.netflix.comWebsite
*.nflxvideo.netWebsite
*.nflxext.comWebsite
*.nflximg.netWebsite
help.netflix.comWebsite
dockhand.netflix.comWebsite
beacon.netflix.comWebsite
presentationtracking.netflix.comWebsite
nmtracking.netflix.comWebsite
customerevents.netflix.comWebsite
Netflix Mobile Application for iOSiOS
Netflix Mobile Application for AndroidAndroid
Secondary Targets (read below)Other
meechum.netflix.comWebsite
Click to expand...
:unsure:
 
McDonaldTrump said:
Netflix’s goal is to deliver joy to our 117+ million members around the world, and it's the security team's job to keep our members, partners, and employees secure. We have been engaging with the security community to achieve this goal through programs like responsible disclosure and private bug bounty over the past 5 years. We are now publicly launching our bug bounty program through the Bugcrowd platform to continue improving the security of our products and services while strengthening our relationship with the community.
Guidelines
We require that all researchers:
  • Do not access customer or employee personal information, pre-release Netflix content, or Netflix confidential information. If you accidentally access any of these, please stop testing and submit the vulnerability.
  • Stop testing and report the issue immediately if you gain access to any non-public application or non-public credentials.
  • Do not degrade the Netflix user experience, disrupting production systems, or destroy data during security testing.
  • Perform research only within the scope set out below.
  • Use the Bugcrowd report submission form to report vulnerability information to us.
  • Collect only the information necessary to demonstrate the vulnerability.
  • Submit any necessary screenshots, screen captures, network requests, reproduction steps or similar using the Bugcrowd submission form (do not use third party file sharing sites).
  • When investigating a vulnerability, please only target your own account and do not attempt to access data from anyone else’s account.
  • Securely delete Netflix information that may have been downloaded, cached, or otherwise stored on the systems used to perform the research.
  • Follow the Bugcrowd “Coordinated Disclosure” You do not have permission to view the full content of this post. Log in or register now..
If you fulfill these requirements, Netflix will:
  • Work with you to understand and attempt to resolve the issue quickly (confirming the report within 7 days of submission);
  • Recognize your contribution to our Security Researcher Hall of Fame, if you are the first to report the issue and we make a code or configuration change based on the issue.
  • Pay you for your research for unique vulnerabilities that meet the guidelines listed below if you are the first to report the issue to us using the Bugcrowd portal.
To encourage responsible disclosure, Netflix will not bring a lawsuit against you or ask law enforcement to investigate you if we determine that your research and disclosure meets these requirements and guidelines.
If you have any questions regarding the Netflix program, please reach out to support@bugcrowd.com.

Targets
In scope
Target nameType
api*.netflix.comAPI
You do not have permission to view the full content of this post. Log in or register now.Website
secure.netflix.comWebsite
ichnaea.netflix.comWebsite
*.nflxvideo.netWebsite
*.nflxext.comWebsite
*.nflximg.netWebsite
help.netflix.comWebsite
dockhand.netflix.comWebsite
beacon.netflix.comWebsite
presentationtracking.netflix.comWebsite
nmtracking.netflix.comWebsite
customerevents.netflix.comWebsite
Netflix Mobile Application for iOSiOS
Netflix Mobile Application for AndroidAndroid
Secondary Targets (read below)Other
meechum.netflix.comWebsite
Click to expand...
Salamat sa payload
 
Status
Not open for further replies.

Similar threads

About this Thread

  • 17
    Replies
  • 186
    Views
  • 10
    Participants
Last reply from:
supercj1212

New Topics

Trending Topics

Online now

Members online
1,284
Guests online
3,137
Total visitors
4,421

Forum statistics

Threads
2,301,594
Posts
29,143,544
Members
1,199,092
Latest member
ilxcore
Back
Top