Page 184 - Hands-On Bug Hunting for Penetration Testers

Formatting Your Report Chapter 10

Vulnerability Lab Archive

We first discussed Vulnerability Lab, like Hackerone, in the context of good bug bounty
researcher communities. In addition to being a great source for discovering new bounty
programs, Vulnerability Lab also maintains an archive (IUUQT XXX WVMOFSBCJMJUZ MBC
DPN ) of all the bug reports submitted on its platform (whose program owners also agree to
publicly disclosing the vulnerability):

One of the most valuable elements of the Vulnerability Lab archive is that each report is
organized by typebwhether it's a web application, mobile app, or general vendor
vulnerabilitybmaking it easy to drill down into the reports that are most relevant to your
practice.

[ 169 ]