ldqk/Masuit.MyBlogs

有奖重金悬赏征集网站安全漏洞

Open

#11 opened on Aug 25, 2021

View on GitHub
 (3 comments) (2 reactions) (0 assignees)JavaScript (297 forks)github user discovery
help wanted

Repository metrics

Stars
 (1,184 stars)
PR merge metrics
 (No merged PRs in 30d)

Description

欢迎各路安全爱好者来发现本网站任何安全方面的漏洞，比如数据安全、网络安全、权限安全等 ，一经核实安全漏洞存在的，待修复成功后，提交漏洞者将获得100-20000人民币不等的现金奖励，根据漏洞级别程度具体而定，欢迎各路安全大神们前来挑战，为开源事业做贡献！ 如有发现安全问题，请提交至邮箱： admin@masuit.com。 挖安全漏洞的目的也是为了将来能够为大家提供更长久更稳定的免费内容服务！虽然奖金很少，肯定是请不动专家级的大佬的，如果大家有兴趣就来帮忙找找本站存在的一些安全和性能问题吧🤣🤣

Contributor guide

Research direction
Conduct a security audit of the web application, focusing on common vulnerabilities such as XSS, SQL injection, CSRF, and authentication flaws. Use tools like OWASP ZAP or manual testing to identify issues.
Tech stack
csharpjavascriptvue
Domain
security
Issue type
Security
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Unclear
Prerequisites
Web security basicsOWASP Top 10
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
35