mushraf@portfolio:~/disclosures$./list --status=verified --since=2017
Bug Bounties & /* Responsible Disclosures */
> 60+ vendors notified · vulnerabilities reported, triaged, fixed · all disclosed responsibly · zero dropped publicly.
60+
targets
7y+
researching
100%
disclosed
0
0-days dropped
> grep -i "public-record" disclosures.log
[2017] CVE-2017-9551 // stored XSS, Mahara ePortfolio - fixed in vendor security release
[2017] Oracle Critical Patch Update credits, October // 3 reports
[2018] Oracle Critical Patch Update credit, July
[----] Dutch National Cyber Security Centre (NCSC-NL) acknowledgement
▸[OK]oracle.com//tech▸[OK]dell.com//tech▸[OK]intel.com//tech▸[OK]sony.com//tech▸[OK]ibm.com//tech▸[OK]microsoft.com//tech▸[OK]github.com//tech▸[OK]docker.com//tech▸[OK]pinterest.com//tech▸[OK]spotify.com//tech▸[OK]indeed.com//tech▸[OK]mail-ru.com//tech▸[OK]buzzfeed.com//media▸[OK]lifewire.com//media▸[OK]sound-cloud-music.com//media▸[OK]eset.com//security▸[OK]sophos.com//security▸[OK]symantec.com//security▸[OK]bitdefender.com//security▸[OK]alienvault.com//security▸[OK]centrify.com//security▸[OK]threat-stack.com//security▸[OK]tempered-networks.com//security▸[OK]silent-circle.com//security▸[OK]antihack-me.com//security▸[OK]bugcrowd.com//security▸[OK]hackerone.com//security▸[OK]coalition-llc.com//security▸[OK]dutch-gov-ncsc.com//gov▸[OK]philip-capital.com//finance▸[OK]ynab.com//finance▸[OK]mbme-pay.com//finance▸[OK]coin-falcon.com//finance▸[OK]olx.com//marketplace▸[OK]souq.com//marketplace▸[OK]zomato.com//marketplace▸[OK]groupon.com//marketplace▸[OK]caviar.com//marketplace▸[OK]humble-bundle.com//marketplace▸[OK]7-eleven-uae.com//retail▸[OK]print-arabia.com//retail▸[OK]poster-mywall.com//retail▸[OK]sky-scanner.com//travel▸[OK]graana-properties.com//real-estate▸[OK]legal-robot.com//saas▸[OK]onepagecrm.com//saas▸[OK]constant-contact.com//saas▸[OK]jotform.com//saas▸[OK]mailgun.com//saas▸[OK]intercom.com//saas▸[OK]smartsheet.com//saas▸[OK]workable.com//saas▸[OK]segment.com//saas▸[OK]azendoo.com//saas▸[OK]wakatime.com//saas▸[OK]fig.com//saas▸[OK]awoke.com//saas▸[OK]mahara.com//edtech▸[OK]edmodo.com//edtech▸[OK]desconllc.com//industrial▸[OK]oracle.com//tech▸[OK]dell.com//tech▸[OK]intel.com//tech▸[OK]sony.com//tech▸[OK]ibm.com//tech▸[OK]microsoft.com//tech▸[OK]github.com//tech▸[OK]docker.com//tech▸[OK]pinterest.com//tech▸[OK]spotify.com//tech▸[OK]indeed.com//tech▸[OK]mail-ru.com//tech▸[OK]buzzfeed.com//media▸[OK]lifewire.com//media▸[OK]sound-cloud-music.com//media▸[OK]eset.com//security▸[OK]sophos.com//security▸[OK]symantec.com//security▸[OK]bitdefender.com//security▸[OK]alienvault.com//security▸[OK]centrify.com//security▸[OK]threat-stack.com//security▸[OK]tempered-networks.com//security▸[OK]silent-circle.com//security▸[OK]antihack-me.com//security▸[OK]bugcrowd.com//security▸[OK]hackerone.com//security▸[OK]coalition-llc.com//security▸[OK]dutch-gov-ncsc.com//gov▸[OK]philip-capital.com//finance▸[OK]ynab.com//finance▸[OK]mbme-pay.com//finance▸[OK]coin-falcon.com//finance▸[OK]olx.com//marketplace▸[OK]souq.com//marketplace▸[OK]zomato.com//marketplace▸[OK]groupon.com//marketplace▸[OK]caviar.com//marketplace▸[OK]humble-bundle.com//marketplace▸[OK]7-eleven-uae.com//retail▸[OK]print-arabia.com//retail▸[OK]poster-mywall.com//retail▸[OK]sky-scanner.com//travel▸[OK]graana-properties.com//real-estate▸[OK]legal-robot.com//saas▸[OK]onepagecrm.com//saas▸[OK]constant-contact.com//saas▸[OK]jotform.com//saas▸[OK]mailgun.com//saas▸[OK]intercom.com//saas▸[OK]smartsheet.com//saas▸[OK]workable.com//saas▸[OK]segment.com//saas▸[OK]azendoo.com//saas▸[OK]wakatime.com//saas▸[OK]fig.com//saas▸[OK]awoke.com//saas▸[OK]mahara.com//edtech▸[OK]edmodo.com//edtech▸[OK]desconllc.com//industrial
Oracle//techDell//techIntel//techSony//techIBM//techMicrosoft//techGithub//techDocker//techPinterest//techSpotify//techIndeed//techMail.ru//techBuzzFeed//mediaLifeWire//mediaSound Cloud Music//mediaESET//securitySophos//securitySymantec//securityBitdefender//securityAlienVault//securityCentrify//securityThreat Stack//securityTempered Networks//securitySilent Circle//securityAntihack.me//securityBugCrowd//securityHackerOne//securityCoalition LLC//securityDutch-Gov NCSC//govPhilip Capital//financeYNAB//financeMBME Pay//financeCoin Falcon//financeOLX//marketplaceSouq//marketplaceZomato//marketplaceGroupon//marketplaceCaviar//marketplaceHumble Bundle//marketplace7-Eleven UAE//retailPrint Arabia//retailPoster Mywall//retailSky Scanner//travelGraana Properties//real-estateLegal Robot//saasOnePageCRM//saasConstant Contact//saasJotForm//saasMailGun//saasIntercom//saasSmartSheet//saasWorkable//saasSegment//saasAzendoo//saasWakaTime//saasFig//saasAwoke//saasMahara//edtechEdmodo//edtechDesconLLC//industrial+many more under NDA
> ls ~/freelance/builds
[live] butiksmanager.se // retail-operations SaaS used by small Swedish shops
[live] sparlos.se // cookie-free, GDPR-aligned web analytics
[----] full-stack builds for private clients - React / Node.js / three.js, from requirements to deployment
> exit code: 0 - engagement closed successfully.
$ contact mushraf --reason="security review"
