If you have discovered or believe you have discovered potential security vulnerabilities in Techmedia NG , we encourage you to disclose your discovery to us as quickly as possible in accordance with this program (the Responsible Disclosure Program).
Discovering Security Vulnerabilities
We encourage responsible security research on Techmedia NG. We allow you to conduct vulnerability research and testing on the website. In no event shall your research and testing involve:
- Any attempt to modify or destroy any data,
- Executing, or attempting to execute, a denial of service attack,
- Sending, or attempting to send, unsolicited or unauthorized email, spam or other forms of unsolicited messages,
- Posting, transmitting, uploading, linking to, sending or storing malware, viruses or similar harmful software, or otherwise attempting to interrupt or degrade the site.
- Any activity that violates any applicable law.
Reporting Security Vulnerabilities
If you believe you have discovered a security vulnerability issue, please share the details with us by sending an email to [email protected] . In reporting a potential security vulnerability issue you shall include the following:
- An adequate description and information regarding the security vulnerability that will allow us to reproduce your steps and the issue,
- Your email address
- Your name and twitter handle as you would like it to appear in our Hall of Fame.
- A valid Proof Of Concept
Some submission types do not qualify for a reward because they have low security impact and thus, do not trigger a code change. This section contains a listing of issues found to be commonly reproducible and reported, but are often ineligible. We strongly suggest you do not report these issues unless you can demonstrate a chained attack with higher impact.
- HTTP 404 codes/pages or other HTTP non-200 codes/pages
- Disclosure of known public files or directories, (e.g. robots.txt).
- Denial Of Service(DoS/DDoS).
- CSRF on forms that are available to anonymous users (e.g. the contact form).
- The Anti-MIME-Sniffing header X-Content-Type-Options.
- Clickjacking and issues only exploitable through clickjacking.
- OPTIONS / TRACE HTTP method enabled.
- Missing HTTP security headers, specifically.
- Common Version Disclosures.
Researchers that responsibly disclose in accordance with this Responsible Disclosure Program are eligible for inclusion in our Hall of Fame. Whether or not a security vulnerability report is in compliance with this Responsible Disclosure Program and a Researcher is eligible for inclusion in our Hall of Fame is in our sole discretion. We reserve the right to cancel this recognition program at any time without notice. Any requests for monetary compensation or any other type of consideration will be deemed in violation of this Responsible Disclosure Program.
Hall Of Fame
we would like to thank the following researchers that have helped keep our site safe by reporting security vulnerability responsibly in accordance with our Responsible Disclosure Program:
- SaifAllah benMassaoud
- Rajesh Majumdar
- Mansoor Gilal
- Yogendra Jaiswal [RaipurTricks]
- Jay K Patel
- Md. Nur A Alam Dipu
Page Credit: ShawarKhan.com