Breaking GitHub Private Pages for $35k

robertchen.cc
breaking-github-private-pages-for-$35k

I found and reported this vulnerability with @ginkoid. This was actually the first report that paid out for me on HackerOne. At $35,000, it’s also the highest bounty I’ve received so far from HackerOne (and I believe the highest GitHub … Read more