Bypassing GitHub’s OAuth flow

For the past few years, security research has been something I’ve done in my spare time. I know there are people that make a living off of bug bounty programs, but I’ve personally just spent a few hours here and there whenever I feel like it. That said, I’ve always wanted to figure out whether I’d be able to make a living on bug bounties if I chose to work on them full time. So I tried doing that

[masa_iwasaki]

このバグレポートで270万円くらいもらったってことか。“I also got a $25000 bounty (!), which at the time was the highest bounty ever from GitHub’s program.”