Skip to main content
NewsPublished

What should I focus on next while hunting the Zendesk Bugcrowd program?

Source Reddit BlueTeam

0

Discussion

This content is a discussion post on Reddit asking for advice on hunting vulnerabilities in the Zendesk Bugcrowd bug bounty program. It does not describe a specific security vulnerability or threat but rather seeks community input on testing focus areas and methodologies.

r/AskNetsec (opens in a new tab)u/Ok_Change_51750 points0 comments

Hi everyone,

I've been hunting the Zendesk Bugcrowd program for almost two months:
https://bugcrowd.com/engagements/zendesk

I've mainly tested the Help Center frontend for Broken Access Control (IDOR/BAC), business logic issues, and common workflows, but I haven't found any valid vulnerabilities yet.

For anyone who has hunted Zendesk before:

  • What areas or features are worth focusing on next?
  • Any methodology or tips for hunting mature zendesk BBP?

Thanks! 💜

Links cited in the discussion

References

Community reviews

Loading reviews…