Monday, November 25, 2024
HomeHacksZERODIUM Hosts Tor Browser Zero-Day Bounty Program

ZERODIUM Hosts Tor Browser Zero-Day Bounty Program

Published on

ZERODIUM is known for paying premium bounties and rewards to security specialists to gain their unique and beforehand unreported zero-day investigation affecting major working operating systems, software, and devices.

Today ZERODIUM hosts Tor Browser Zero-Day Bounty and it is offering $1,000,000 for Zero-day exploits with Tor on Linux and Windows.And the bug bounty program is open up to November 30th, 2017 at 6:00 pm EDT and may be it closed in prior if the total payout reaches $1,000,000.

Exploiting browser vulnerabilities getting harder every day and this initiative will motivate security researchers to build new browser exploits. ZERODIUM sets the bar even higher with a new technical challenge: develop a fully functional zero-day exploit for Tor Browser with JavaScript BLOCKED!

Also read Deep Web Browser Tor Now With More Security and Compatibility

- Advertisement - SIEM as a Service

Submission Process

ZERODIUM estimates and verifies all submitted research inside one week or less. Payments are made in one or various installments by wire transfer or using crypto-currencies such as Bitcoin (in specific cases only).

ZERODIUM

The first installment is made within one week or less. For more detail, researchers should contact them with their PGP key.

ZERODIUM Payouts

ZERODIUM payouts for qualified zero-day abuses extend from $5,000 to $1,500,000 per submission. The sums paid by ZERODIUM to specialists to procure their unique zero-day abuses rely upon the fame and security quality of the influenced software/system, and also the nature of the submitted exploit (full or partial chain, supported versions/systems/architectures, reliability, bypassed exploit mitigations, default vs. non-default component, process continuation, etc).

  1. Tor Browser on Tails 3.x (64bit) and Windows 10 RS3/RS2 (64bit) : RCE and LPE to Root/SYSTEM without JavaScript $250,000 and RCE Only (No LPE) without JavaScript $185,000.
  2. Tor Browser on Tails 3.x (64bit) and Windows 10 RS3/RS2 (64bit) : RCE+LPE to Root/SYSTEM with JavaScript $125,000 and RCE Only (No LPE) with JavaScript $85,000.
  3. Tor Browser on Tails 3.x (64bit) OR on Windows 10 RS3/RS2 (64bit) : RCE+LPE to Root/SYSTEM without JavaScript $200,000 and RCE Only (No LPE) without JavaScript $175,000.
  4. Tor Browser on Tails 3.x (64bit) OR on Windows 10 RS3/RS2 (64bit) : RCE+LPE to Root/SYSTEM with JavaScript $100,000 and RCE Only (No LPE) without JavaScript $75,000.
Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Threat Actors Exploit Google Docs And Weebly Services For Malware Attacks

Phishing attackers used Google Docs to deliver malicious links, bypassing security measures and redirecting...

Python NodeStealer: Targeting Facebook Business Accounts to Harvest Login Credentials

The Python-based NodeStealer, a sophisticated info-stealer, has evolved to target new information and employ...

XSS Vulnerability in Bing.com Let Attackers Send Crafted Malicious Requests

A significant XSS vulnerability was recently uncovered in Microsoft’s Bing.com, potentially allowing attackers to...

Meta Removed 2 Million Account Linked to Malicious Activities

 Meta has announced the removal of over 2 million accounts connected to malicious activities,...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Telegram Bot Selling Phishing Tools to Bypass 2FA & Hack Microsoft 365 Accounts

A newly discovered phishing marketplace, ONNX Store, empowers cybercriminals to launch sophisticated attacks against...

Mobile Device Management Vendor Mobile Guardian Hacked

 Mobile Guardian, a leading Mobile Device Management (MDM) vendor, experienced unauthorized access to its...

Hunt3r Kill3rs Group claims they Infiltrated Schneider Electric Systems in Germany

The notorious cybercriminal group Hunt3r Kill3rs has claimed responsibility for infiltrating Schneider Electric's systems...