PKT Pal Bounty Program
At PKT Pal we strive to create a safe environment for people to earn money from their unused internet. This company is fueled by the PKT community and we look towards our Pkteers to help gain network adoption. To ensure we have the best security possible for our users we have created the following bounty program to help protect our customers.
We appreciate your help in ensuring security for new Pkteers!
$2000
- Shell access on one of our servers
- Leak: SSL private keys to pktpal.com OR my.pktpal.com OR the permit server
- Persistent javascript OR server side script attacks which affect users of pktpal.com OR my.pktpal.com
$1000
- Leak: Personal information of PKT Pal customers
$500
- Leak: Server back end source code
- Attacks based on an outside website which, without any user interaction with the PKT Pal website:
1
Pair a new device to the user's PKT Cube
2
Spend PKT from user's PKT Cube
3
XSS attacks are included
$100
- Leak: PKT addresses of all or almost all PKT Pal customers
$50
- Attacks based on outside website which, without any further user interaction beyond the click:
1
Exfiltrate user's personal information
HONORABLE MENTION (no bounty)
- Non-weaponized issues which “may be vulnerable” (e.g. SSL configuration warnings)
We will never ever ever pay someone who DDoS's any of our servers.
