Found a security vulnerability?
Submit your report to help make webook.com more secure.
Eligible submissions can earn 10,000–20,000 SAR, depending on severity and impact. Final rewards are at our discretion
Reporting guidelines
To ensure a smooths process, please adhere to the following guidelines
- 1
Original discoveries
Ensure your findings are original and not previously reported or publicly known.
- 2
Detailed reports
Provide a clear, step-by-step explanation, including evidence of the vulnerability and its potential impact
- 3
Focus scope
Concentrate on vulnerabilities that significantly affect the security or integrity of webook.com
- 4
Legal compliance
Ensure your actions comply with applicable laws, respect user privacy, and do not disrupt our services.
- 5
Confidentiality Matters
Vulnerabilities or potential vulnerabilities you discover may not at any time be disclosed publicly or to a third party. Doing so will disqualify you from receiving the award.
- 6
No Unauthorized Attacks
Do not attempt to perform brute-force attacks, denial-of-service attacks, compromise, or testing of webook.com accounts that are not your own.
- 7
Respect User & Employee Privacy
Do not attempt to target webook.com employees or customers using methods, including social engineering attacks and phishing attacks.
- 8
Use Ethical Testing Methods
Do not use automated scanners/tools.
- 9
No Post-Exploitation
Do not attempt to conduct post-exploitation, including modification or destruction of data, and interruption or degradation of webook.com.
- 10
Submit Detailed Reports
Provide details of the vulnerability finding, including information needed to reproduce and validate the vulnerability using the submission form.
Eligible
Remote code execution
SQL injection
XXE
XSS
Server-side request forgery
Directory traversal - local file inclusion
Not-Eligible
Security best practices i.e. security headers, etc.
Social engineering, phishing
Physical attacks
Missing cookie flags
CSRF with minimal impact i.e. login CSRF, logout CSRF, etc.
Content spoofing
By clicking submit your agree on webook.com terms and conditions & Privacy policy