Did Blind SQLi and showed DB name. Confirmed manually in browser with time based payloads.
Cloudflare autodeploy patched it before triage. Now triager asks for DB proof on a fixed site since he can't reproduce. 2 months in review. False positive or valid?
hackerone level 3 complete reached 50 points milestone and unlocked burp suite pro and pentesterlab pro rewards consistency is paying off. next stop level 4 .
#bugbounty#infosec#hackerone#milestone