Unverified60% confidenceFactExact time
In historical reports on mainstream bug bounty platforms such as HackerOne and Bugcrowd, exposed configuration files and .git directories are among the most frequently rewarded high-value vulnerability types.
2
Sources
60%
Confidence
Long-term
Relevance
7/9/2026
First Seen
Sources
OSINT工具自动发现域名暴露文件：原理、应用与合规边界
hackernewshackernews7/5/2026
Related Claims
VerifiedHackerOne and Bugcrowd are currently the two largest bug bounty intermediary platforms in the world.82% similarVerifiedBug bounty programs are hosted on platforms such as HackerOne and Bugcrowd, where companies incentivize white-hat hackers to discover vulnerabilities by offering monetary rewards.77% similarUnverified许多组织通过 HackerOne、Bugcrowd 等漏洞赏金平台建立正式的 VDP（漏洞披露政策）76% similarUnverified该漏洞的技术本质是PATH劫持攻击，Cursor执行Git操作时会从项目目录中查找并调用git可执行文件76% similarUnverifiedMainstream bug bounty platforms include HackerOne, Bugcrowd, and Intigriti, with participating companies spanning Google, Meta, and Microsoft.76% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/330976API
curl https://kongchang.com/api/v1/knowledge/claims/330976MCP
get_claim(id=330976)