Find TikTok Data Leak Vulnerabilities( any social media platform)
Budget / Salary$10–30
TypeFreelance project
LocationRemote
Posted1 hour ago
My goal is to uncover and responsibly disclose data-leak vulnerabilities in TikTok through its official bug-bounty program. If you have a proven track record in application security research and are comfortable navigating the program’s rules of engagement, I’d like to collaborate.
The scope is focused exclusively on TikTok for now, with the expectation that any findings remain within the terms set by ByteDance’s security policy. I do not require a specific methodology—whether you prefer automated scanners, hands-on penetration testing, or deep manual analysis is up to you—so long as the approach stays legal and produces verifiable results.
Please be prepared to:
• Conduct research entirely within the parameters of TikTok’s bounty policy, avoiding any activity that could impact real users.
• Provide a concise technical report and proof-of-concept for each confirmed data-leak issue, including reproduction steps and recommended fixes.
• Coordinate coordinated disclosure timelines with me so we can submit through the appropriate portal and track bounty status together.
I’m looking for high-impact findings (e.g., exposure of private user information or backend data) rather than low-severity edge cases. If this fits your expertise, let’s discuss your previous relevant discoveries and outline the next steps.
The scope is focused exclusively on TikTok for now, with the expectation that any findings remain within the terms set by ByteDance’s security policy. I do not require a specific methodology—whether you prefer automated scanners, hands-on penetration testing, or deep manual analysis is up to you—so long as the approach stays legal and produces verifiable results.
Please be prepared to:
• Conduct research entirely within the parameters of TikTok’s bounty policy, avoiding any activity that could impact real users.
• Provide a concise technical report and proof-of-concept for each confirmed data-leak issue, including reproduction steps and recommended fixes.
• Coordinate coordinated disclosure timelines with me so we can submit through the appropriate portal and track bounty status together.
I’m looking for high-impact findings (e.g., exposure of private user information or backend data) rather than low-severity edge cases. If this fits your expertise, let’s discuss your previous relevant discoveries and outline the next steps.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.