MAKING REPORT INSTRUCTION



YK37T

Email-id will be expired in:
1. TITLE/EMAIL SUBJECT LINE
The title/email subject line must follow this construction: EMAIL-ID - NAME OF THE REPORTED VULNERABILITY
  • EMAIL-ID : are 5 characters which are created randomly (Ex: WRPD1)
  • NAME OF THE REPORTED VULNERABILITY : is the name of the vulnerability that you found.
  • EXAMPLE: WRPD1 - SQL injection
2. BODY/MAIN POINT
Content of the report must have these belowing information:
  • Sender's information (optional): Nickname/website - and other information to contact.
  • Serious level: Critical / High / Medium / Low.
  • Describe shortly and clearly: name of the vulnerability and what would be affected (Ex: Storing XSS on website https:/website.com/abc can cause user’s accounts takeover).
  • The detailed process:
    Step 1,
    Step 2,
    Step 3,
    ...
  • Attached files: only supported for the following file formats: txt, pdf, mp3, mp4, png, jpg
  • Other important information (if any).
3. RECEIVING ADDRESS
Nexttech only receives report email via:
  • [email protected]
  • Other email addresses are not ours, sending information to those can disclosure important vulnerabilities to attackers.