How I Earned $1750 at Shopify Bug Bounty Program

Ashish Dhone
4 min readMar 16, 2020

Introduction

This article is a write up on how I found a critical XSS vulnerability at Shopify Core in Shopify Bug Bounty Program due to which I was Acknowledged and listed in Top 10 at Shopify Hacker’s Hall of Fame in the World.

I wrote this for educational purposes only. Do not perform any illegal activity or pen-testing without permission.

--

--

Ashish Dhone

Top 120 in the World at Google Hacker’s Ranking & Best Bug Hunter of the Year 2021 | Cyber CounterIntelligence | SRT | CEH | CEH Master | CHFI | CVE x 4