The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
Security Vulnerability Discovery & Responsible Disclosure
Identified and responsibly disclosed a security vulnerability affecting user data privacy. Worked directly with the security team to validate the issue, provide technical details, and support remediation efforts.
Result:
• Vulnerability successfully validated
• Security issue fixed by the organization
• Received a £150 bug bounty reward
• Followed responsible disclosure practices
Skills:
Web Security, Vulnerability Assessment, Responsible Disclosure, Bug Bounty Hunting, Security Research
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Related posts
Built RED for the Wonder × Contra challenge.
RED is an incident response workspace for cyber crisis teams — designed around one simple idea:
Most security tools show what is happening. RED shows what to do next.
I used Wonder to design the full product system: visual identity, landing page, incident overview, incident detail workspace, timeline reconstruction, evidence review, reports, promo frames, and a Codex/MCP-ready prototype direction.
The result is a calm, dark, operational interface for high-pressure incidents: severity, phase, owner, evidence, AI review state, and report readiness all visible without the usual cyber-dashboard chaos.
Live project: https://rred.pro
Wonder file: https://app.wonder.so/bobvasx/files/019f2df3-a77f-737a-a4ff-289a16bd67a5/branches/main/pages/019f2df3-a781-723e-ab43-f8b23c42a61d
LinkedIn: https://www.linkedin.com/posts/bobvasic_wonderchallenge-ugcPost-7480019648571215874-1CS7/?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAWbOcYBym9kgZZll4IyyFfT9tR-b1MMg5U
@Contra x @Wonder
Built Trust Leak Explorer with Wonder, from rough concept to live site integration.
For my company, Crossfire CX, I needed a way for potential clients to quickly understand what we diagnose before building AI into their customer experience. I started in Wonder exploring a standard readiness-review format, but through Wonder Chat the idea turned into something more useful: an interactive diagnostic where you pick a customer experience scenario and see how trust is gained or lost downstream. From there I used Wonder's shader generation for the hero treatment, planned the integration into the existing site, then used Wonder MCP with Codex to translate the final frames into code on GitHub and deploy the site live via Cloudflare Pages.
Full walkthrough and links below 👇
Video walkthrough >>
Wonder file >>
Live site >>
Built for the @Contra x @Wonder Challenge.
#wonderchallenge #contra #customerexperience #mcp #github #cloudflare #codex
🚀 Building the Ultimate Bug Bounty Engagement Console & Dashboard!
Hey Contra Community! 👋
I'm building a passion project to supercharge security audits: The Professional Bug Bounty Engagement Dashboard.
As security researchers, we juggle command-line tools, wordlists, payloads, screenshots, and reports spread across multiple folders. I wanted a unified local control center that bridges raw terminal workflows with a premium, high-fidelity UI.
What it does
🛠️ Tech Stack
Backend: Node.js + Express.js, running locally with direct file read/write access.
Frontend: Vanilla JavaScript + custom CSS for a fast, responsive experience.
Data flow: No database at all — everything serializes into clean markdown, text, and JSON inside local workspace folders like notes/, reports/, checklists/, and recon/.
🔥 Core features in progress
Checklist presets & evidence linker
Load presets (OWASP Web Top 10, API Security, Quick Recon) and link proof screenshots directly to checklist items. Hovering over a task shows an instant evidence preview.
DNS OSINT records & live SVG topology map
Parallel queries for CNAME, A, AAAA, MX, NS, and TXT records, rendered as an interactive SVG node map.
Vulnerability report compiler & CVSS v3.1 engine
Interactive calculator for vector strings and severity scores, plus OWASP finding templates and direct Burp Suite XML imports.
HTML5 Canvas proof editor
Edit PoC screenshots in-browser (red boxes, arrows, annotations) and save them straight back to disk.
Automation runners console
Trigger Selenium web tests or local Node, Python, PowerShell, and Bash scripts, with live terminal output streaming into the dashboard.
Next build phase
💡 I’m now polishing WAF bypass obfuscation encoders and adding bulk target queues to chain scans across large subdomain lists.
I’m building this as a local-first, privacy-preserving toolkit for professional bug bounty hunters and VAPT teams, and I’d love to evolve it with real-world feedback.
How do you currently organize your hacking/assessment workspace, and what would be a must-have feature for you in a console like this? 👇
Trending
Claude
Claude has entered the design space. How are you using Claude Design?
Contra University
Learn from expert creatives how to earn more using next-gen AI tools.
fifaworldcup2026
The World Cup is here and the whole world's watching. How are you designing for the world stage?
creativeaiflow
Creative AI workflows are evolving. What tools do you use, and what are their strengths and weaknesses?
freelancerlife
Freelancer life is wins, pivots, and everything in between. What’s yours right now?