---
title: "Discussion on \"$9240 Bounty in 30 days Hunt Challenge\" | Hashnode"
description: "Discussion on \"$9240 Bounty in 30 days Hunt Challenge\". I'm excited to share my journey as a full-time bug bounty hunter over the past three months. I'll discuss disappointments, challenges, notable events, etc"
url: "https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [$9240 Bounty in 30 days Hunt Challenge](https://blog.voorivex.team/9240-bounty-in-30-days-hunt-challenge?utm_source=hashnode&utm_medium=feed)

I'm excited to share my journey as a full-time bug bounty hunter over the past three months. I'll discuss disappointments, challenges, notable events, etc

Oct 21, 2023 · 12 min read · blog.voorivex.team  
Read the article

-   [#bugbounty](https://hashnode.com/tag/bugbounty)
-   [#bugbountytips](https://hashnode.com/tag/bugbountytips)

## Written by

[Omid Rezaei](https://hashnode.com/@omidrezaei)

@omidrezaei

  
[View profile](https://hashnode.com/@omidrezaei)

## Responses 10

Markdown supported · ⌘↵ to post

[Redwanur Rahman](https://hashnode.com/@AshenOne)

[Mar 9, 2025](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/67cd15f863463637b7ccd7a1)

brother I've submitted 12 vuln so far 5 min BBP and 7 in VDP all of them being N/A/ dup risk accepted, informative

[Redwanur Rahman](https://hashnode.com/@AshenOne)

[Mar 9, 2025](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/67cd15f863463637b7ccd7a1#reply-67cd1628ec228f26d6adc22b)

this blog act as a motivation for me to keep going

[suryavss](https://hashnode.com/@suryavss)

[Feb 19, 2025](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/67b5d6923cde5720a098fa38)

Hi, you started your 30-day challenge in a public or private bbp and also was that a new asset? just curious.

[zijian xiao](https://hashnode.com/@m4ra7h0n)

[Feb 14, 2025](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/67aeb0a4db3727f7cf7a6de2)

very nice article.

[zijian xiao](https://hashnode.com/@m4ra7h0n)

[Feb 14, 2025](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/67aea99387075498e739bfd7)

The 2FA Bypass with Grant Access section is not very clear. The redirect must be victim@gmail.com. If the redirect is to victi.m@gmail.com, the user is a new user, and 2FA is not enabled

[zijian xiao](https://hashnode.com/@m4ra7h0n)

[Feb 14, 2025](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/67aea99387075498e739bfd7#reply-67aeaaaae225fe49b468b541)

However, if you are signing up for a new user victi.m@gmail.com, the link must also go to victi.m@gmail.com, so it is impossible to bypass 2FA at victim@gmail.com

[Souren Mosavi](https://hashnode.com/@intrant)

[Feb 8, 2025](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/67a7742f0b78a1be641633de)

verry helpful for me ty for mohandes rezaee =D

[Cycbake](https://hashnode.com/@cycbake)

[Oct 7, 2024](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/67035e1e9880b8b9bb03221e)

I got several motivation from your blog. Thanks

[Cycbake](https://hashnode.com/@cycbake)

[Oct 7, 2024](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/67035e07568d2e33c5890f19)

Keep going bro , You are awesome

[Aftab Saifi](https://hashnode.com/@Ehaftab)

[May 31, 2024](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/6659eda6a6eaa88fd6394382)

from where do you learn all these bugs and techniques?

[Kakada anil](https://hashnode.com/@Anilkkd)

[Apr 20, 2024](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/66237ec23354bd01ad3e3d65)

Greet work bro. If you don't mine guide us also bro

[Nischal Karki](https://hashnode.com/@nischalxd)

[Mar 10, 2024](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/65ed3ebbc022f953c200b801)

Same here, the struggle is real. Reported more than 20 bugs as of now, only 1 paid. All other duplicates and N/As. Also no response from program most of the time.

[Shubham SRT](https://hashnode.com/@shubhamsrt)

[Dec 18, 2023](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/657fa8dac6ef1959c3435058)

In "2FA bypass with GrantAccess" If an attacker sends the invitation to victim.m@gmail.com . The invitation mail will still be delivered to victim@gmail.com right? So how is the attacker able to access that link?

[THOOYAVAN](https://hashnode.com/@thxxyxvxn)

[Nov 3, 2023](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/6544fa4308e6f2d0c47382df)

Awesome !!!

[Meiad Noushadi](https://hashnode.com/@meiad)

[Oct 21, 2023](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/65341fc41876d54fd5695471)

excellent, Keep going strong!!!