# Facebook pays ₹23.8 lakh bounty to Indian researcher | Tech News (HT Tech)
> Ahmedabad-based security researcher Bipin Jitiya has won ₹23.8 lakh from Facebook for identifying a bug in its social networking platform.
# Facebook pays ₹23.8 lakh bounty to Indian researcher
## Ahmedabad-based security researcher Bipin Jitiya has won ₹23.8 lakh from Facebook for identifying a bug in its social networking platform.
Aug 20 2022, 21:22 IST
The bug has now been fixed. (AP)
### By IANS
It is raining bug bounties for Indian ethical hackers and cybersecurity researchers as now, an Ahmedabad-based security researcher Bipin Jitiya has won ₹23.8 lakh ($31,500) from Facebook for identifying a bug in its social networking platform and a third-party business intelligence portal.
Jitiya, 26, identified the web security vulnerability in internal blind Server-Side Request Forgery (SSRF) in the source code of a publicly accessible endpoint, built using tools from MicroStrategy, that performed custom data collection and content generation.
MicroStrategy has partnered with Facebook on data analytics projects for several years. Jitiya reported the bug to the MicroStrategy's security team, who acknowledged it, saying the issue has been mitigated.
Also read
click here.
"I have always aimed in finding bugs in Facebook because it is the biggest social network on Earth with best-in-class security features in place. This time, they have awarded me with $31,500 for finding a critical bug. I have identified bugs in their systems in the past too," Jitiya told IANS on Monday.
In a Server-Side Request Forgery (SSRF) attack, the attacker can abuse functionality on the server to read or update internal resources. In typical SSRF attacks, the attacker might cause the server to make a connection back to itself, or to other web-based services within the organization's infrastructure, or to external third-party systems.
"I created a scenario that shows how the sensitive information leakage may be useful for launching specific attacks like path traversal and Server Side Request Forgery (SSRF). If an attacker is able to learn the internal IP addresses of the network, it is much easier for him/her to target systems in the internal network," explained Jitiya.
The bug has now been fixed.
"When I first got this bug on Facebook server I tried to convert it to RCE (remote code execution) but, unfortunately, they implemented good security measures. However, I made a total of $31500 ($1,000 $30,000 $500) from this vulnerability," he informed.
On a question whether he would join Facebook cybersecurity research team if given an offer, Jitiya told IANS: "I would like to stay in India and work as a security researcher for Indian firms. I am not a bug bounty hacker".
Last month, a 27-year-old Indian security researcher Bhavuk Jain grabbed $100,000 (over ₹75.5 lakh) from Apple for discovering a now-patched Zero Day vulnerability in the Sign in with Apple account authentication.
The Zero Day vulnerability could have allowed a hacker to break into an Apple user's account who log into third-party apps like like Dropbox, Spotify, Airbnb and Giphy (now acquired by Facebook) and more.
"Indian ethical hackers and security researchers have come of age, and are now creating headlines the world over with their unmatched skills," said Jitiya.
Catch all the Latest Tech News, Mobile News, Laptop News, Gaming news, Wearables News , How To News, also keep up with us on Whatsapp channel,Twitter, Facebook, Google News, and Instagram. For our latest videos, subscribe to our YouTube channel.
08 Jun, 18:16 IST
facebook
### Related Stories
07 Oct 2026
06 Oct 2026
71,591,619,851,517
NEXT ARTICLE BEGINS
## Tips & Tricks
### How to turn your photos into Ghibli-style art with ChatGPT for free: Step-by-step guide
### How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide
### Apple TV app arrives on Android phones and tablets: What you get and how to install it
### Vodafone Idea users can now stream 17 OTT apps with one subscription: Here's how
### How to transfer data from one Android to another using Google backup, USB-C cable, and more
## Editor’s Pick
### iPhone 16e launched in India: All details about the new budget mobile from Apple
### DeepSeek AI: How it works, who’s behind it, how it’s different from ChatGPT, and its big US market impact explained
### iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on
### Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini
### iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update
## Trending Stories
### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order
### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC
### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more
### Apple plans to train AI using your on-device data without accessing personal content or emails: Report
### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside
keep up with tech
## Gaming
### Top 5 gaming monitors under ₹20000 you should consider
### Grab gaming consoles at discounted rates during Amazon Great Indian Festival: Up to 72% off
### Pokémon GO Wild Area 2025 to bring Grimmsnarl family, Shiny Hatenna, and global challenges
### Shade Silver free on Steam for a limited time: Here’s how to get it
### Call of Duty: Black Ops 7 skips Switch 2 at launch, release date and price leak
## Trending News
### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order
### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC
### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more
### Apple plans to train AI using your on-device data without accessing personal content or emails: Report
### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside
## Trending Gadgets
Mobiles
Laptops
Tablets
- https://tech.hindustantimes.com/tech/news/facebook-pays-rs-23-8-lakh-bounty-to-indian-researcher-71591619851517.html