TMG Security Courses

Verified student wins · TMG Academy

Student Achievements: Real Bug Bounties & Halls of Fame

These are real screenshots shared by our students after taking TMG Security bug bounty courses. You will see paid bounties from HackerOne and private programs, plus Hall of Fame entries from NASA, UNESCO and Westpac. In other words, these are our bug bounty success stories, straight from the students themselves.

12Paid bounties shown here
$750Top single bounty
6Halls of Fame & swag
67thHall of Fame by one student

Wall of wins: bug bounty success stories

Tap any card to view the full screenshot. Program names and amounts are masked where students chose to hide them.

Paid bountyArnesh VaidyaBounty #16: low-severity bug escalated to high
“Thank you Mayank Gandhi for the session on low severity bugs escalation to high.”
Paid bountyArnesh VaidyaBounty #15: paid for bug chaining and escalation
“Thank you Mayank Gandhi for unique bug chaining and escalation techniques.”
Paid bountySairaj ThoratBounty #10: CVE-2018-6389 application-level DoS
“Thank you Mayank Gandhi for bug bounty guidance.”
Paid bountyPrashant Sengar · V2.0First HackerOne bounty: configuration disclosure
“Well there goes first HackerOne bounty.”
Paid bountyGirish UnawaneFirst valid bug: persistent access to a sensitive user archive
“Thanks to TMG Security Mayank Gandhi for your valuable guidance.”
Paid bountyAdvance batch studentInconsistent password policy enforcement
“Sir bounty aagyi!”
Paid bountyPrashant Sengar · V2.0Security gap confirmed and rewarded
Paid bountyManav NakraHigh-severity bounty paid via PayPal
“Thanks to Mayank Gandhi sir.”
Paid bountyManav NakraRace condition: last bounty of 2024
Paid bountyManav NakraMedium-severity bounty, January 2026
Paid bountyPrashant Sengar · V2.0Reward secured for multiple findings
Paid bountyPrashant Sengar · V2.0Finding confirmed, payout scheduled
Hall of FameRajesh BhandekarNASA Hall of Fame: his 6th HOF
Hall of FameRajesh BhandekarUNESCO Hall of Fame: XSS clickjacking (HOF #7)
Hall of FameSravan KumarWestpac Hall of Fame: stored XSS via Bugcrowd
“Big thanks to Mayank Gandhi sir, my teaching mentor.”
Hall of FameSravan KumarSwaggle Hall of Fame
Hall of FameVaibhav JainHappy to secure one more company: 67th Hall of Fame
Hall of FameRajesh BhandekarNaturalis museum CSIRT: swag reward for a fixed bug
CommunityPrashant Sengar · V2.0Missed by 8 days: duplicates are part of the journey

How our students get their first bounty

Most of these bug bounty success stories follow the same simple path.

01

Learn the fundamentals

First, students build core web hacking skills in the Bug Bounty course and WAPT.

02

Go advanced

Next, they learn bug chaining and escalation in Advance Bug Bounty V1.0 and V2.0.

03

Hunt with mentor support

Finally, they hunt on real programs, share findings in our student groups and get guidance until the bounty lands. You can read more about how programs work on HackerOne.

Your screenshot could be next

Join the TMG Security bug bounty courses and start hunting with the same methods our students use.

Screenshots were shared by students in our groups or posted publicly on LinkedIn. Results depend on each student’s effort and practice, so they are not a guarantee of earnings.

Scroll to Top
Chat with us