inurl bug bounty $100