Skip to content

Instantly share code, notes, and snippets.

@0xSojalSec

0xSojalSec/bounty_wildcards.json

Forked from 0xtavi/bounty_wildcards.json
Created November 4, 2022 20:12
Show Gist options
  • Save 0xSojalSec/fba113df497c861b49f2f8d88be6d4dc to your computer and use it in GitHub Desktop.
Save 0xSojalSec/fba113df497c861b49f2f8d88be6d4dc to your computer and use it in GitHub Desktop.
Download ZIP
Bug Bounty Paying Programs Wildcard Domains
Raw
bounty_wildcards.json
{
"programs": [
{
"name": "spacex",
"url": "https://bugcrowd.com/spacex",
"wildcards": [
"starlink.com",
"starlinkisp.net"
],
"out_of_scope_domains": [],
"ipv4_subnets": [
"192.31.243.0/26",
"192.31.243.64/28",
"192.31.243.96/27"
],
"ipv6_subnets": [
"2620:134:b000::/40"
]
},
{
"name": "exodus",
"url": "https://hackerone.com/exodus",
"wildcards": [
"exodus.io",
"a.exodus.io",
"exodus.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "tiktok",
"url": "https://hackerone.com/tiktok",
"wildcards": [
"tiktok.com",
"tiktokv.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "tweakers",
"url": "https://app.intigriti.com/programs/dpgm/tweakers/detail",
"wildcards": [
"tweakblogs.net",
"tweakers.net"
],
"out_of_scope_domains": [
"elect.tweakers.net"
],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "better",
"url": "https://bugcrowd.com/better",
"wildcards": [
"better.com"
],
"out_of_scope_domains": [
"internalcareers.better.com"
],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "binance",
"url": "https://bugcrowd.com/binance",
"wildcards": [
"binance.com",
"binance.org",
"binance.us",
"binance.sg",
"dex.binance.org"
],
"out_of_scope_domains": [
"support.binance.com",
"support.binance.org",
"support.binance.us",
"support.binance.sg"
],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "bitdefender",
"url": "https://bugcrowd.com/bitdefender",
"wildcards": [
"bitdefender.net",
"bitdefender.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "boozt",
"url": "https://bugcrowd.com/boozt-og",
"wildcards": [
"boozt.com",
"booztlet.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "canva",
"url": "https://bugcrowd.com/canva",
"wildcards": [
"canva.com",
"canva.cn",
"canva-apps.com",
"canva-apps.cn"
],
"out_of_scope_domains": [
"livecast.canva.cn"
],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "ciscomeraki",
"url": "https://bugcrowd.com/ciscomeraki",
"wildcards": [
"meraki.com",
"ikarem.io",
"network-auth.com"
],
"out_of_scope_domains": [
"meraki.cisco.com",
"websitemerakipartners.com",
"websitesmhelp.meraki.com",
"websitecommunity.meraki.com",
"websitedevelopers.meraki.com",
"community-staging.meraki.com"
],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "expressvpn",
"url": "https://bugcrowd.com/expressvpn",
"wildcards": [
"expressvpn.com",
"xvservice.net",
"xvtest.net"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "gojek",
"url": "https://bugcrowd.com/gojek",
"wildcards": [
"gojekapi.com",
"gopayapi.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "indeed",
"url": "https://bugcrowd.com/indeed",
"wildcards": [
"indeed.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "intercom",
"url": "https://bugcrowd.com/intercom",
"wildcards": [
"intercomcdn.com",
"intercomassets.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "lime",
"url": "https://bugcrowd.com/lime",
"wildcards": [
"lime.bike",
"limeinternal.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "netflix",
"url": "https://bugcrowd.com/netflix",
"wildcards": [
"prod.ftl.netflix.com",
"prod.cloud.netflix.com",
"prod.dradis.netflix.com",
"nflxvideo.net",
"nflxext.com",
"nflximg.net",
"nflxso.net"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "opsgenie",
"url": "https://bugcrowd.com/opsgenie",
"wildcards": [
"opsgeni.us"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "pinterest",
"url": "https://bugcrowd.com/pinterest",
"wildcards": [
"pinterest.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "skyscanner",
"url": "https://bugcrowd.com/skyscanner",
"wildcards": [
"skyscanner.net"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "soundcloud",
"url": "https://bugcrowd.com/soundcloud",
"wildcards": [
"soundcloud.com",
"repostnetwork.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "square",
"url": "https://bugcrowd.com/square",
"wildcards": [
"cash.me"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "statuspage",
"url": "https://bugcrowd.com/statuspage",
"wildcards": [
"statuspage.io"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "verzionmedia",
"url": "https://hackerone.com/verizonmedia",
"wildcards": [
"bid.yahoo.com",
"tw.news.yahoo.com",
"tw.mall.yahoo.com",
"flurry.com",
"news.yahoo.com",
"gemini.yahoo.com",
"admanager.yahoo.com",
"admanagerplus.yahoo.com",
"makers.com",
"buildseries.com",
"builtbygirls.com",
"huffpost.com",
"huffpost.net",
"huffingtonpost.co.uk",
"huffingtonpost.ca",
"huffingtonpost.es",
"huffingtonpost.fr",
"huffingtonpost.gr",
"huffingtonpost.in",
"huffingtonpost.it",
"huffingtonpost.jp",
"huffingtonpost.kr",
"huffingtonpost.com.au",
"huffingtonpost.co.za",
"huffpostbrasil.com",
"huffpostmaghreb.com",
"huffpost.co.uk",
"huffpost.ca",
"huffpost.es",
"huffpost.fr",
"huffpost.gr",
"huffpost.in",
"huffpost.it",
"huffpost.jp",
"huffpost.kr",
"huffpost.com.au",
"huffpost.co.za",
"huffingtonpost.de",
"huffingtonpost.com.mx",
"huffpost.de",
"huffpost.com.mx",
"huffpostarabi.com",
"huffpo.net",
"calendar.yahoo.com",
"caldav.calendar.yahoo.com",
"ryot.org",
"engadget.com",
"techcrunch.com",
"mail.aol.com",
"forums.rivals.com",
"protrade.com",
"verizondigitalmedia.com",
"aolpublishers.com",
"isp.netscape.com",
"lite.aol.com",
"compuserve.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "vimeo",
"url": "https://hackerone.com/vimeo",
"wildcards": [
"cloud.vimeo.com",
"vimeo.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "twitter",
"url": "https://hackerone.com/twitter",
"wildcards": [
"twitter.com",
"vine.co",
"periscope.tv",
"pscp.tv",
"twimg.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "mailru",
"url": "https://hackerone.com/mailru",
"wildcards": [
"mail.ru",
"my.com",
"my.games"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "coinbase",
"url": "https://hackerone.com/coinbase",
"wildcards": [
"coinbase.com",
"cbhq.net"
],
"out_of_scope_domains": [],
"ipv4_subnets": [
"54.175.255.192/27"
],
"ipv6_subnets": []
},
{
"name": "qivi",
"url": "https://hackerone.com/qiwi",
"wildcards": [
"qiwi.ru",
"qiwi.com",
"qiwi.me",
"rapida.ru",
"contact-sys.com",
"flocktory.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "blockchain",
"url": "https://hackerone.com/blockchain",
"wildcards": [
"blockchain.com",
"europe-west1.dev.blockchain.info",
"dev.blockchain.info"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "algolia",
"url": "https://hackerone.com/algolia",
"wildcards": [
"algolia.net",
"algolianet.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "airbnb",
"url": "https://hackerone.com/airbnb",
"wildcards": [
"airbnb.com",
"atairbnb.com",
"withairbnb.com",
"airbnbcitizen.com",
"airbnb.org",
"byairbnb.com",
"muscache.com",
"airbnb-aws.com",
"luxuryretreats.com",
"airbnbopen.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "vkcom",
"url": "https://hackerone.com/vkcom",
"wildcards": [
"vk.com",
"vk.me",
"vk.cc",
"vk.link",
"vkpay.io"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "shopify",
"url": "https://hackerone.com/shopify",
"wildcards": [
"shopifykloud.com",
"shopify.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "logitech",
"url": "https://hackerone.com/logitech",
"wildcards": [
"streamlabs.com",
"challonge.com",
"playmaster.gg"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "grab",
"url": "https://hackerone.com/grab",
"wildcards": [
"myteksi.com",
"myteksi.net",
"grab.com",
"grabpay.com",
"grabtaxi.com",
"grab.co"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "okru",
"url": "https://hackerone.com/ok",
"wildcards": [
"ok.ru"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "paypal",
"url": "https://hackerone.com/paypal",
"wildcards": [
"xoom.com",
"paypal.com",
"braintreegateway.com",
"paydiant.com",
"venmo.com",
"braintreepayments.com",
"braintree-api.com",
"braintree.tools",
"paypalcorp.com",
"paypal.cn"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "spotify",
"url": "https://hackerone.com/spotify",
"wildcards": [
"spotify.com",
"spotify.net",
"spotifyforbrands.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "rockstargames",
"url": "https://hackerone.com/rockstargames",
"wildcards": [
"rockstargames.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "zomato",
"url": "https://hackerone.com/zomato",
"wildcards": [
"zomato.com",
"zdev.net",
"zomans.com",
"hyperpure.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "quora",
"url": "https://hackerone.com/quora",
"wildcards": [
"quora.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "goldmansachs",
"url": "https://hackerone.com/goldmansachs",
"wildcards": [
"goldmansachs.com",
"gs.com",
"goldman.com",
"marcus.com",
"honestdollar.com",
"marcus.co.uk",
"gsam.com",
"gsselect.com",
"gs-mosaic.qa.gs.com",
"gs-mosaic.gs.com",
"qaglobal-liquidity.gs.com",
"global-liquidity.gs.com",
"ayco.com",
"gspublishing.com",
"genesiscapital.com",
"gs.de",
"gsmarkets.de",
"gsmarkets.nl",
"gsmarkets.at",
"gsmarkets.be"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "livestream",
"url": "https://hackerone.com/livestream",
"wildcards": [
"livestream.com",
"new.livestream.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "deliveroo",
"url": "https://hackerone.com/deliveroo",
"wildcards": [
"deliveroo-data.net",
"deliveroo-data.io",
"deliveroo-data-test.io",
"deliveroo-streams.net",
"deliveroo.co.uk",
"deliveroo-streams.net"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "line",
"url": "https://hackerone.com/line",
"wildcards": [
"line.me",
"line-apps.com",
"line.naver.jp"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "kindredgroup",
"url": "https://hackerone.com/kindred_group",
"wildcards": [
"unibet.com",
"storspiller.com",
"bingo.com",
"mariacasino.com",
"kolikkopelit.com",
"casinohuone.com",
"igame.com",
"vladcazino.ro",
"ottokasino.com",
"kindredext.net"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "quantopian",
"url": "https://hackerone.com/quantopian",
"wildcards": [
"dynoquant.com",
"quantshack.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "semrush",
"url": "https://hackerone.com/semrush",
"wildcards": [
"semrush.com",
"sellerly.com",
"semrush.net",
"berush.com",
"semrushchina.cn",
"seoquake.com",
"hr-semrush.com",
"seoab.io",
"scatec.io"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "xiaomi",
"url": "https://hackerone.com/xiaomi",
"wildcards": [
"mi.com",
"xiaomi.com",
"miui.com",
"xiaomiyoupin.com",
"miwifi.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "lyst",
"url": "https://hackerone.com/lyst",
"wildcards": [
"lyst.com",
"lystit.com",
"lyst.co"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "newrelic",
"url": "https://hackerone.com/newrelic",
"wildcards": [
"newrelic.com",
"infrastructure.newrelic.com",
"infrastructure-data.newrelic.com",
"blog.newrelic.com",
"eu.newrelic.com",
"nr-data.net",
"nr-ops.net"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "nordvpn",
"url": "https://hackerone.com/nordvpn",
"wildcards": [
"nordvpn.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "vanilla",
"url": "https://hackerone.com/vanilla",
"wildcards": [
"vanillaforums.com",
"vanillacommunities.com",
"vanillastaging.com",
"vanilladevelopment.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "roblox",
"url": "https://hackerone.com/roblox",
"wildcards": [
"roblox.com",
"rbx.com",
"ra.roblox.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "tts",
"url": "https://hackerone.com/tts",
"wildcards": [
"login.gov",
"code.gov",
"search.gov"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "grammarly",
"url": "https://hackerone.com/grammarly",
"wildcards": [
"grammarly.io",
"grammarly.net"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "lifeomic",
"url": "https://hackerone.com/lifeomic",
"wildcards": [
"infra.lifeomic.com",
"dev.lifeomic.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "bitmex",
"url": "https://hackerone.com/bitmex",
"wildcards": [
"bitmex.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "paddypowerbetfair",
"url": "https://hackerone.com/paddypowerbetfair",
"wildcards": [
"betfair.com",
"paddypower.com",
"betfair.es",
"betfair.it",
"betfair.ro",
"betfair.se",
"paddypower.it"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "pingidentity",
"url": "https://hackerone.com/pingidentity",
"wildcards": [
"pingidentity.io",
"pingidentity.net"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "liberapay",
"url": "https://hackerone.com/liberapay",
"wildcards": [
"liberapay.com",
"liberapay.org"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "chaturbate",
"url": "https://hackerone.com/chaturbate",
"wildcards": [
"highwebmedia.com",
"securegatewayaccess.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "flickr",
"url": "https://hackerone.com/flickr",
"wildcards": [
"flickr.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "fanduel",
"url": "https://hackerone.com/fanduel",
"wildcards": [
"fanduel.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "innogames",
"url": "https://hackerone.com/innogames",
"wildcards": [
"igpayment.com",
"innogames.de",
"innogames.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "allegro",
"url": "https://hackerone.com/allegro",
"wildcards": [
"allegro.pl.allegrosandbox.pl"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "sophos",
"url": "https://bugcrowd.com/sophos",
"wildcards": [
"sophos.com",
"hitmanpro.com",
"reflexion.net",
"astaro.com",
"cyberoam.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "tesla",
"url": "https://bugcrowd.com/tesla",
"wildcards": [
"tesla.com",
"tesla.cn",
"teslamotors.com",
"tesla.services",
"teslainsuranceservices.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "binary",
"url": "https://hackerone.com/binary",
"wildcards": [
"binary.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "uber",
"url": "https://hackerone.com/uber",
"wildcards": [
"uber.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "google",
"url": "https://www.google.com/about/appsecurity/reward-program/",
"wildcards": [
"google.com",
"youtube.com",
"blogger.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "facebook",
"url": "https://www.facebook.com/whitehat",
"wildcards": [
"facebook.com",
"fb.com",
"fb.me",
"messenger.com",
"thefacebook.com",
"accountkit.com",
"instagram.com",
"freebasics.com",
"internet.org",
"oculus.com",
"whatsapp.com",
"whatsapp.net"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "cloudflare",
"url": "https://hackerone.com/cloudflare",
"wildcards": [
"cloudflare.com",
"cloudflareworkers.com",
"cloudflareaccess.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "ubiquity",
"url": "https://hackerone.com/ui",
"wildcards": [
"ubnt.com",
"ui.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "takeaway",
"url": "https://bugcrowd.com/takeaway",
"wildcards": [
"lieferando.de",
"yourdelivery.de",
"takeaway.com",
"thuisbezorgd.nl",
"lieferando.at",
"scoober.com",
"citymeal.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "seek",
"url": "https://bugcrowd.com/seek",
"wildcards": [
"seek.com.au",
"seek.com",
"skinfra.xyz",
"myseek.xyz",
"outfra.xyz",
"sol-data.com",
"jobapi.net",
"jobapi.io",
"certsy.com",
"certsynonprod.com",
"aips-internal.com",
"aips-services.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "alibaba",
"url": "https://hackerone.com/alibaba",
"wildcards": [
"lazada.com",
"lazada.sg",
"lazada.vn",
"lazada.com.my",
"lazada.com.ph",
"lazada.co.id",
"lazada.co.th",
".cainiao.com",
"alibaba.com ",
"aliexpress.com",
"taobao.com",
"tmall.com",
"aliyun.com",
"alibabacloud.com",
"1688.com",
"dingtalk.com",
"alibaba-inc.com",
"aliyun-inc.com",
"alimama.com",
"daraz.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "oppo",
"url": "https://security.oppo.com/en/noticeDetail?notice_only_key=20201578399519447",
"wildcards": [
"oppo.com",
"oppo.cn",
"myoppo.com",
"opposhop.cn",
"coloros.com",
"nearme.com.cn",
"oppomobile.com",
"oppofind.com",
"myoas.com",
"heytap.com",
"heytapmobi.com",
"realme.com",
"realme.net"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "bentley",
"url": "https://www.bentley.com/responsible_disclosure.pdf",
"wildcards": [
"bentley.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "fair",
"url": "https://www.fair.com/bug-bounty",
"wildcards": [
"fair.com",
"fair.engineering"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "creditkarma",
"url": "https://hackerone.com/creditkarma",
"wildcards": [
"creditkarma.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "intigriti",
"url": "https://app.intigriti.com/programs/intigriti/intigriti/detail",
"wildcards": [
"intigriti.com",
"intigriti.io",
"intigriti.me"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "playstation",
"url": "https://hackerone.com/playstation",
"wildcards": [
"playstation.net",
"sonyentertainmentnetwork.com",
"playstation.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "hyatt",
"url": "https://hackerone.com/hyatt",
"wildcards": [],
"out_of_scope_domains": [],
"ipv4_subnets": [
"140.95.0.0/16",
"213.139.133.32/28"
],
"ipv6_subnets": []
},
{
"name": "clario",
"url": "https://hackerone.com/clario",
"wildcards": [
"kromtech.com",
"mackeeper.com"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
},
{
"name": "napoleongames",
"url": "https://app.intigriti.com/researcher/programs/hucklu/napoleongames/detail",
"wildcards": [
"napoleoncasino.be",
"napoleondice.be",
"napoleongames.be",
"napoleonsports.be"
],
"out_of_scope_domains": [],
"ipv4_subnets": [],
"ipv6_subnets": []
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment