Created
March 11, 2021 14:50
-
-
Save 0xtavi/4bf4d4895844f5db7f385eb42077caea to your computer and use it in GitHub Desktop.
Bug Bounty Paying Programs Wildcard Domains
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "programs": [ | |
| { | |
| "name": "spacex", | |
| "url": "https://bugcrowd.com/spacex", | |
| "wildcards": [ | |
| "starlink.com", | |
| "starlinkisp.net" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [ | |
| "192.31.243.0/26", | |
| "192.31.243.64/28", | |
| "192.31.243.96/27" | |
| ], | |
| "ipv6_subnets": [ | |
| "2620:134:b000::/40" | |
| ] | |
| }, | |
| { | |
| "name": "exodus", | |
| "url": "https://hackerone.com/exodus", | |
| "wildcards": [ | |
| "exodus.io", | |
| "a.exodus.io", | |
| "exodus.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "tiktok", | |
| "url": "https://hackerone.com/tiktok", | |
| "wildcards": [ | |
| "tiktok.com", | |
| "tiktokv.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "tweakers", | |
| "url": "https://app.intigriti.com/programs/dpgm/tweakers/detail", | |
| "wildcards": [ | |
| "tweakblogs.net", | |
| "tweakers.net" | |
| ], | |
| "out_of_scope_domains": [ | |
| "elect.tweakers.net" | |
| ], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "better", | |
| "url": "https://bugcrowd.com/better", | |
| "wildcards": [ | |
| "better.com" | |
| ], | |
| "out_of_scope_domains": [ | |
| "internalcareers.better.com" | |
| ], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "binance", | |
| "url": "https://bugcrowd.com/binance", | |
| "wildcards": [ | |
| "binance.com", | |
| "binance.org", | |
| "binance.us", | |
| "binance.sg", | |
| "dex.binance.org" | |
| ], | |
| "out_of_scope_domains": [ | |
| "support.binance.com", | |
| "support.binance.org", | |
| "support.binance.us", | |
| "support.binance.sg" | |
| ], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "bitdefender", | |
| "url": "https://bugcrowd.com/bitdefender", | |
| "wildcards": [ | |
| "bitdefender.net", | |
| "bitdefender.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "boozt", | |
| "url": "https://bugcrowd.com/boozt-og", | |
| "wildcards": [ | |
| "boozt.com", | |
| "booztlet.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "canva", | |
| "url": "https://bugcrowd.com/canva", | |
| "wildcards": [ | |
| "canva.com", | |
| "canva.cn", | |
| "canva-apps.com", | |
| "canva-apps.cn" | |
| ], | |
| "out_of_scope_domains": [ | |
| "livecast.canva.cn" | |
| ], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "ciscomeraki", | |
| "url": "https://bugcrowd.com/ciscomeraki", | |
| "wildcards": [ | |
| "meraki.com", | |
| "ikarem.io", | |
| "network-auth.com" | |
| ], | |
| "out_of_scope_domains": [ | |
| "meraki.cisco.com", | |
| "websitemerakipartners.com", | |
| "websitesmhelp.meraki.com", | |
| "websitecommunity.meraki.com", | |
| "websitedevelopers.meraki.com", | |
| "community-staging.meraki.com" | |
| ], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "expressvpn", | |
| "url": "https://bugcrowd.com/expressvpn", | |
| "wildcards": [ | |
| "expressvpn.com", | |
| "xvservice.net", | |
| "xvtest.net" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "gojek", | |
| "url": "https://bugcrowd.com/gojek", | |
| "wildcards": [ | |
| "gojekapi.com", | |
| "gopayapi.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "indeed", | |
| "url": "https://bugcrowd.com/indeed", | |
| "wildcards": [ | |
| "indeed.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "intercom", | |
| "url": "https://bugcrowd.com/intercom", | |
| "wildcards": [ | |
| "intercomcdn.com", | |
| "intercomassets.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "lime", | |
| "url": "https://bugcrowd.com/lime", | |
| "wildcards": [ | |
| "lime.bike", | |
| "limeinternal.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "netflix", | |
| "url": "https://bugcrowd.com/netflix", | |
| "wildcards": [ | |
| "prod.ftl.netflix.com", | |
| "prod.cloud.netflix.com", | |
| "prod.dradis.netflix.com", | |
| "nflxvideo.net", | |
| "nflxext.com", | |
| "nflximg.net", | |
| "nflxso.net" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "opsgenie", | |
| "url": "https://bugcrowd.com/opsgenie", | |
| "wildcards": [ | |
| "opsgeni.us" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "pinterest", | |
| "url": "https://bugcrowd.com/pinterest", | |
| "wildcards": [ | |
| "pinterest.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "skyscanner", | |
| "url": "https://bugcrowd.com/skyscanner", | |
| "wildcards": [ | |
| "skyscanner.net" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "soundcloud", | |
| "url": "https://bugcrowd.com/soundcloud", | |
| "wildcards": [ | |
| "soundcloud.com", | |
| "repostnetwork.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "square", | |
| "url": "https://bugcrowd.com/square", | |
| "wildcards": [ | |
| "cash.me" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "statuspage", | |
| "url": "https://bugcrowd.com/statuspage", | |
| "wildcards": [ | |
| "statuspage.io" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "verzionmedia", | |
| "url": "https://hackerone.com/verizonmedia", | |
| "wildcards": [ | |
| "bid.yahoo.com", | |
| "tw.news.yahoo.com", | |
| "tw.mall.yahoo.com", | |
| "flurry.com", | |
| "news.yahoo.com", | |
| "gemini.yahoo.com", | |
| "admanager.yahoo.com", | |
| "admanagerplus.yahoo.com", | |
| "makers.com", | |
| "buildseries.com", | |
| "builtbygirls.com", | |
| "huffpost.com", | |
| "huffpost.net", | |
| "huffingtonpost.co.uk", | |
| "huffingtonpost.ca", | |
| "huffingtonpost.es", | |
| "huffingtonpost.fr", | |
| "huffingtonpost.gr", | |
| "huffingtonpost.in", | |
| "huffingtonpost.it", | |
| "huffingtonpost.jp", | |
| "huffingtonpost.kr", | |
| "huffingtonpost.com.au", | |
| "huffingtonpost.co.za", | |
| "huffpostbrasil.com", | |
| "huffpostmaghreb.com", | |
| "huffpost.co.uk", | |
| "huffpost.ca", | |
| "huffpost.es", | |
| "huffpost.fr", | |
| "huffpost.gr", | |
| "huffpost.in", | |
| "huffpost.it", | |
| "huffpost.jp", | |
| "huffpost.kr", | |
| "huffpost.com.au", | |
| "huffpost.co.za", | |
| "huffingtonpost.de", | |
| "huffingtonpost.com.mx", | |
| "huffpost.de", | |
| "huffpost.com.mx", | |
| "huffpostarabi.com", | |
| "huffpo.net", | |
| "calendar.yahoo.com", | |
| "caldav.calendar.yahoo.com", | |
| "ryot.org", | |
| "engadget.com", | |
| "techcrunch.com", | |
| "mail.aol.com", | |
| "forums.rivals.com", | |
| "protrade.com", | |
| "verizondigitalmedia.com", | |
| "aolpublishers.com", | |
| "isp.netscape.com", | |
| "lite.aol.com", | |
| "compuserve.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "vimeo", | |
| "url": "https://hackerone.com/vimeo", | |
| "wildcards": [ | |
| "cloud.vimeo.com", | |
| "vimeo.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "twitter", | |
| "url": "https://hackerone.com/twitter", | |
| "wildcards": [ | |
| "twitter.com", | |
| "vine.co", | |
| "periscope.tv", | |
| "pscp.tv", | |
| "twimg.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "mailru", | |
| "url": "https://hackerone.com/mailru", | |
| "wildcards": [ | |
| "mail.ru", | |
| "my.com", | |
| "my.games" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "coinbase", | |
| "url": "https://hackerone.com/coinbase", | |
| "wildcards": [ | |
| "coinbase.com", | |
| "cbhq.net" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [ | |
| "54.175.255.192/27" | |
| ], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "qivi", | |
| "url": "https://hackerone.com/qiwi", | |
| "wildcards": [ | |
| "qiwi.ru", | |
| "qiwi.com", | |
| "qiwi.me", | |
| "rapida.ru", | |
| "contact-sys.com", | |
| "flocktory.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "blockchain", | |
| "url": "https://hackerone.com/blockchain", | |
| "wildcards": [ | |
| "blockchain.com", | |
| "europe-west1.dev.blockchain.info", | |
| "dev.blockchain.info" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "algolia", | |
| "url": "https://hackerone.com/algolia", | |
| "wildcards": [ | |
| "algolia.net", | |
| "algolianet.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "airbnb", | |
| "url": "https://hackerone.com/airbnb", | |
| "wildcards": [ | |
| "airbnb.com", | |
| "atairbnb.com", | |
| "withairbnb.com", | |
| "airbnbcitizen.com", | |
| "airbnb.org", | |
| "byairbnb.com", | |
| "muscache.com", | |
| "airbnb-aws.com", | |
| "luxuryretreats.com", | |
| "airbnbopen.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "vkcom", | |
| "url": "https://hackerone.com/vkcom", | |
| "wildcards": [ | |
| "vk.com", | |
| "vk.me", | |
| "vk.cc", | |
| "vk.link", | |
| "vkpay.io" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "shopify", | |
| "url": "https://hackerone.com/shopify", | |
| "wildcards": [ | |
| "shopifykloud.com", | |
| "shopify.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "logitech", | |
| "url": "https://hackerone.com/logitech", | |
| "wildcards": [ | |
| "streamlabs.com", | |
| "challonge.com", | |
| "playmaster.gg" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "grab", | |
| "url": "https://hackerone.com/grab", | |
| "wildcards": [ | |
| "myteksi.com", | |
| "myteksi.net", | |
| "grab.com", | |
| "grabpay.com", | |
| "grabtaxi.com", | |
| "grab.co" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "okru", | |
| "url": "https://hackerone.com/ok", | |
| "wildcards": [ | |
| "ok.ru" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "paypal", | |
| "url": "https://hackerone.com/paypal", | |
| "wildcards": [ | |
| "xoom.com", | |
| "paypal.com", | |
| "braintreegateway.com", | |
| "paydiant.com", | |
| "venmo.com", | |
| "braintreepayments.com", | |
| "braintree-api.com", | |
| "braintree.tools", | |
| "paypalcorp.com", | |
| "paypal.cn" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "spotify", | |
| "url": "https://hackerone.com/spotify", | |
| "wildcards": [ | |
| "spotify.com", | |
| "spotify.net", | |
| "spotifyforbrands.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "rockstargames", | |
| "url": "https://hackerone.com/rockstargames", | |
| "wildcards": [ | |
| "rockstargames.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "zomato", | |
| "url": "https://hackerone.com/zomato", | |
| "wildcards": [ | |
| "zomato.com", | |
| "zdev.net", | |
| "zomans.com", | |
| "hyperpure.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "quora", | |
| "url": "https://hackerone.com/quora", | |
| "wildcards": [ | |
| "quora.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "goldmansachs", | |
| "url": "https://hackerone.com/goldmansachs", | |
| "wildcards": [ | |
| "goldmansachs.com", | |
| "gs.com", | |
| "goldman.com", | |
| "marcus.com", | |
| "honestdollar.com", | |
| "marcus.co.uk", | |
| "gsam.com", | |
| "gsselect.com", | |
| "gs-mosaic.qa.gs.com", | |
| "gs-mosaic.gs.com", | |
| "qaglobal-liquidity.gs.com", | |
| "global-liquidity.gs.com", | |
| "ayco.com", | |
| "gspublishing.com", | |
| "genesiscapital.com", | |
| "gs.de", | |
| "gsmarkets.de", | |
| "gsmarkets.nl", | |
| "gsmarkets.at", | |
| "gsmarkets.be" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "livestream", | |
| "url": "https://hackerone.com/livestream", | |
| "wildcards": [ | |
| "livestream.com", | |
| "new.livestream.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "deliveroo", | |
| "url": "https://hackerone.com/deliveroo", | |
| "wildcards": [ | |
| "deliveroo-data.net", | |
| "deliveroo-data.io", | |
| "deliveroo-data-test.io", | |
| "deliveroo-streams.net", | |
| "deliveroo.co.uk", | |
| "deliveroo-streams.net" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "line", | |
| "url": "https://hackerone.com/line", | |
| "wildcards": [ | |
| "line.me", | |
| "line-apps.com", | |
| "line.naver.jp" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "kindredgroup", | |
| "url": "https://hackerone.com/kindred_group", | |
| "wildcards": [ | |
| "unibet.com", | |
| "storspiller.com", | |
| "bingo.com", | |
| "mariacasino.com", | |
| "kolikkopelit.com", | |
| "casinohuone.com", | |
| "igame.com", | |
| "vladcazino.ro", | |
| "ottokasino.com", | |
| "kindredext.net" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "quantopian", | |
| "url": "https://hackerone.com/quantopian", | |
| "wildcards": [ | |
| "dynoquant.com", | |
| "quantshack.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "semrush", | |
| "url": "https://hackerone.com/semrush", | |
| "wildcards": [ | |
| "semrush.com", | |
| "sellerly.com", | |
| "semrush.net", | |
| "berush.com", | |
| "semrushchina.cn", | |
| "seoquake.com", | |
| "hr-semrush.com", | |
| "seoab.io", | |
| "scatec.io" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "xiaomi", | |
| "url": "https://hackerone.com/xiaomi", | |
| "wildcards": [ | |
| "mi.com", | |
| "xiaomi.com", | |
| "miui.com", | |
| "xiaomiyoupin.com", | |
| "miwifi.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "lyst", | |
| "url": "https://hackerone.com/lyst", | |
| "wildcards": [ | |
| "lyst.com", | |
| "lystit.com", | |
| "lyst.co" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "newrelic", | |
| "url": "https://hackerone.com/newrelic", | |
| "wildcards": [ | |
| "newrelic.com", | |
| "infrastructure.newrelic.com", | |
| "infrastructure-data.newrelic.com", | |
| "blog.newrelic.com", | |
| "eu.newrelic.com", | |
| "nr-data.net", | |
| "nr-ops.net" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "nordvpn", | |
| "url": "https://hackerone.com/nordvpn", | |
| "wildcards": [ | |
| "nordvpn.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "vanilla", | |
| "url": "https://hackerone.com/vanilla", | |
| "wildcards": [ | |
| "vanillaforums.com", | |
| "vanillacommunities.com", | |
| "vanillastaging.com", | |
| "vanilladevelopment.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "roblox", | |
| "url": "https://hackerone.com/roblox", | |
| "wildcards": [ | |
| "roblox.com", | |
| "rbx.com", | |
| "ra.roblox.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "tts", | |
| "url": "https://hackerone.com/tts", | |
| "wildcards": [ | |
| "login.gov", | |
| "code.gov", | |
| "search.gov" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "grammarly", | |
| "url": "https://hackerone.com/grammarly", | |
| "wildcards": [ | |
| "grammarly.io", | |
| "grammarly.net" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "lifeomic", | |
| "url": "https://hackerone.com/lifeomic", | |
| "wildcards": [ | |
| "infra.lifeomic.com", | |
| "dev.lifeomic.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "bitmex", | |
| "url": "https://hackerone.com/bitmex", | |
| "wildcards": [ | |
| "bitmex.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "paddypowerbetfair", | |
| "url": "https://hackerone.com/paddypowerbetfair", | |
| "wildcards": [ | |
| "betfair.com", | |
| "paddypower.com", | |
| "betfair.es", | |
| "betfair.it", | |
| "betfair.ro", | |
| "betfair.se", | |
| "paddypower.it" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "pingidentity", | |
| "url": "https://hackerone.com/pingidentity", | |
| "wildcards": [ | |
| "pingidentity.io", | |
| "pingidentity.net" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "liberapay", | |
| "url": "https://hackerone.com/liberapay", | |
| "wildcards": [ | |
| "liberapay.com", | |
| "liberapay.org" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "chaturbate", | |
| "url": "https://hackerone.com/chaturbate", | |
| "wildcards": [ | |
| "highwebmedia.com", | |
| "securegatewayaccess.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "flickr", | |
| "url": "https://hackerone.com/flickr", | |
| "wildcards": [ | |
| "flickr.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "fanduel", | |
| "url": "https://hackerone.com/fanduel", | |
| "wildcards": [ | |
| "fanduel.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "innogames", | |
| "url": "https://hackerone.com/innogames", | |
| "wildcards": [ | |
| "igpayment.com", | |
| "innogames.de", | |
| "innogames.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "allegro", | |
| "url": "https://hackerone.com/allegro", | |
| "wildcards": [ | |
| "allegro.pl.allegrosandbox.pl" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "sophos", | |
| "url": "https://bugcrowd.com/sophos", | |
| "wildcards": [ | |
| "sophos.com", | |
| "hitmanpro.com", | |
| "reflexion.net", | |
| "astaro.com", | |
| "cyberoam.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "tesla", | |
| "url": "https://bugcrowd.com/tesla", | |
| "wildcards": [ | |
| "tesla.com", | |
| "tesla.cn", | |
| "teslamotors.com", | |
| "tesla.services", | |
| "teslainsuranceservices.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "binary", | |
| "url": "https://hackerone.com/binary", | |
| "wildcards": [ | |
| "binary.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "uber", | |
| "url": "https://hackerone.com/uber", | |
| "wildcards": [ | |
| "uber.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "google", | |
| "url": "https://www.google.com/about/appsecurity/reward-program/", | |
| "wildcards": [ | |
| "google.com", | |
| "youtube.com", | |
| "blogger.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "facebook", | |
| "url": "https://www.facebook.com/whitehat", | |
| "wildcards": [ | |
| "facebook.com", | |
| "fb.com", | |
| "fb.me", | |
| "messenger.com", | |
| "thefacebook.com", | |
| "accountkit.com", | |
| "instagram.com", | |
| "freebasics.com", | |
| "internet.org", | |
| "oculus.com", | |
| "whatsapp.com", | |
| "whatsapp.net" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "cloudflare", | |
| "url": "https://hackerone.com/cloudflare", | |
| "wildcards": [ | |
| "cloudflare.com", | |
| "cloudflareworkers.com", | |
| "cloudflareaccess.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "ubiquity", | |
| "url": "https://hackerone.com/ui", | |
| "wildcards": [ | |
| "ubnt.com", | |
| "ui.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "takeaway", | |
| "url": "https://bugcrowd.com/takeaway", | |
| "wildcards": [ | |
| "lieferando.de", | |
| "yourdelivery.de", | |
| "takeaway.com", | |
| "thuisbezorgd.nl", | |
| "lieferando.at", | |
| "scoober.com", | |
| "citymeal.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "seek", | |
| "url": "https://bugcrowd.com/seek", | |
| "wildcards": [ | |
| "seek.com.au", | |
| "seek.com", | |
| "skinfra.xyz", | |
| "myseek.xyz", | |
| "outfra.xyz", | |
| "sol-data.com", | |
| "jobapi.net", | |
| "jobapi.io", | |
| "certsy.com", | |
| "certsynonprod.com", | |
| "aips-internal.com", | |
| "aips-services.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "alibaba", | |
| "url": "https://hackerone.com/alibaba", | |
| "wildcards": [ | |
| "lazada.com", | |
| "lazada.sg", | |
| "lazada.vn", | |
| "lazada.com.my", | |
| "lazada.com.ph", | |
| "lazada.co.id", | |
| "lazada.co.th", | |
| ".cainiao.com", | |
| "alibaba.com ", | |
| "aliexpress.com", | |
| "taobao.com", | |
| "tmall.com", | |
| "aliyun.com", | |
| "alibabacloud.com", | |
| "1688.com", | |
| "dingtalk.com", | |
| "alibaba-inc.com", | |
| "aliyun-inc.com", | |
| "alimama.com", | |
| "daraz.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "oppo", | |
| "url": "https://security.oppo.com/en/noticeDetail?notice_only_key=20201578399519447", | |
| "wildcards": [ | |
| "oppo.com", | |
| "oppo.cn", | |
| "myoppo.com", | |
| "opposhop.cn", | |
| "coloros.com", | |
| "nearme.com.cn", | |
| "oppomobile.com", | |
| "oppofind.com", | |
| "myoas.com", | |
| "heytap.com", | |
| "heytapmobi.com", | |
| "realme.com", | |
| "realme.net" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "bentley", | |
| "url": "https://www.bentley.com/responsible_disclosure.pdf", | |
| "wildcards": [ | |
| "bentley.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "fair", | |
| "url": "https://www.fair.com/bug-bounty", | |
| "wildcards": [ | |
| "fair.com", | |
| "fair.engineering" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "creditkarma", | |
| "url": "https://hackerone.com/creditkarma", | |
| "wildcards": [ | |
| "creditkarma.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "intigriti", | |
| "url": "https://app.intigriti.com/programs/intigriti/intigriti/detail", | |
| "wildcards": [ | |
| "intigriti.com", | |
| "intigriti.io", | |
| "intigriti.me" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "playstation", | |
| "url": "https://hackerone.com/playstation", | |
| "wildcards": [ | |
| "playstation.net", | |
| "sonyentertainmentnetwork.com", | |
| "playstation.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "hyatt", | |
| "url": "https://hackerone.com/hyatt", | |
| "wildcards": [], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [ | |
| "140.95.0.0/16", | |
| "213.139.133.32/28" | |
| ], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "clario", | |
| "url": "https://hackerone.com/clario", | |
| "wildcards": [ | |
| "kromtech.com", | |
| "mackeeper.com" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| }, | |
| { | |
| "name": "napoleongames", | |
| "url": "https://app.intigriti.com/researcher/programs/hucklu/napoleongames/detail", | |
| "wildcards": [ | |
| "napoleoncasino.be", | |
| "napoleondice.be", | |
| "napoleongames.be", | |
| "napoleonsports.be" | |
| ], | |
| "out_of_scope_domains": [], | |
| "ipv4_subnets": [], | |
| "ipv6_subnets": [] | |
| } | |
| ] | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Really useful stuff mate, thanks !