├── README.md ├── LICENSE └── chaos-bugbounty-list.json /README.md: -------------------------------------------------------------------------------- 1 | This is the source for programs available on [chaos.projectdiscovery.io](http://chaos.projectdiscovery.io/). Please send pull-request of public bug bounty programs that you want to include in our public list with recon data. 2 | 3 | We are currently accepting in JSON format, an example is below: 4 | 5 | ```json 6 | { 7 | "name":"HackerOne", 8 | "url":"https://hackerone.com/security", 9 | "bounty":true, 10 | "domains":[ 11 | "hackerone.com", 12 | "hackerone.net", 13 | "hacker101.com", 14 | "hackerone-ext-content.com" 15 | ] 16 | } 17 | ``` 18 | 19 | **Notes:** 20 | 1. Use JSON validators (e.g. https://jsonlint.com) to validate the modfied `chaos-bugbounty-list.json` file when sending pull requests. 21 | 2. Scope file only accept root domain as input the `domains` field, so please do not add subdomains in `domain` field. 22 | 23 | Thanks again for your contribution and keeping the community vibrant. :heart: 24 | 25 | ------- 26 | 27 | If you want to remove any program from the list, please contact us at contact@projectdiscovery.io. 28 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | MIT License 2 | 3 | Copyright (c) 2020 ProjectDiscovery 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /chaos-bugbounty-list.json: -------------------------------------------------------------------------------- 1 | { 2 | "programs":[ 3 | { 4 | "name":"Better", 5 | "url":"https://bugcrowd.com/better", 6 | "bounty":true, 7 | "domains":[ 8 | "better.com" 9 | ] 10 | }, 11 | { 12 | "name":"Binance", 13 | "url":"https://bugcrowd.com/binance", 14 | "bounty":true, 15 | "domains":[ 16 | "binance.com", 17 | "binance.org" 18 | ] 19 | }, 20 | { 21 | "name":"BitDiscovery", 22 | "url":"https://bugcrowd.com/bitdiscovery", 23 | "bounty":true, 24 | "domains":[ 25 | "bitdiscovery.com" 26 | ] 27 | }, 28 | { 29 | "name":"Boozt Fashion", 30 | "url":"https://bugcrowd.com/boozt-og", 31 | "bounty":true, 32 | "domains":[ 33 | "boozt.com", 34 | "booztlet.com" 35 | ] 36 | }, 37 | { 38 | "name":"Caffeine", 39 | "url":"https://bugcrowd.com/caffeine", 40 | "bounty":true, 41 | "domains":[ 42 | "caffeine.tv" 43 | ] 44 | }, 45 | { 46 | "name":"Cisco Meraki", 47 | "url":"https://bugcrowd.com/ciscomeraki", 48 | "bounty":true, 49 | "domains":[ 50 | "ikarem.io", 51 | "meraki.com", 52 | "network-auth.com" 53 | ] 54 | }, 55 | { 56 | "name":"Dell Technologies", 57 | "url":"https://bugcrowd.com/dell", 58 | "bounty":false, 59 | "domains":[ 60 | "boomi.com", 61 | "dell.com", 62 | "dellemc.com", 63 | "delltechnologies.com", 64 | "emc.com", 65 | "rsa.com" 66 | ] 67 | }, 68 | { 69 | "name":"Deribit", 70 | "url":"https://www.deribit.com/pages/information/bug-bounty-program", 71 | "bounty":true, 72 | "domains":[ 73 | "deribit.com" 74 | ] 75 | }, 76 | { 77 | "name":"Directly", 78 | "url":"https://bugcrowd.com/directly", 79 | "bounty":true, 80 | "domains":[ 81 | "directly.com" 82 | ] 83 | }, 84 | { 85 | "name":"Fitbit", 86 | "url":"https://bugcrowd.com/fitbit", 87 | "bounty":true, 88 | "domains":[ 89 | "fitbit.com" 90 | ] 91 | }, 92 | { 93 | "name":"FoxyCart", 94 | "url":"https://bugcrowd.com/foxycart", 95 | "bounty":true, 96 | "domains":[ 97 | "foxycart.com" 98 | ] 99 | }, 100 | { 101 | "name":"GO-JEK", 102 | "url":"https://bugcrowd.com/gojek", 103 | "bounty":true, 104 | "domains":[ 105 | "gojekapi.com" 106 | ] 107 | }, 108 | { 109 | "name":"Bugcrowd", 110 | "url":"https://bugcrowd.com/hackme", 111 | "bounty":true, 112 | "domains":[ 113 | "bugcrowd.com" 114 | ] 115 | }, 116 | { 117 | "name":"HealthifyMe", 118 | "url":"https://bugcrowd.com/healthifyme", 119 | "bounty":false, 120 | "domains":[ 121 | "healthifyme.com" 122 | ] 123 | }, 124 | { 125 | "name":"HubSpot", 126 | "url":"https://bugcrowd.com/hubspot", 127 | "bounty":false, 128 | "domains":[ 129 | "hs-sites.com", 130 | "hubapi.com", 131 | "hubspot.com", 132 | "hubspot.net" 133 | ] 134 | }, 135 | { 136 | "name":"Indeed", 137 | "url":"https://bugcrowd.com/indeed", 138 | "bounty":true, 139 | "domains":[ 140 | "indeed.com" 141 | ] 142 | }, 143 | { 144 | "name":"Intercom", 145 | "url":"https://bugcrowd.com/intercom", 146 | "bounty":true, 147 | "domains":[ 148 | "intercomassets.com", 149 | "intercomcdn.com" 150 | ] 151 | }, 152 | { 153 | "name":"Lime", 154 | "url":"https://bugcrowd.com/lime", 155 | "bounty":true, 156 | "domains":[ 157 | "lime.bike", 158 | "limeinternal.com" 159 | ] 160 | }, 161 | { 162 | "name":"Naspers", 163 | "url":"https://bugcrowd.com/naspers", 164 | "bounty":false, 165 | "domains":[ 166 | "naspers.co", 167 | "naspers.co.in", 168 | "naspers.com", 169 | "naspers.fr", 170 | "naspers.us", 171 | "naspersventures.com", 172 | "prosus.com" 173 | ] 174 | }, 175 | { 176 | "name":"Opsgenie", 177 | "url":"https://bugcrowd.com/opsgenie", 178 | "bounty":true, 179 | "domains":[ 180 | "opsgeni.us" 181 | ] 182 | }, 183 | { 184 | "name":"Overstock", 185 | "url":"https://bugcrowd.com/overstockvdp", 186 | "bounty":false, 187 | "domains":[ 188 | "handmade.com", 189 | "overstock.com", 190 | "supplieroasis.com" 191 | ] 192 | }, 193 | { 194 | "name":"Simple", 195 | "url":"https://bugcrowd.com/simple", 196 | "bounty":true, 197 | "domains":[ 198 | "simple.com" 199 | ] 200 | }, 201 | { 202 | "name":"Sophos", 203 | "url":"https://bugcrowd.com/sophos", 204 | "bounty":true, 205 | "domains":[ 206 | "astaro.at", 207 | "astaro.ch", 208 | "astaro.com", 209 | "astaro.de", 210 | "astaro.info", 211 | "astaro.net", 212 | "astaro.org", 213 | "cyberoam.com", 214 | "fw-notify.net", 215 | "hitmanpro.com", 216 | "hitmanpro.nl", 217 | "mojave.net", 218 | "myastaro.com", 219 | "reflexion.net", 220 | "sophos.com", 221 | "surfright.nl" 222 | ] 223 | }, 224 | { 225 | "name":"SoundCloud", 226 | "url":"https://bugcrowd.com/soundcloud", 227 | "bounty":true, 228 | "domains":[ 229 | "repostnetwork.com" 230 | ] 231 | }, 232 | { 233 | "name":"StackPath", 234 | "url":"https://bugcrowd.com/stackpath", 235 | "bounty":false, 236 | "domains":[ 237 | "highwinds.com", 238 | "maxcdn.com", 239 | "maxcdn.net", 240 | "serverdensity.com", 241 | "stackpath.com", 242 | "stackpath.dev", 243 | "stackpath.net" 244 | ] 245 | }, 246 | { 247 | "name":"Statuspage", 248 | "url":"https://bugcrowd.com/statuspage", 249 | "bounty":true, 250 | "domains":[ 251 | "statuspage.io" 252 | ] 253 | }, 254 | { 255 | "name":"Telefonica", 256 | "url":"https://bugcrowd.com/telefonicavdp", 257 | "bounty":false, 258 | "domains":[ 259 | "alditalk-kundenbetreuung.de", 260 | "ayyildiz.de", 261 | "base.de", 262 | "blau.de", 263 | "einfachprepaid.de", 264 | "o2.com", 265 | "fonic-mobile.de", 266 | "fonic.de", 267 | "k-classic-mobil.de", 268 | "aetkasmart.de", 269 | "simfinity.de", 270 | "nettokom.de", 271 | "netzclub.net", 272 | "norma-mobil.de", 273 | "o2.de", 274 | "o2business.de", 275 | "o2online.de", 276 | "o2spin.de", 277 | "ortelmobile.de", 278 | "o2service.de", 279 | "blauworld.de", 280 | "turkei-sim.de", 281 | "whatsappsim.de" 282 | ] 283 | }, 284 | { 285 | "name":"Tesla", 286 | "url":"https://bugcrowd.com/tesla", 287 | "bounty":true, 288 | "domains":[ 289 | "tesla.cn", 290 | "tesla.com", 291 | "tesla.services", 292 | "teslamotors.com" 293 | ] 294 | }, 295 | { 296 | "name":"Trello", 297 | "url":"https://bugcrowd.com/trello", 298 | "bounty":true, 299 | "domains":[ 300 | "trello.services", 301 | "trello.com" 302 | ] 303 | }, 304 | { 305 | "name":"Western Union", 306 | "url":"https://bugcrowd.com/westernunion-kudos", 307 | "bounty":true, 308 | "domains":[ 309 | "westernunion.com" 310 | ] 311 | }, 312 | { 313 | "name":"WP Engine", 314 | "url":"https://bugcrowd.com/wpengine", 315 | "bounty":true, 316 | "domains":[ 317 | "studiopress.com", 318 | "wpengine.io", 319 | "wpesvc.net" 320 | ] 321 | }, 322 | { 323 | "name":"Backblaze", 324 | "url":"https://hackerone.com/backblaze", 325 | "bounty":true, 326 | "domains":[ 327 | "backblaze.com", 328 | "backblazeb2.com" 329 | ] 330 | }, 331 | { 332 | "name":"WordPress", 333 | "url":"https://hackerone.com/wordpress", 334 | "bounty":true, 335 | "domains":[ 336 | "buddypress.org", 337 | "wordcamp.org", 338 | "wordpress.net", 339 | "wordpress.org", 340 | "bbpress.org" 341 | ] 342 | }, 343 | { 344 | "name":"Coinbase", 345 | "url":"https://hackerone.com/coinbase", 346 | "bounty":true, 347 | "domains":[ 348 | "cbhq.net", 349 | "coinbase.com" 350 | ] 351 | }, 352 | { 353 | "name":"IRCCloud", 354 | "url":"https://hackerone.com/irccloud", 355 | "bounty":true, 356 | "domains":[ 357 | "irccloud-cdn.com", 358 | "irccloud.com" 359 | ] 360 | }, 361 | { 362 | "name":"Urban Dictionary", 363 | "url":"https://hackerone.com/urbandictionary", 364 | "bounty":true, 365 | "domains":[ 366 | "ud.wtf", 367 | "udimg.com", 368 | "urbandictionary.biz", 369 | "urbandictionary.blog", 370 | "urbandictionary.com", 371 | "urbandictionary.net", 372 | "urbandictionary.org", 373 | "urbandictionary.store", 374 | "urbanup.com" 375 | ] 376 | }, 377 | { 378 | "name":"QIWI", 379 | "url":"https://hackerone.com/qiwi", 380 | "bounty":true, 381 | "domains":[ 382 | "contact-sys.com", 383 | "flocktory.com", 384 | "qiwi.com", 385 | "qiwi.me", 386 | "rapida.ru", 387 | "rocketbank.ru", 388 | "sovest.ru" 389 | ] 390 | }, 391 | { 392 | "name":"Blockchain", 393 | "url":"https://hackerone.com/blockchain", 394 | "bounty":true, 395 | "domains":[ 396 | "blockchain.com", 397 | "blockchain.info" 398 | ] 399 | }, 400 | { 401 | "name":"Algolia", 402 | "url":"https://hackerone.com/algolia", 403 | "bounty":true, 404 | "domains":[ 405 | "algolia.net", 406 | "algolianet.com" 407 | ] 408 | }, 409 | { 410 | "name":"Airtable", 411 | "url":"https://hackerone.com/airtable", 412 | "bounty":true, 413 | "domains":[ 414 | "staging-airtableblocks.com", 415 | "airtable.com" 416 | ] 417 | }, 418 | { 419 | "name":"Airbnb", 420 | "url":"https://hackerone.com/airbnb", 421 | "bounty":true, 422 | "domains":[ 423 | "airbnb-aws.com", 424 | "airbnb.com", 425 | "airbnbcitizen.com", 426 | "atairbnb.com", 427 | "byairbnb.com", 428 | "hoteltonight-test.com", 429 | "luxuryretreats.com", 430 | "muscache.com", 431 | "withairbnb.com" 432 | ] 433 | }, 434 | { 435 | "name":"VHX", 436 | "url":"https://hackerone.com/vhx", 437 | "bounty":true, 438 | "domains":[ 439 | "vhx.tv" 440 | ] 441 | }, 442 | { 443 | "name":"Shopify", 444 | "url":"https://hackerone.com/shopify", 445 | "bounty":true, 446 | "domains":[ 447 | "shopify.com", 448 | "shopifykloud.com" 449 | ] 450 | }, 451 | { 452 | "name":"Grab", 453 | "url":"https://hackerone.com/grab", 454 | "bounty":true, 455 | "domains":[ 456 | "grab.co", 457 | "grab.com", 458 | "grabpay.com", 459 | "grabtaxi.com", 460 | "myteksi.com", 461 | "myteksi.net" 462 | ] 463 | }, 464 | { 465 | "name":"ok.ru", 466 | "url":"https://hackerone.com/ok", 467 | "bounty":true, 468 | "domains":[ 469 | "ok.ru" 470 | ] 471 | }, 472 | { 473 | "name":"GitHub", 474 | "url":"https://hackerone.com/github", 475 | "bounty":true, 476 | "domains":[ 477 | "github.net", 478 | "githubapp.com" 479 | ] 480 | }, 481 | { 482 | "name":"PayPal", 483 | "url":"https://hackerone.com/paypal", 484 | "bounty":true, 485 | "domains":[ 486 | "braintree-api.com", 487 | "braintree.tools", 488 | "braintreegateway.com", 489 | "braintreepayments.com", 490 | "paydiant.com", 491 | "paypal.com", 492 | "venmo.com", 493 | "xoom.com" 494 | ] 495 | }, 496 | { 497 | "name":"Binary", 498 | "url":"https://hackerone.com/binary", 499 | "bounty":true, 500 | "domains":[ 501 | "binary.com" 502 | ] 503 | }, 504 | { 505 | "name":"Quora", 506 | "url":"https://hackerone.com/quora", 507 | "bounty":true, 508 | "domains":[ 509 | "quora.com" 510 | ] 511 | }, 512 | { 513 | "name":"Goldman Sachs", 514 | "url":"https://hackerone.com/goldmansachs", 515 | "bounty":true, 516 | "domains":[ 517 | "ayco.com", 518 | "claritymoney.com", 519 | "goldman.com", 520 | "goldmansachs.com", 521 | "gsam.com", 522 | "gspublishing.com", 523 | "gsselect.com", 524 | "honestdollar.com", 525 | "marcus.co.uk", 526 | "marcus.com", 527 | "gs.com" 528 | ] 529 | }, 530 | { 531 | "name":"DuckDuckGo", 532 | "url":"https://hackerone.com/duckduckgo", 533 | "bounty":false, 534 | "domains":[ 535 | "duckduckgo.com" 536 | ] 537 | }, 538 | { 539 | "name":"Deliveroo", 540 | "url":"https://hackerone.com/deliveroo", 541 | "bounty":true, 542 | "domains":[ 543 | "deliveroo-data-test.io", 544 | "deliveroo-data.io", 545 | "deliveroo-data.net", 546 | "deliveroo-streams.net" 547 | ] 548 | }, 549 | { 550 | "name":"Python Cryptographic Authority", 551 | "url":"https://hackerone.com/pyca", 552 | "bounty":false, 553 | "domains":[ 554 | "cryptography.io", 555 | "pyopenssl.org" 556 | ] 557 | }, 558 | { 559 | "name":"LINE", 560 | "url":"https://hackerone.com/line", 561 | "bounty":true, 562 | "domains":[ 563 | "line-apps.com", 564 | "line.me" 565 | ] 566 | }, 567 | { 568 | "name":"SecNews", 569 | "url":"https://hackerone.com/secnews", 570 | "bounty":false, 571 | "domains":[ 572 | "secnews.gr" 573 | ] 574 | }, 575 | { 576 | "name":"Kindred Group", 577 | "url":"https://hackerone.com/kindred_group", 578 | "bounty":true, 579 | "domains":[ 580 | "bingo.com", 581 | "casinohuone.com", 582 | "igame.com", 583 | "kolikkopelit.com", 584 | "mariacasino.com", 585 | "storspiller.com", 586 | "unibet.com" 587 | ] 588 | }, 589 | { 590 | "name":"DRIVE.NET, Inc.", 591 | "url":"https://hackerone.com/drive_net_inc", 592 | "bounty":false, 593 | "domains":[ 594 | "d-cd.net", 595 | "drive2.ru" 596 | ] 597 | }, 598 | { 599 | "name":"Quantopian", 600 | "url":"https://hackerone.com/quantopian", 601 | "bounty":true, 602 | "domains":[ 603 | "dynoquant.com", 604 | "quantshack.com" 605 | ] 606 | }, 607 | { 608 | "name":"PortSwigger Web Security", 609 | "url":"https://hackerone.com/portswigger", 610 | "bounty":true, 611 | "domains":[ 612 | "web-security-academy.net" 613 | ] 614 | }, 615 | { 616 | "name":"SEMrush", 617 | "url":"https://hackerone.com/semrush", 618 | "bounty":true, 619 | "domains":[ 620 | "berush.com", 621 | "labs-semrush.com", 622 | "semrush.com" 623 | ] 624 | }, 625 | { 626 | "name":"Xiaomi", 627 | "url":"https://hackerone.com/xiaomi", 628 | "bounty":true, 629 | "domains":[ 630 | "mi.com", 631 | "miui.com", 632 | "miwifi.com", 633 | "xiaomi.com", 634 | "xiaomiyoupin.com" 635 | ] 636 | }, 637 | { 638 | "name":"Lyst", 639 | "url":"https://hackerone.com/lyst", 640 | "bounty":true, 641 | "domains":[ 642 | "lyst.co", 643 | "lyst.com", 644 | "lystit.com" 645 | ] 646 | }, 647 | { 648 | "name":"Nutanix", 649 | "url":"https://hackerone.com/nutanix", 650 | "bounty":false, 651 | "domains":[ 652 | "nutanix.com" 653 | ] 654 | }, 655 | { 656 | "name":"New Relic", 657 | "url":"https://hackerone.com/newrelic", 658 | "bounty":true, 659 | "domains":[ 660 | "newrelic.com" 661 | ] 662 | }, 663 | { 664 | "name":"NordVPN", 665 | "url":"https://hackerone.com/nordvpn", 666 | "bounty":true, 667 | "domains":[ 668 | "nordvpn.com" 669 | ] 670 | }, 671 | { 672 | "name":"Vanilla", 673 | "url":"https://hackerone.com/vanilla", 674 | "bounty":true, 675 | "domains":[ 676 | "vanillacommunities.com", 677 | "vanilladevelopment.com", 678 | "vanillaforums.com", 679 | "vanillastaging.com" 680 | ] 681 | }, 682 | { 683 | "name":"Shipt", 684 | "url":"https://hackerone.com/shipt", 685 | "bounty":true, 686 | "domains":[ 687 | "shipt.com" 688 | ] 689 | }, 690 | { 691 | "name":"Starbucks", 692 | "url":"https://hackerone.com/starbucks", 693 | "bounty":true, 694 | "domains":[ 695 | "starbucks.com", 696 | "starbucksreserve.com", 697 | "teavana.com" 698 | ] 699 | }, 700 | { 701 | "name":"Synack", 702 | "url":"https://synack.responsibledisclosure.com/hc/en-us/", 703 | "bounty":true, 704 | "domains":[ 705 | "synack.com" 706 | ] 707 | }, 708 | { 709 | "name":"Roblox", 710 | "url":"https://hackerone.com/roblox", 711 | "bounty":true, 712 | "domains":[ 713 | "rbx.com", 714 | "roblox.com" 715 | ] 716 | }, 717 | { 718 | "name":"Cuvva", 719 | "url":"https://hackerone.com/cuvva", 720 | "bounty":false, 721 | "domains":[ 722 | "cuvva.co" 723 | ] 724 | }, 725 | { 726 | "name":"TTS Bug Bounty", 727 | "url":"https://hackerone.com/tts", 728 | "bounty":true, 729 | "domains":[ 730 | "code.gov", 731 | "login.gov", 732 | "search.gov" 733 | ] 734 | }, 735 | { 736 | "name":"Upserve ", 737 | "url":"https://hackerone.com/upserve", 738 | "bounty":true, 739 | "domains":[ 740 | "upserve.com" 741 | ] 742 | }, 743 | { 744 | "name":"Grammarly", 745 | "url":"https://hackerone.com/grammarly", 746 | "bounty":true, 747 | "domains":[ 748 | "grammarly.io", 749 | "grammarly.com", 750 | "grammarly.net" 751 | ] 752 | }, 753 | { 754 | "name":"Kartpay", 755 | "url":"https://hackerone.com/kartpay", 756 | "bounty":false, 757 | "domains":[ 758 | "kartpay.com" 759 | ] 760 | }, 761 | { 762 | "name":"Valve", 763 | "url":"https://hackerone.com/valve", 764 | "bounty":true, 765 | "domains":[ 766 | "dota2.com", 767 | "steampowered.com", 768 | "valvesoftware.com", 769 | "steamgames.com", 770 | "steamcommunity.com", 771 | "teamfortress.com", 772 | "counter-strike.net", 773 | "playartifact.com" 774 | ] 775 | }, 776 | { 777 | "name":"Smule", 778 | "url":"https://hackerone.com/smule", 779 | "bounty":false, 780 | "domains":[ 781 | "smule.com" 782 | ] 783 | }, 784 | { 785 | "name":"LifeOmic", 786 | "url":"https://hackerone.com/lifeomic", 787 | "bounty":true, 788 | "domains":[ 789 | "jupiterone.io", 790 | "lifeomic.com" 791 | ] 792 | }, 793 | { 794 | "name":"BitMEX", 795 | "url":"https://hackerone.com/bitmex", 796 | "bounty":true, 797 | "domains":[ 798 | "bitmex.com" 799 | ] 800 | }, 801 | { 802 | "name":"Paddy Power Betfair", 803 | "url":"https://hackerone.com/paddypowerbetfair", 804 | "bounty":true, 805 | "domains":[ 806 | "betfair.com", 807 | "betfair.es", 808 | "betfair.it", 809 | "betfair.ro", 810 | "betfair.se", 811 | "paddypower.com", 812 | "paddypower.it" 813 | ] 814 | }, 815 | { 816 | "name":"Railto LLC", 817 | "url":"https://hackerone.com/railto", 818 | "bounty":false, 819 | "domains":[ 820 | "railto.com" 821 | ] 822 | }, 823 | { 824 | "name":"Y Combinator", 825 | "url":"https://hackerone.com/ycombinator", 826 | "bounty":false, 827 | "domains":[ 828 | "ycombinator.com" 829 | ] 830 | }, 831 | { 832 | "name":"RATELIMITED", 833 | "url":"https://hackerone.com/ratelimited", 834 | "bounty":false, 835 | "domains":[ 836 | "ratelimited.me" 837 | ] 838 | }, 839 | { 840 | "name":"NCSC UK ", 841 | "url":"https://hackerone.com/ncsc_uk", 842 | "bounty":false, 843 | "domains":[ 844 | "ncsc.gov.uk" 845 | ] 846 | }, 847 | { 848 | "name":"Liberapay", 849 | "url":"https://hackerone.com/liberapay", 850 | "bounty":true, 851 | "domains":[ 852 | "liberapay.com", 853 | "liberapay.org" 854 | ] 855 | }, 856 | { 857 | "name":"Hanno", 858 | "url":"https://hackerone.com/hannob", 859 | "bounty":false, 860 | "domains":[ 861 | "betterscience.org", 862 | "fuzzing-project.org", 863 | "hboeck.de" 864 | ] 865 | }, 866 | { 867 | "name":"Chaturbate", 868 | "url":"https://hackerone.com/chaturbate", 869 | "bounty":true, 870 | "domains":[ 871 | "highwebmedia.com", 872 | "securegatewayaccess.com" 873 | ] 874 | }, 875 | { 876 | "name":"Marriott", 877 | "url":"https://hackerone.com/marriott", 878 | "bounty":false, 879 | "domains":[ 880 | "marriott.com", 881 | "starwoodhotels.com" 882 | ] 883 | }, 884 | { 885 | "name":"Upgrade", 886 | "url":"https://hackerone.com/upgrade", 887 | "bounty":false, 888 | "domains":[ 889 | "upgrade.com" 890 | ] 891 | }, 892 | { 893 | "name":"Chainlink", 894 | "url":"https://hackerone.com/chainlink", 895 | "bounty":true, 896 | "domains":[ 897 | "smartcontract.com" 898 | ] 899 | }, 900 | { 901 | "name":"8x8", 902 | "url":"https://hackerone.com/8x8", 903 | "bounty":false, 904 | "domains":[ 905 | "8x8.com", 906 | "dxi.eu", 907 | "easycontactnow.com", 908 | "jit.si", 909 | "jitsi.org", 910 | "mycontactual.com", 911 | "packet8.net", 912 | "sameroom.io", 913 | "ucverse.com", 914 | "wavecell.com" 915 | ] 916 | }, 917 | { 918 | "name":"Flickr", 919 | "url":"https://hackerone.com/flickr", 920 | "bounty":true, 921 | "domains":[ 922 | "flickr.com" 923 | ] 924 | }, 925 | { 926 | "name":"Savedroid", 927 | "url":"https://hackerone.com/savedroid", 928 | "bounty":true, 929 | "domains":[ 930 | "savedroid.com" 931 | ] 932 | }, 933 | { 934 | "name":"Vivy", 935 | "url":"https://hackerone.com/vivy", 936 | "bounty":false, 937 | "domains":[ 938 | "vivy.com" 939 | ] 940 | }, 941 | { 942 | "name":"FanDuel", 943 | "url":"https://hackerone.com/fanduel", 944 | "bounty":true, 945 | "domains":[ 946 | "fanduel.com" 947 | ] 948 | }, 949 | { 950 | "name":"InnoGames", 951 | "url":"https://hackerone.com/innogames", 952 | "bounty":true, 953 | "domains":[ 954 | "igpayment.com", 955 | "innogames.com", 956 | "innogames.de" 957 | ] 958 | }, 959 | { 960 | "name":"Capital One", 961 | "url":"https://hackerone.com/capital-one", 962 | "bounty":false, 963 | "domains":[ 964 | "bluetarp.com", 965 | "capitalone.ca", 966 | "capitalone.co.uk", 967 | "capitalone.com", 968 | "capitalone360.com", 969 | "capitalonebank.com", 970 | "capitalonecards.com", 971 | "capitalonecareers.co.uk", 972 | "criticalstack.com", 973 | "luma.co.uk", 974 | "paribus.co", 975 | "teamstercardnow.com", 976 | "theunioncard.com", 977 | "unitedincome.com", 978 | "wikibuy.com" 979 | ] 980 | }, 981 | { 982 | "name":"Spell", 983 | "url":"https://hackerone.com/spell", 984 | "bounty":false, 985 | "domains":[ 986 | "spell.run" 987 | ] 988 | }, 989 | { 990 | "name":"Allegro", 991 | "url":"https://hackerone.com/allegro", 992 | "bounty":true, 993 | "domains":[ 994 | "allegrosandbox.pl" 995 | ] 996 | }, 997 | { 998 | "name":"Vercel", 999 | "url":"https://hackerone.com/vercel", 1000 | "bounty":false, 1001 | "domains":[ 1002 | "now.systems", 1003 | "vercel.com", 1004 | "zeit.sh" 1005 | ] 1006 | }, 1007 | { 1008 | "name":"TomTom", 1009 | "url":"https://hackerone.com/tomtom", 1010 | "bounty":false, 1011 | "domains":[ 1012 | "teleatlas.com", 1013 | "tomtom.com", 1014 | "tomtomgroup.com" 1015 | ] 1016 | }, 1017 | { 1018 | "name":"Worklytics", 1019 | "url":"https://hackerone.com/worklytics", 1020 | "bounty":false, 1021 | "domains":[ 1022 | "worklytics.co" 1023 | ] 1024 | }, 1025 | { 1026 | "name":"KeyBank", 1027 | "url":"https://hackerone.com/keybank", 1028 | "bounty":false, 1029 | "domains":[ 1030 | "bolstr.com", 1031 | "cainbrothers.com", 1032 | "hellowallet.com", 1033 | "key.com", 1034 | "keybank.com", 1035 | "laurelroad.com" 1036 | ] 1037 | }, 1038 | { 1039 | "name":"Koho", 1040 | "url":"https://hackerone.com/koho", 1041 | "bounty":false, 1042 | "domains":[ 1043 | "koho.app", 1044 | "koho.ca" 1045 | ] 1046 | }, 1047 | { 1048 | "name":"LendingHome", 1049 | "url":"https://hackerone.com/lendinghome", 1050 | "bounty":false, 1051 | "domains":[ 1052 | "lendinghome.com", 1053 | "lh-matrix.com", 1054 | "lhcapital-matrix.com", 1055 | "lhcapitalmanagement.com" 1056 | ] 1057 | }, 1058 | { 1059 | "name":"Oasis Protocol Foundation", 1060 | "url":"https://hackerone.com/oasis_protocol_foundation", 1061 | "bounty":true, 1062 | "domains":[ 1063 | "oasiscloud.io" 1064 | ] 1065 | }, 1066 | { 1067 | "name":"CompanyHub", 1068 | "url":"https://hackerone.com/companyhub", 1069 | "bounty":false, 1070 | "domains":[ 1071 | "companyhub.com" 1072 | ] 1073 | }, 1074 | { 1075 | "name":"Evernote", 1076 | "url":"https://hackerone.com/evernote", 1077 | "bounty":false, 1078 | "domains":[ 1079 | "evernote.com" 1080 | ] 1081 | }, 1082 | { 1083 | "name":"PUBG", 1084 | "url":"https://hackerone.com/pubg", 1085 | "bounty":false, 1086 | "domains":[ 1087 | "pubg.com", 1088 | "pubgesports.com" 1089 | ] 1090 | }, 1091 | { 1092 | "name":"Myndr", 1093 | "url":"https://hackerone.com/myndr", 1094 | "bounty":false, 1095 | "domains":[ 1096 | "myndr.net", 1097 | "myndr.nl" 1098 | ] 1099 | }, 1100 | { 1101 | "name":"Kopikas Entertainment", 1102 | "url":"https://hackerone.com/kopikas_entertainment", 1103 | "bounty":false, 1104 | "domains":[ 1105 | "slots.io" 1106 | ] 1107 | }, 1108 | { 1109 | "name":"DigitalOcean", 1110 | "url":"https://hackerone.com/digitalocean", 1111 | "bounty":false, 1112 | "domains":[ 1113 | "digitalocean.com", 1114 | "digitaloceanspaces.com" 1115 | ] 1116 | }, 1117 | { 1118 | "name":"Uber", 1119 | "url":"https://hackerone.com/uber", 1120 | "bounty":true, 1121 | "domains":[ 1122 | "uber.com" 1123 | ] 1124 | }, 1125 | { 1126 | "name":"Vimeo", 1127 | "url":"https://hackerone.com/vimeo", 1128 | "bounty":true, 1129 | "domains":[ 1130 | "vimeo.com", 1131 | "livestream.com", 1132 | "magisto.com" 1133 | ] 1134 | }, 1135 | { 1136 | "name":"Verizon Media", 1137 | "url":"https://hackerone.com/verizonmedia", 1138 | "bounty":true, 1139 | "domains":[ 1140 | "yahoo.com", 1141 | "rivals.com", 1142 | "protrade.com", 1143 | "techcrunch.com", 1144 | "engadget.com", 1145 | "buildseries.com", 1146 | "makers.com", 1147 | "huffingtonpost.com", 1148 | "huffpost.com", 1149 | "huffpost.net", 1150 | "huffingtonpost.co.uk", 1151 | "huffingtonpost.ca", 1152 | "huffingtonpost.es", 1153 | "huffingtonpost.fr", 1154 | "huffingtonpost.gr", 1155 | "huffingtonpost.in", 1156 | "huffingtonpost.it", 1157 | "huffingtonpost.jp", 1158 | "huffingtonpost.kr", 1159 | "huffingtonpost.com.au", 1160 | "huffingtonpost.co.za", 1161 | "huffpostbrasil.com", 1162 | "huffpostmaghreb.com", 1163 | "huffpost.co.uk", 1164 | "huffpost.ca", 1165 | "huffpost.es", 1166 | "huffpost.fr", 1167 | "huffpost.gr", 1168 | "huffpost.in", 1169 | "huffpost.it", 1170 | "huffpost.jp", 1171 | "huffpost.kr", 1172 | "huffpost.com.au", 1173 | "huffpost.co.za", 1174 | "huffingtonpost.de", 1175 | "huffingtonpost.com.mx", 1176 | "huffpost.de", 1177 | "huffpost.com.mx", 1178 | "huffpostarabi.com", 1179 | "huffpo.net" 1180 | ] 1181 | }, 1182 | { 1183 | "name":"Zomato", 1184 | "url":"https://hackerone.com/zomato", 1185 | "bounty":true, 1186 | "domains":[ 1187 | "zomato.com", 1188 | "zdev.net" 1189 | ] 1190 | }, 1191 | { 1192 | "name":"Ford", 1193 | "url":"https://hackerone.com/ford", 1194 | "bounty":false, 1195 | "domains":[ 1196 | "ford.com", 1197 | "lincoln.com", 1198 | "quicklane.com", 1199 | "motorcraft.com", 1200 | "omnicraftautoparts.com" 1201 | ] 1202 | }, 1203 | { 1204 | "name":"Google", 1205 | "url":"https://www.google.com/about/appsecurity/reward-program/", 1206 | "bounty":true, 1207 | "domains":[ 1208 | "google.com", 1209 | "youtube.com", 1210 | "blogger.com" 1211 | ] 1212 | }, 1213 | { 1214 | "name":"Twitter", 1215 | "url":"https://hackerone.com/twitter", 1216 | "bounty":true, 1217 | "domains":[ 1218 | "twitter.com", 1219 | "vine.co", 1220 | "periscope.tv", 1221 | "pscp.tv", 1222 | "twimg.com", 1223 | "gnip.com", 1224 | "mopub.com", 1225 | "snappytv.com", 1226 | "twitterflightschool.com", 1227 | "niche.co" 1228 | ] 1229 | }, 1230 | { 1231 | "name":"Facebook", 1232 | "url":"https://www.facebook.com/whitehat", 1233 | "bounty":true, 1234 | "domains":[ 1235 | "facebook.com", 1236 | "fb.com", 1237 | "fb.me", 1238 | "messenger.com", 1239 | "thefacebook.com", 1240 | "accountkit.com", 1241 | "instagram.com", 1242 | "freebasics.com", 1243 | "internet.org", 1244 | "oculus.com", 1245 | "whatsapp.com", 1246 | "whatsapp.net" 1247 | ] 1248 | }, 1249 | { 1250 | "name":"Cloudflare", 1251 | "url":"https://hackerone.com/cloudflare", 1252 | "bounty":true, 1253 | "domains":[ 1254 | "cloudflare.com", 1255 | "cloudflareworkers.com", 1256 | "cloudflareaccess.com" 1257 | ] 1258 | }, 1259 | { 1260 | "name":"Ubiquiti", 1261 | "url":"https://hackerone.com/ui", 1262 | "bounty":true, 1263 | "domains":[ 1264 | "ubnt.com", 1265 | "ui.com" 1266 | ] 1267 | }, 1268 | { 1269 | "name":"Rockstargames", 1270 | "url":"https://hackerone.com/rockstargames", 1271 | "bounty":true, 1272 | "domains":[ 1273 | "rockstargames.com" 1274 | ] 1275 | }, 1276 | { 1277 | "name":"Spotify", 1278 | "url":"https://hackerone.com/spotify", 1279 | "bounty":true, 1280 | "domains":[ 1281 | "spotify.com", 1282 | "spotify.net", 1283 | "spotifyforbrands.com" 1284 | ] 1285 | }, 1286 | { 1287 | "name":"Takeaway", 1288 | "url":"https://bugcrowd.com/takeaway", 1289 | "bounty":true, 1290 | "domains":[ 1291 | "lieferando.de", 1292 | "yourdelivery.de", 1293 | "takeaway.com", 1294 | "thuisbezorgd.nl", 1295 | "pyszne.pl", 1296 | "lieferando.at", 1297 | "scoober.com" 1298 | ] 1299 | }, 1300 | { 1301 | "name":"Seek", 1302 | "url":"https://bugcrowd.com/seek", 1303 | "bounty":true, 1304 | "domains":[ 1305 | "seek.com.au", 1306 | "seek.com", 1307 | "skinfra.xyz", 1308 | "myseek.xyz", 1309 | "outfra.xyz", 1310 | "jobapi.net", 1311 | "certsy.com", 1312 | "certsynonprod.com", 1313 | "aips-internal.com", 1314 | "aips-services.com", 1315 | "jobapi.io", 1316 | "sol-data.com" 1317 | ] 1318 | }, 1319 | { 1320 | "name":"Pinterest", 1321 | "url":"https://bugcrowd.com/pinterest", 1322 | "bounty":true, 1323 | "domains":[ 1324 | "pinterest.com" 1325 | ] 1326 | }, 1327 | { 1328 | "name":"Upwork", 1329 | "url":"https://bugcrowd.com/upwork", 1330 | "bounty":true, 1331 | "domains":[ 1332 | "upwork.com" 1333 | ] 1334 | }, 1335 | { 1336 | "name":"Twilio", 1337 | "url":"https://bugcrowd.com/twilio", 1338 | "bounty":true, 1339 | "domains":[ 1340 | "authy.com", 1341 | "twilio.com" 1342 | ] 1343 | }, 1344 | { 1345 | "name":"Netflix", 1346 | "url":"https://bugcrowd.com/netflix", 1347 | "bounty":true, 1348 | "domains":[ 1349 | "nflxvideo.net", 1350 | "nflxext.com", 1351 | "nflximg.net", 1352 | "nflxso.net", 1353 | "netflix.com" 1354 | ] 1355 | }, 1356 | { 1357 | "name":"Etsy", 1358 | "url":"https://bugcrowd.com/etsy", 1359 | "bounty":true, 1360 | "domains":[ 1361 | "etsy.com" 1362 | ] 1363 | }, 1364 | { 1365 | "name":"Square", 1366 | "url":"https://bugcrowd.com/square", 1367 | "bounty":true, 1368 | "domains":[ 1369 | "square.com", 1370 | "squareup.com", 1371 | "cash.me" 1372 | ] 1373 | }, 1374 | { 1375 | "name":"Alibaba", 1376 | "url":"https://hackerone.com/alibaba", 1377 | "bounty":true, 1378 | "domains":[ 1379 | "cainiao.com", 1380 | "alibaba.com", 1381 | "aliexpress.com", 1382 | "taobao.com", 1383 | "tmall.com", 1384 | "aliyun.com", 1385 | "alibabacloud.com", 1386 | "1688.com", 1387 | "dingtalk.com", 1388 | "alibaba-inc.com", 1389 | "aliyun-inc.com", 1390 | "alimama.com" 1391 | ] 1392 | }, 1393 | { 1394 | "name":"Oppo", 1395 | "url":"https://security.oppo.com/en/noticedetails.html?noticeId=20201578399519447", 1396 | "bounty":true, 1397 | "domains":[ 1398 | "oppo.com", 1399 | "oppo.cn", 1400 | "myoppo.com", 1401 | "opposhop.cn", 1402 | "coloros.com", 1403 | "nearme.com.cn", 1404 | "oppomobile.com", 1405 | "oppofind.com", 1406 | "heytap.com", 1407 | "heytapmobi.com", 1408 | "realme.com", 1409 | "realme.net", 1410 | "oppopay.com", 1411 | "keke.cn", 1412 | "myoas.com", 1413 | "oppoer.me", 1414 | "wanyol.com" 1415 | ] 1416 | }, 1417 | { 1418 | "name":"IBM", 1419 | "url":"https://hackerone.com/ibm", 1420 | "bounty":false, 1421 | "domains":[ 1422 | "ibm.com" 1423 | ] 1424 | }, 1425 | { 1426 | "name":"Huawei", 1427 | "url":"https://bugbounty.huawei.com/hbp/#/program", 1428 | "bounty":true, 1429 | "domains":[ 1430 | "hicloud.com", 1431 | "vmall.com", 1432 | "huawei.com", 1433 | "huaweicloud.com" 1434 | ] 1435 | }, 1436 | { 1437 | "name":"HackerOne", 1438 | "url":"https://hackerone.com/security", 1439 | "bounty":true, 1440 | "domains":[ 1441 | "hackerone.com", 1442 | "hackerone.net", 1443 | "hacker101.com", 1444 | "hackerone-ext-content.com" 1445 | ] 1446 | }, 1447 | { 1448 | "name":"Paytm", 1449 | "url":"https://bugbounty.paytm.com", 1450 | "bounty":true, 1451 | "domains":[ 1452 | "paytm.com", 1453 | "paytm.in", 1454 | "paytmmall.com", 1455 | "paytmbank.com", 1456 | "paytmfirstgames.com", 1457 | "gamepind.com", 1458 | "paytmmoney.com", 1459 | "paytm.ca", 1460 | "paytmlabs.com" 1461 | ] 1462 | }, 1463 | { 1464 | "name":"Didi", 1465 | "url":"https://sec.didichuxing.com", 1466 | "bounty":false, 1467 | "domains":[ 1468 | "didichuxing.com", 1469 | "xiaojukeji.com", 1470 | "didiglobal.com", 1471 | "udache.com", 1472 | "didiyun.com" 1473 | ] 1474 | }, 1475 | { 1476 | "name":"AT&T", 1477 | "url":"https://hackerone.com/att", 1478 | "bounty":true, 1479 | "domains":[ 1480 | "att.com" 1481 | ] 1482 | }, 1483 | { 1484 | "name":"OnePlus", 1485 | "url":"https://security.oneplus.com/", 1486 | "bounty":true, 1487 | "domains":[ 1488 | "oneplus.com", 1489 | "oneplus.in", 1490 | "oneplus.net", 1491 | "oneplus.cn", 1492 | "oneplusbbs.com", 1493 | "h2os.com" 1494 | ] 1495 | }, 1496 | { 1497 | "name":"Bentley", 1498 | "url":"https://www.bentley.com/responsible_disclosure.pdf", 1499 | "bounty":true, 1500 | "domains":[ 1501 | "bentley.com" 1502 | ] 1503 | }, 1504 | { 1505 | "name":"Offensive Security", 1506 | "url":"https://www.offensive-security.com/bug-bounty-program/", 1507 | "bounty":true, 1508 | "domains":[ 1509 | "offensive-security.com", 1510 | "exploit-db.com", 1511 | "kali.org", 1512 | "backtrack-linux.org" 1513 | ] 1514 | }, 1515 | { 1516 | "name":"Tencent", 1517 | "url":"https://en.security.tencent.com", 1518 | "bounty":true, 1519 | "domains":[ 1520 | "qq.com", 1521 | "tencent.com", 1522 | "tenpay.com", 1523 | "dnspod.cn", 1524 | "weiyun.com" 1525 | ] 1526 | }, 1527 | { 1528 | "name":"Fair", 1529 | "url":"https://www.fair.com/bug-bounty", 1530 | "bounty":true, 1531 | "domains":[ 1532 | "fair.com", 1533 | "fair.engineering" 1534 | ] 1535 | }, 1536 | { 1537 | "name":"Microsoft Online Services", 1538 | "url":"https://www.microsoft.com/en-us/msrc/bounty-microsoft-cloud", 1539 | "bounty":true, 1540 | "domains":[ 1541 | "office.com", 1542 | "live.com", 1543 | "onedrive.com", 1544 | "office365.com", 1545 | "sharepoint.com", 1546 | "lync.com", 1547 | "yammer.com", 1548 | "sway.com", 1549 | "microsoft.com", 1550 | "live.net", 1551 | "skype.com" 1552 | ] 1553 | }, 1554 | { 1555 | "name":"Internet NL", 1556 | "url":"https://internet.nl/disclosure/", 1557 | "bounty":false, 1558 | "domains":[ 1559 | "internet.nl" 1560 | ] 1561 | }, 1562 | { 1563 | "name":"Check Point", 1564 | "url":"https://www.checkpoint.com/white-hat/", 1565 | "bounty":false, 1566 | "domains":[ 1567 | "checkpoint.com" 1568 | ] 1569 | }, 1570 | { 1571 | "name":"Mail.ru", 1572 | "url":"https://hackerone.com/mailru", 1573 | "bounty":true, 1574 | "domains":[ 1575 | "mail.ru", 1576 | "pandao.ru", 1577 | "am.ru", 1578 | "youla.ru", 1579 | "vseapteki.ru", 1580 | "relap.io", 1581 | "my.com", 1582 | "my.games", 1583 | "lootdog.io", 1584 | "delivery-club.ru", 1585 | "zakazaka.ru", 1586 | "icq.com", 1587 | "icq.net", 1588 | "donationalerts.com", 1589 | "donationalerts.ru" 1590 | ] 1591 | }, 1592 | { 1593 | "name":"DropBox", 1594 | "url":"https://hackerone.com/dropbox", 1595 | "bounty":true, 1596 | "domains":[ 1597 | "dropbox.com", 1598 | "hellosign.com", 1599 | "helloworks.com", 1600 | "dropboxforum.com" 1601 | ] 1602 | }, 1603 | { 1604 | "name":"Slack", 1605 | "url":"https://hackerone.com/slack", 1606 | "bounty":true, 1607 | "domains":[ 1608 | "slack.com", 1609 | "slackb.com" 1610 | ] 1611 | }, 1612 | { 1613 | "name":"Creditkarma", 1614 | "url":"https://hackerone.com/creditkarma", 1615 | "bounty":true, 1616 | "domains":[ 1617 | "creditkarma.com", 1618 | "creditkarma.ca" 1619 | ] 1620 | }, 1621 | { 1622 | "name":"Intigriti", 1623 | "url":"https://www.intigriti.com/programs/intigriti/intigriti/detail", 1624 | "bounty":true, 1625 | "domains":[ 1626 | "intigriti.com" 1627 | ] 1628 | }, 1629 | { 1630 | "name":"T-Mobile CZ", 1631 | "url":"https://www.t-mobile.cz/bug-bounty", 1632 | "bounty":true, 1633 | "domains":[ 1634 | "t-mobile.cz" 1635 | ] 1636 | }, 1637 | { 1638 | "name":"Touch Incentive Marketing B.V.", 1639 | "url":"https://www.touchincentive.com/responsible-disclosure/", 1640 | "bounty":true, 1641 | "domains":[ 1642 | "touchincentive.com" 1643 | ] 1644 | }, 1645 | { 1646 | "name":"MongoDB", 1647 | "url":"https://www.mongodb.com/security", 1648 | "bounty":false, 1649 | "domains":[ 1650 | "mongodb.com" 1651 | ] 1652 | }, 1653 | { 1654 | "name":"Wedbio", 1655 | "url":"https://wedbio.com/report-incident", 1656 | "bounty":false, 1657 | "domains":[ 1658 | "wedbio.com" 1659 | ] 1660 | }, 1661 | { 1662 | "name":"Royal Bank of Scotland", 1663 | "url":"http://personal.rbs.co.uk/personal/security-centre/responsible-disclosure.html", 1664 | "bounty":false, 1665 | "domains":[ 1666 | "rbs.co.uk" 1667 | ] 1668 | }, 1669 | { 1670 | "name":"Pornhub", 1671 | "url":"https://hackerone.com/pornhub", 1672 | "bounty":true, 1673 | "domains":[ 1674 | "pornhub.com", 1675 | "pornhubpremium.com" 1676 | ] 1677 | }, 1678 | { 1679 | "name":"Tube8", 1680 | "url":"https://hackerone.com/tube8", 1681 | "bounty":true, 1682 | "domains":[ 1683 | "tube8.com", 1684 | "tube8.fr", 1685 | "tube8.es" 1686 | ] 1687 | }, 1688 | { 1689 | "name":"Redtube", 1690 | "url":"https://hackerone.com/redtube", 1691 | "bounty":true, 1692 | "domains":[ 1693 | "redtube.com" 1694 | ] 1695 | }, 1696 | 1697 | { 1698 | "name":"Amazon", 1699 | "url":"https://aws.amazon.com/security/vulnerability-reporting/", 1700 | "bounty":false, 1701 | "domains":[ 1702 | "amazon.com" 1703 | ] 1704 | }, 1705 | { 1706 | "name":"Plaid", 1707 | "url":"https://hackerone.com/plaid", 1708 | "bounty":true, 1709 | "domains":[ 1710 | "plaid.com" 1711 | ] 1712 | }, 1713 | { 1714 | "name":"ING Bank", 1715 | "url":"https://hackerone.com/ing", 1716 | "bounty":true, 1717 | "domains":[ 1718 | "ing.com", 1719 | "ing.nl" 1720 | ] 1721 | }, 1722 | { 1723 | "name":"Rabobank", 1724 | "url":"https://hackerone.com/rabobank", 1725 | "bounty":true, 1726 | "domains":[ 1727 | "rabobank.nl", 1728 | "rabobank.com" 1729 | ] 1730 | }, 1731 | { 1732 | "name":"SNS Bank", 1733 | "url":"https://hackerone.com/sns_bank", 1734 | "bounty":true, 1735 | "domains":[ 1736 | "snsbank.nl", 1737 | "sns.nl" 1738 | ] 1739 | }, 1740 | { 1741 | "name":"Wickr", 1742 | "url":"https://wickr.com/security/bug-bounty/", 1743 | "bounty":true, 1744 | "domains":[ 1745 | "wickr.com" 1746 | ] 1747 | }, 1748 | { 1749 | "name": "Yatra", 1750 | "url": "https://www.yatra.com/online/bug-bounty", 1751 | "bounty": true, 1752 | "domains":[ 1753 | "yatra.com" 1754 | ] 1755 | }, 1756 | { 1757 | "name": "Starleaf", 1758 | "url": "https://www.starleaf.com/c/bug-bounty-program/", 1759 | "bounty": true, 1760 | "domains":[ 1761 | "starleaf.com" 1762 | ] 1763 | }, 1764 | { 1765 | "name":"Pon-Cat", 1766 | "url":"https://www.pon-cat.com/nl/responsible-disclosure", 1767 | "bounty":true, 1768 | "domains":[ 1769 | "pon-cat.com" 1770 | ] 1771 | }, 1772 | { 1773 | "name": "Playstation", 1774 | "url": "https://hackerone.com/playstation", 1775 | "bounty": true, 1776 | "domains":[ 1777 | "playstation.net", 1778 | "sonyentertainmentnetwork.com", 1779 | "playstation.com" 1780 | ] 1781 | } 1782 | , 1783 | { 1784 | "name": "EC-Council", 1785 | "url": "https://www.eccouncil.org/bug-bounty/", 1786 | "bounty": true, 1787 | "domains":[ 1788 | "eccouncil.org" 1789 | ] 1790 | } 1791 | ] 1792 | } 1793 | --------------------------------------------------------------------------------