Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for T-Mobile.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"url": "https://bugcrowd.com/engagements/t-mobile",
"name": "T-Mobile",
"targets": {
"in_scope": [
{
"uri": "",
"name": "Self Register Account on T-Mobile Microsoft Entra ID",
"type": "other",
"target": "Self Register Account on T-Mobile Microsoft Entra ID",
"ipAddress": ""
},
{
"uri": "",
"name": "Cellular Network Auth Bypass via Web/Mobile App",
"type": "network",
"target": "Cellular Network Auth Bypass via Web/Mobile App",
"ipAddress": ""
},
{
"uri": "",
"name": "T&P Servers",
"type": "network",
"target": "T&P Servers",
"ipAddress": "http://10.72.218.66/flag.txt, http://10.62.252.214/flag.txt"
},
{
"uri": "",
"name": "Full Corporate Network Access or Access to Sensitive Network Segments",
"type": "network",
"target": "Full Corporate Network Access or Access to Sensitive Network Segments",
"ipAddress": ""
},
{
"uri": "https://apps.apple.com/us/app/t-life-t-mobile-tuesdays/id1111876388",
"name": "T-Life - iOS",
"type": "ios",
"target": "https://apps.apple.com/us/app/t-life-t-mobile-tuesdays/id1111876388",
"ipAddress": ""
},
{
"uri": "https://play.google.com/store/apps/details?id=com.tmobile.tuesdays&hl=en_US&gl=US",
"name": "T-Life - Android",
"type": "android",
"target": "https://play.google.com/store/apps/details?id=com.tmobile.tuesdays&hl=en_US&gl=US",
"ipAddress": ""
},
{
"uri": "https://account.t-mobile.com",
"name": "account.t-mobile.com",
"type": "website",
"target": "https://account.t-mobile.com",
"ipAddress": ""
},
{
"uri": "https://metrobyt-mobile.com",
"name": "metrobyt-mobile.com",
"type": "website",
"target": "https://metrobyt-mobile.com",
"ipAddress": ""
},
{
"uri": "https://sprint.com",
"name": "sprint.com",
"type": "website",
"target": "https://sprint.com",
"ipAddress": ""
},
{
"uri": "https://t-mobile.com",
"name": "t-mobile.com",
"type": "website",
"target": "https://t-mobile.com",
"ipAddress": ""
},
{
"uri": "https://api.t-mobile.com",
"name": "*.api.t-mobile.com",
"type": "api",
"target": "https://api.t-mobile.com",
"ipAddress": ""
},
{
"uri": "https://tfb.t-mobile.com",
"name": "tfb.t-mobile.com",
"type": "website",
"target": "https://tfb.t-mobile.com",
"ipAddress": ""
},
{
"uri": "https://devedge.t-mobile.com",
"name": "devedge.t-mobile.com",
"type": "website",
"target": "https://devedge.t-mobile.com",
"ipAddress": ""
},
{
"uri": "https://tess.service-now.com",
"name": "tess.service-now.com",
"type": "website",
"target": "https://tess.service-now.com",
"ipAddress": ""
},
{
"uri": "https://digits.t-mobile.com",
"name": "digits.t-mobile.com",
"type": "website",
"target": "https://digits.t-mobile.com",
"ipAddress": ""
},
{
"uri": "https://metrobyt-mobile.com",
"name": "*.metrobyt-mobile.com",
"type": "website",
"target": "https://metrobyt-mobile.com",
"ipAddress": ""
},
{
"uri": "https://t-mobile.com",
"name": "*.t-mobile.com",
"type": "website",
"target": "https://t-mobile.com",
"ipAddress": ""
},
{
"uri": "https://sprint.com",
"name": "*.sprint.com",
"type": "website",
"target": "https://sprint.com",
"ipAddress": ""
},
{
"uri": "https://api.vistarmedia.com",
"name": "api.vistarmedia.com",
"type": "website",
"target": "https://api.vistarmedia.com",
"ipAddress": ""
},
{
"uri": "https://packages.cortexpowered.com",
"name": "packages.cortexpowered.com",
"type": "website",
"target": "https://packages.cortexpowered.com",
"ipAddress": ""
},
{
"uri": "https://api.vistarmedia.eu",
"name": "api.vistarmedia.eu",
"type": "website",
"target": "https://api.vistarmedia.eu",
"ipAddress": ""
},
{
"uri": "https://production-dynam-creative.vistarmedia.com",
"name": "production-dynam-creative.vistarmedia.com",
"type": "website",
"target": "https://production-dynam-creative.vistarmedia.com",
"ipAddress": ""
},
{
"uri": "https://storybook.vistarmedia.com",
"name": "storybook.vistarmedia.com",
"type": "website",
"target": "https://storybook.vistarmedia.com",
"ipAddress": ""
},
{
"uri": "https://creatives.vistarmedia.com",
"name": "creatives.vistarmedia.com",
"type": "website",
"target": "https://creatives.vistarmedia.com",
"ipAddress": ""
},
{
"uri": "https://sflower.cortexpowered.com",
"name": "sflower.cortexpowered.com",
"type": "website",
"target": "https://sflower.cortexpowered.com",
"ipAddress": ""
},
{
"uri": "https://production-delivery-metrics-svc.vistarmedia.com",
"name": "production-delivery-metrics-svc.vistarmedia.com",
"type": "website",
"target": "https://production-delivery-metrics-svc.vistarmedia.com",
"ipAddress": ""
},
{
"uri": "https://maps.vistarmedia.com",
"name": "maps.vistarmedia.com",
"type": "website",
"target": "https://maps.vistarmedia.com",
"ipAddress": ""
},
{
"uri": "https://transcodes-cdn.vistarmedia.com",
"name": "transcodes-cdn.vistarmedia.com",
"type": "website",
"target": "https://transcodes-cdn.vistarmedia.com",
"ipAddress": ""
},
{
"uri": "https://assets-cdn.vistarmedia.com",
"name": "assets-cdn.vistarmedia.com",
"type": "website",
"target": "https://assets-cdn.vistarmedia.com",
"ipAddress": ""
},
{
"uri": "https://docker-staging.adstruc.com",
"name": "docker-staging.adstruc.com",
"type": "website",
"target": "https://docker-staging.adstruc.com",
"ipAddress": ""
},
{
"uri": "https://staging-trafficking.vistarmedia.com",
"name": "staging-trafficking.vistarmedia.com",
"type": "website",
"target": "https://staging-trafficking.vistarmedia.com",
"ipAddress": ""
},
{
"uri": "https://job-svc-b.vistarmedia.com",
"name": "job-svc-b.vistarmedia.com",
"type": "website",
"target": "https://job-svc-b.vistarmedia.com",
"ipAddress": ""
},
{
"uri": "https://docsite.vistarmedia.com",
"name": "docsite.vistarmedia.com",
"type": "website",
"target": "https://docsite.vistarmedia.com",
"ipAddress": ""
},
{
"uri": "https://sfleet.cortexpowered.com",
"name": "sfleet.cortexpowered.com",
"type": "website",
"target": "https://sfleet.cortexpowered.com",
"ipAddress": ""
},
{
"uri": "https://audience-builder.vistarmedia.com",
"name": "audience-builder.vistarmedia.com",
"type": "website",
"target": "https://audience-builder.vistarmedia.com",
"ipAddress": ""
},
{
"uri": "https://staging-login.vistarmedia.com",
"name": "staging-login.vistarmedia.com",
"type": "website",
"target": "https://staging-login.vistarmedia.com",
"ipAddress": ""
},
{
"uri": "https://clients.adstruc.com",
"name": "clients.adstruc.com",
"type": "website",
"target": "https://clients.adstruc.com",
"ipAddress": ""
},
{
"uri": "https://demo.adstruc.com",
"name": "demo.adstruc.com",
"type": "website",
"target": "https://demo.adstruc.com",
"ipAddress": ""
},
{
"uri": "https://*.uscc.net",
"name": "*.uscc.net",
"type": "website",
"target": "https://*.uscc.net",
"ipAddress": ""
},
{
"uri": "https://*.uscc.com",
"name": "*.uscc.com",
"type": "website",
"target": "https://*.uscc.com",
"ipAddress": ""
},
{
"uri": "https://*.uscellular.com",
"name": "*.uscellular.com",
"type": "website",
"target": "https://*.uscellular.com",
"ipAddress": ""
},
{
"uri": "https://dashboard-101.moengage.com",
"name": "dashboard-101.moengage.com",
"type": "website",
"target": "https://dashboard-101.moengage.com",
"ipAddress": ""
},
{
"uri": "https://www.assurancewireless.com",
"name": "assurancewireless.com",
"type": "website",
"target": "https://www.assurancewireless.com",
"ipAddress": ""
},
{
"uri": "https://*.assurancewireless.com",
"name": "*.assurancewireless.com",
"type": "website",
"target": "https://*.assurancewireless.com",
"ipAddress": ""
},
{
"uri": "https://assets.platform.blis.com",
"name": "assets.platform.blis.com",
"type": "website",
"target": "https://assets.platform.blis.com",
"ipAddress": ""
},
{
"uri": "https://assets.development.amazon-tacticalplanner.com",
"name": "assets.development.amazon-tacticalplanner.com",
"type": "website",
"target": "https://assets.development.amazon-tacticalplanner.com",
"ipAddress": ""
},
{
"uri": "https://assets.platform.development.blis.com",
"name": "assets.platform.development.blis.com",
"type": "website",
"target": "https://assets.platform.development.blis.com",
"ipAddress": ""
},
{
"uri": "https://assets.platform.rc.blis.com",
"name": "assets.platform.rc.blis.com",
"type": "website",
"target": "https://assets.platform.rc.blis.com",
"ipAddress": ""
},
{
"uri": "https://audiencelogos.blis.com",
"name": "audiencelogos.blis.com",
"type": "website",
"target": "https://audiencelogos.blis.com",
"ipAddress": ""
},
{
"uri": "https://blis.com",
"name": "blis.com",
"type": "website",
"target": "https://blis.com",
"ipAddress": ""
},
{
"uri": "https://creative.infinity.blismedia.com",
"name": "creative.infinity.blismedia.com",
"type": "website",
"target": "https://creative.infinity.blismedia.com",
"ipAddress": ""
},
{
"uri": "https://development.wmaudience.com",
"name": "development.wmaudience.com",
"type": "website",
"target": "https://development.wmaudience.com",
"ipAddress": ""
},
{
"uri": "https://imply-pivot.blis.com",
"name": "imply-pivot.blis.com",
"type": "website",
"target": "https://imply-pivot.blis.com",
"ipAddress": ""
},
{
"uri": "https://imply-pivot.test.blis.com",
"name": "imply-pivot.test.blis.com",
"type": "website",
"target": "https://imply-pivot.test.blis.com",
"ipAddress": ""
},
{
"uri": "https://imply.blis.com",
"name": "imply.blis.com",
"type": "website",
"target": "https://imply.blis.com",
"ipAddress": ""
},
{
"uri": "https://imply.internal.platform.blis.com",
"name": "imply.internal.platform.blis.com",
"type": "website",
"target": "https://imply.internal.platform.blis.com",
"ipAddress": ""
},
{
"uri": "https://imply.platform.blis.com",
"name": "imply.platform.blis.com",
"type": "website",
"target": "https://imply.platform.blis.com",
"ipAddress": ""
},
{
"uri": "https://imply.platform.development.blis.com",
"name": "imply.platform.development.blis.com",
"type": "website",
"target": "https://imply.platform.development.blis.com",
"ipAddress": ""
},
{
"uri": "https://imply.platform.rc.blis.com",
"name": "imply.platform.rc.blis.com",
"type": "website",
"target": "https://imply.platform.rc.blis.com",
"ipAddress": ""
},
{
"uri": "https://imply.test.blis.com",
"name": "imply.test.blis.com",
"type": "website",
"target": "https://imply.test.blis.com",
"ipAddress": ""
},
{
"uri": "https://imply.wmaudience.com",
"name": "imply.wmaudience.com",
"type": "website",
"target": "https://imply.wmaudience.com",
"ipAddress": ""
},
{
"uri": "https://internal.platform.blis.com",
"name": "internal.platform.blis.com",
"type": "website",
"target": "https://internal.platform.blis.com",
"ipAddress": ""
},
{
"uri": "https://jenkins-github.gcp.blis.com",
"name": "jenkins-github.gcp.blis.com",
"type": "website",
"target": "https://jenkins-github.gcp.blis.com",
"ipAddress": ""
},
{
"uri": "https://platform.blis.com",
"name": "platform.blis.com",
"type": "website",
"target": "https://platform.blis.com",
"ipAddress": ""
},
{
"uri": "https://platform.blismedia.com",
"name": "platform.blismedia.com",
"type": "website",
"target": "https://platform.blismedia.com",
"ipAddress": ""
},
{
"uri": "https://platform.development.blis.com",
"name": "platform.development.blis.com",
"type": "website",
"target": "https://platform.development.blis.com",
"ipAddress": ""
},
{
"uri": "https://platform.development2.blis.com",
"name": "platform.development2.blis.com",
"type": "website",
"target": "https://platform.development2.blis.com",
"ipAddress": ""
},
{
"uri": "https://platform.rc.blis.com",
"name": "platform.rc.blis.com",
"type": "website",
"target": "https://platform.rc.blis.com",
"ipAddress": ""
},
{
"uri": "https://privacy.blismedia.com",
"name": "privacy.blismedia.com",
"type": "website",
"target": "https://privacy.blismedia.com",
"ipAddress": ""
},
{
"uri": "https://rc.wmaudience.com",
"name": "rc.wmaudience.com",
"type": "website",
"target": "https://rc.wmaudience.com",
"ipAddress": ""
},
{
"uri": "https://signature.blis.com",
"name": "signature.blis.com",
"type": "website",
"target": "https://signature.blis.com",
"ipAddress": ""
},
{
"uri": "https://sitepixel.blis.com",
"name": "sitepixel.blis.com",
"type": "website",
"target": "https://sitepixel.blis.com",
"ipAddress": ""
},
{
"uri": "https://sitepixel.dev.blis.com",
"name": "sitepixel.dev.blis.com",
"type": "website",
"target": "https://sitepixel.dev.blis.com",
"ipAddress": ""
},
{
"uri": "https://wiki.atom-lens.com",
"name": "wiki.atom-lens.com",
"type": "website",
"target": "https://wiki.atom-lens.com",
"ipAddress": ""
},
{
"uri": "https://wmaudience.com",
"name": "wmaudience.com",
"type": "website",
"target": "https://wmaudience.com",
"ipAddress": ""
},
{
"uri": "",
"name": "Assets labeled as in-scope",
"type": "other",
"target": "Assets labeled as in-scope",
"ipAddress": ""
},
{
"uri": "https://apps.apple.com/us/app/t-mobile/id561625752",
"name": "T-Mobile - iOS",
"type": "ios",
"target": "https://apps.apple.com/us/app/t-mobile/id561625752",
"ipAddress": ""
},
{
"uri": "https://play.google.com/store/apps/details?id=com.tmobile.pr.mytmobile",
"name": "T-Mobile - Android",
"type": "android",
"target": "https://play.google.com/store/apps/details?id=com.tmobile.pr.mytmobile",
"ipAddress": ""
},
{
"uri": "https://apps.apple.com/us/app/syncup-drive/id1576574297",
"name": "SyncUP DRIVE - iOS",
"type": "ios",
"target": "https://apps.apple.com/us/app/syncup-drive/id1576574297",
"ipAddress": ""
},
{
"uri": "https://play.google.com/store/apps/details?id=com.tmobile.drive",
"name": "SyncUP DRIVE - Android",
"type": "android",
"target": "https://play.google.com/store/apps/details?id=com.tmobile.drive",
"ipAddress": ""
},
{
"uri": "https://apps.apple.com/us/app/syncup-kids/id1503394062",
"name": "SyncUP KIDS - iOS",
"type": "ios",
"target": "https://apps.apple.com/us/app/syncup-kids/id1503394062",
"ipAddress": ""
},
{
"uri": "https://play.google.com/store/apps/details?id=com.tmobile.kids",
"name": "SyncUP KIDS - Android",
"type": "android",
"target": "https://play.google.com/store/apps/details?id=com.tmobile.kids",
"ipAddress": ""
},
{
"uri": "https://apps.apple.com/us/app/syncup-tracker/id1526380335",
"name": "SyncUP TRACKER - iOS",
"type": "ios",
"target": "https://apps.apple.com/us/app/syncup-tracker/id1526380335",
"ipAddress": ""
},
{
"uri": "https://play.google.com/store/apps/details?id=com.tmobile.syncuptag",
"name": "SyncUP TRACKER - Android",
"type": "android",
"target": "https://play.google.com/store/apps/details?id=com.tmobile.syncuptag",
"ipAddress": ""
},
{
"uri": "https://digits.t-mobile.com/",
"name": "DIGITS - Mobile & Desktop",
"type": "other",
"target": "https://digits.t-mobile.com/",
"ipAddress": ""
}
],
"out_of_scope": [
{
"uri": "",
"name": "*.sprint.net",
"type": "website",
"target": "*.sprint.net",
"ipAddress": ""
},
{
"uri": "",
"name": "/self-service-*",
"type": "website",
"target": "/self-service-*",
"ipAddress": ""
},
{
"uri": "",
"name": "*.mobile.uscc.net",
"type": "website",
"target": "*.mobile.uscc.net",
"ipAddress": ""
},
{
"uri": "",
"name": "*.mobile.uscc.com",
"type": "website",
"target": "*.mobile.uscc.com",
"ipAddress": ""
},
{
"uri": "https://*.moengage.com",
"name": "*.moengage.com",
"type": "website",
"target": "https://*.moengage.com",
"ipAddress": ""
},
{
"uri": "https://appointments.uscellular.com",
"name": "appointments.uscellular.com",
"type": "website",
"target": "https://appointments.uscellular.com",
"ipAddress": ""
},
{
"uri": "",
"name": "Any domain, property, product, protocol, or service of the app/hardware/software version not explicitly listed in the In-Scope section is out of scope; submissions are welcome but not guaranteed for the bounty/bonus.",
"type": "other",
"target": "Any domain, property, product, protocol, or service of the app/hardware/software version not explicitly listed in the In-Scope section is out of scope; submissions are welcome but not guaranteed for the bounty/bonus.",
"ipAddress": ""
}
]
},
"max_payout": 133700,
"safe_harbor": "full",
"allows_disclosure": false,
"managed_by_bugcrowd": true
}Self Register Account on T-Mobile Microsoft Entra IDCellular Network Auth Bypass via Web/Mobile AppT&P ServersFull Corporate Network Access or A…to Sensitive Network SegmentsAssets labeled as in-scopedigits.t-mobile.com/*.sprint.net/self-service-**.mobile.uscc.net*.mobile.uscc.comapi.vistarmedia.euplay.google.com/store/apps/details?id=com.tmobile.kidsapps.apple.com/us/app/syncup-kids/id1503394062*.moengage.comAny domain, property, product, pro…ranteed for the bounty/bonus.