Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
27 in-scope
*.airbnb-aws.comscope· critical*.airbnb.comscope· critical*.airbnb.orgscope· critical*.airbnbcitizen.comscope· critical*.airbnbpayments.comscope· critical*.atairbnb.comscope· critical*.byairbnb.comscope· critical*.hoteltonight-test.comscope· critical*.hoteltonight.comscope· critical*.luxuryretreats.comscope· critical*.muscache.comscope· critical*.musta.chscope· critical*.withairbnb.comscope· criticalapi.airbnb.com· criticalassets.airbnb.com· criticalcallbacks.airbnb.com· criticalm.airbnb.com· criticalnext.airbnb.com· criticalone.airbnb.com· criticalopen.airbnb.com· criticalsupport-api.airbnb.com· criticalwww.airbnb.com· criticalwww.hoteltonight.com· criticalcom.airbnb.app· criticalcom.luxuryretreats.ios· criticalLocalized airbnb sites listed at the link below:· criticalcom.airbnb.android· criticaladmin.demo.urbandoor.comurldemo.urbandoor.comurlluckey.appurlluckey.frurlluckey.inurlluckey.partnersurlluckeyhomes.comurlprovider.demo.urbandoor.comurlfirst indexed
92d ago · 27 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Airbnb.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/airbnb",
"name": "Airbnb",
"handle": "airbnb",
"targets": {
"in_scope": [
{
"asset_type": "URL",
"instruction": "Lower Impact Scope",
"max_severity": "critical",
"asset_identifier": "*.airbnb-aws.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Higher Impact Scope",
"max_severity": "critical",
"asset_identifier": "*.airbnb.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.airbnb.org",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": "Lower Impact Scope",
"max_severity": "critical",
"asset_identifier": "*.airbnbcitizen.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.airbnbpayments.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Lower Impact Scope",
"max_severity": "critical",
"asset_identifier": "*.atairbnb.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": "Lower Impact Scope",
"max_severity": "critical",
"asset_identifier": "*.byairbnb.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": "Lower Impact Scope",
"max_severity": "critical",
"asset_identifier": "*.hoteltonight-test.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "WILDCARD",
"instruction": "Lower Impact Scope",
"max_severity": "critical",
"asset_identifier": "*.hoteltonight.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "Lower Impact Scope",
"max_severity": "critical",
"asset_identifier": "*.luxuryretreats.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Lower Impact Scope",
"max_severity": "critical",
"asset_identifier": "*.muscache.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.musta.ch",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Lower Impact Scope",
"max_severity": "critical",
"asset_identifier": "*.withairbnb.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "OTHER",
"instruction": "**https://www.airbnb.com/sitemaps/localized**\nHigher Impact Scope",
"max_severity": "critical",
"asset_identifier": "Localized airbnb sites listed at the link below:",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Higher Impact Scope",
"max_severity": "critical",
"asset_identifier": "api.airbnb.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Higher Impact Scope",
"max_severity": "critical",
"asset_identifier": "assets.airbnb.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Higher Impact Scope",
"max_severity": "critical",
"asset_identifier": "callbacks.airbnb.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "Higher Impact Scope",
"max_severity": "critical",
"asset_identifier": "com.airbnb.android",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "Higher Impact Scope",
"max_severity": "critical",
"asset_identifier": "com.airbnb.app",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "Lower Impact Scope",
"max_severity": "critical",
"asset_identifier": "com.luxuryretreats.ios",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Higher Impact Scope",
"max_severity": "critical",
"asset_identifier": "m.airbnb.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Higher Impact Scope",
"max_severity": "critical",
"asset_identifier": "next.airbnb.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Higher Impact Scope",
"max_severity": "critical",
"asset_identifier": "one.airbnb.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Lower Impact Scope",
"max_severity": "critical",
"asset_identifier": "open.airbnb.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Higher Impact Scope",
"max_severity": "critical",
"asset_identifier": "support-api.airbnb.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Higher Impact Scope",
"max_severity": "critical",
"asset_identifier": "www.airbnb.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Lower Impact Scope",
"max_severity": "critical",
"asset_identifier": "www.hoteltonight.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
}
],
"out_of_scope": [
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "admin.demo.urbandoor.com",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": false,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "demo.urbandoor.com",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": false,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "luckey.app",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "luckey.fr",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "luckey.in",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "luckey.partners",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "luckeyhomes.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "provider.demo.urbandoor.com",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": false,
"availability_requirement": "high",
"confidentiality_requirement": "high"
}
]
},
"website": "https://www.airbnb.com",
"offers_swag": false,
"managed_program": false,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 141,
"response_efficiency_percentage": 100,
"average_time_to_report_resolved": 834,
"average_time_to_first_program_response": 4
}