Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
16 in-scope
*.bykea.netscope· critical*test*.bykea.net· criticalgoogleplace*.bykea.net· criticalkronos*.bykea.net· criticalloadboard*.bykea.net/· criticalraptor*.bykea.net· criticalbykea.com· criticalapi.bykea.net· criticalgeocode-beta.bykea.net· criticalleaflet-map.bykea.net· criticalmaps.bykea.net· criticalnominatim.bykea.net· criticaltomoe.bykea.net· critical1351179184· criticalcom.bykea.pk· criticalcom.bykea.pk.partner· criticalfirst indexed
92d ago · 16 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Bykea.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/bykea",
"name": "Bykea",
"handle": "bykea",
"targets": {
"in_scope": [
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.bykea.net",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "The customer iOS app enables users to book rides, deliveries, and manage payments, offering a seamless experience for various services.",
"max_severity": "critical",
"asset_identifier": "1351179184",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "bykea.com",
"eligible_for_bounty": true,
"integrity_requirement": "not_defined",
"eligible_for_submission": true,
"availability_requirement": "not_defined",
"confidentiality_requirement": "not_defined"
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "The customer android app enables users to book rides, deliveries, and manage payments, offering a seamless experience for various services.",
"max_severity": "critical",
"asset_identifier": "com.bykea.pk",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "The driver app offers core features such as wallet management, invoicing, booking visibility, and acceptance, supporting seamless driver operations on the platform.",
"max_severity": "critical",
"asset_identifier": "com.bykea.pk.partner",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://*test*.bykea.net",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "This core microservice handles booking creation and facilitates communication between critical microservices, powering both the apps and overall business operations.",
"max_severity": "critical",
"asset_identifier": "https://api.bykea.net",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://geocode-beta.bykea.net",
"eligible_for_bounty": true,
"integrity_requirement": "not_defined",
"eligible_for_submission": true,
"availability_requirement": "not_defined",
"confidentiality_requirement": "not_defined"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://googleplace*.bykea.net",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "WILDCARD",
"instruction": "This API-based microservice manages invoicing functionalities, playing a vital role in our platform’s financial operations. ",
"max_severity": "critical",
"asset_identifier": "https://kronos*.bykea.net",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": " ",
"max_severity": "critical",
"asset_identifier": "https://leaflet-map.bykea.net",
"eligible_for_bounty": true,
"integrity_requirement": "not_defined",
"eligible_for_submission": true,
"availability_requirement": "not_defined",
"confidentiality_requirement": "not_defined"
},
{
"asset_type": "WILDCARD",
"instruction": "This asset is an API-based microservice that allows drivers to view and accept customer bookings.",
"max_severity": "critical",
"asset_identifier": "https://loadboard*.bykea.net/",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://maps.bykea.net",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": " ",
"max_severity": "critical",
"asset_identifier": "https://nominatim.bykea.net",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "WILDCARD",
"instruction": "This asset is an API-based microservice responsible for authentication processes.",
"max_severity": "critical",
"asset_identifier": "https://raptor*.bykea.net",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Kong API Gateway serving as the backend gateway for all mobile application traffic.\n",
"max_severity": "critical",
"asset_identifier": "tomoe.bykea.net",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
}
],
"out_of_scope": [
{
"asset_type": "WILDCARD",
"instruction": "Belongs to tilism tech services which is a third party service.",
"max_severity": "none",
"asset_identifier": "*.tellocast.com",
"eligible_for_bounty": false,
"integrity_requirement": "none",
"eligible_for_submission": false,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "URL",
"instruction": "This is a third-party service; therefore, issues related to this asset are out of scope for our program.",
"max_severity": "none",
"asset_identifier": "www.tilismtechservices.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "https://bykea.com",
"offers_swag": false,
"managed_program": false,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 25,
"response_efficiency_percentage": 100,
"average_time_to_report_resolved": null,
"average_time_to_first_program_response": 4
}