Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
33 in-scope
*.abritel.frscope· critical*.bookabach.co.nzscope· critical*.carrentals.comscope· critical*.cheaptickets.comscope· critical*.cruiseshipcenters.comscope· critical*.ean.comscope· critical*.ebookers.comscope· critical*.expedia.comscope· critical*.expediagroup.comscope· critical*.expediapartnercentral.comscope· critical*.expediapartnersolutions.comscope· critical*.fewo-direkt.descope· critical*.flights.comscope· critical*.homeaway.comscope· critical*.hotels.comscope· critical*.hotwire.comscope· critical*.hotwirepartnercentral.comscope· critical*.lastminute.co.nzscope· critical*.lastminute.com.auscope· critical*.mrjet.sescope· critical*.orbitz.comscope· critical*.stayz.com.auscope· critical*.travelocity.cascope· critical*.travelocity.comscope· critical*.vrbo.comscope· critical*.wotif.comscope· criticalwww.cruiseshipcenters.com/api/searchcenter· criticalwww.ebookers.fi· criticalwww.expedia-aarp.com· criticalwww.vrbo.com· critical987675995· criticalOther Expedia-owned Asset· criticalcom.expediapartnercentral· critical*.egadvertising.comwildcard*.expediaagents.comwildcard*.expediacruises.comwildcard*.hoteis.comwildcard*.hoteles.comwildcardfirst indexed
92d ago · 33 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Expedia Group VDP.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/expediagroup",
"name": "Expedia Group VDP",
"handle": "expediagroup",
"targets": {
"in_scope": [
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.abritel.fr",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.bookabach.co.nz",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.carrentals.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.cheaptickets.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.cruiseshipcenters.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.ean.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.ebookers.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.expedia.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.expediagroup.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.expediapartnercentral.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.expediapartnersolutions.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.fewo-direkt.de",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.flights.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.homeaway.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.hotels.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.hotwire.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.hotwirepartnercentral.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "Please note **.lastminute.com* is a different property and is __NOT__ owned by Expedia Group. As such, submissions on **.lastminute.com* are out of scope. ",
"max_severity": "critical",
"asset_identifier": "*.lastminute.co.nz",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "Please note **.lastminute.com* is a different property and is __NOT__ owned by Expedia Group. As such, submissions on **.lastminute.com* are out of scope. ",
"max_severity": "critical",
"asset_identifier": "*.lastminute.com.au",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.mrjet.se",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.orbitz.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.stayz.com.au",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.travelocity.ca",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.travelocity.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.vrbo.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.wotif.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "987675995",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "OTHER",
"instruction": "Please report any security issues on Expedia-owned assets (i.e. leaked GitHub tokens, AWS secret keys, Expedia PII or other subdomains not listed in the policy) ",
"max_severity": "critical",
"asset_identifier": "Other Expedia-owned Asset ",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "com.expediapartnercentral",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "*Policy Guidance for API:*\nWe are not currently providing credentials for this asset.",
"max_severity": "critical",
"asset_identifier": "http://www.cruiseshipcenters.com/api/searchcenter",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "www.ebookers.fi",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "www.expedia-aarp.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.vrbo.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": [
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "none",
"asset_identifier": "*.egadvertising.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "none",
"asset_identifier": "*.expediaagents.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": false,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "none",
"asset_identifier": "*.expediacruises.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "none",
"asset_identifier": "*.hoteis.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "none",
"asset_identifier": "*.hoteles.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "https://www.expediagroup.com/",
"offers_swag": false,
"managed_program": true,
"offers_bounties": false,
"submission_state": "open",
"allows_bounty_splitting": false,
"average_time_to_bounty_awarded": null,
"response_efficiency_percentage": 68,
"average_time_to_report_resolved": 8809,
"average_time_to_first_program_response": 8
}