Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
19 in-scope
*.fanduel.comscope· critical*.mgmt.fndlsb.netscope· critical*.prd.fndlsb.netscope· critical*.tvg.comscope· critical*inf.fndlsb.net· critical4njbets.com· critical4njbets.us.betfair.com· criticallogin-4ngbets.us.betfair.com· criticallogin-4njbets.us.betfair.com· criticalwww.4njbets.com· critical1413721906· critical1485539253· critical1506229470· critical599664106· critical6740879082· criticalcom.fanduel.android.self· criticalcom.fanduel.casino· criticalcom.fanduel.racing· criticalcom.fanduel.sportsbook· critical− removed 1 scope · com.fanduel.flywheelnativecontainer.picks
36d ago
first indexed
92d ago · 20 in-scope assets
No reports yet. Be the first to share your triage timing for FanDuel.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/fanduel",
"name": "FanDuel",
"handle": "fanduel",
"targets": {
"in_scope": [
{
"asset_type": "WILDCARD",
"instruction": "Any testing, development, or perf environments are out of scope for this asset class unless the finding can reasonably impact production.\n\nFor any support assets such as `support.fanduel.com` please do not submit any findings related to public objects being disclosed via the `/s/sfsites/aura` path. Many objects are intended to be public and do not contain sensitive data. ",
"max_severity": "critical",
"asset_identifier": "*.fanduel.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.mgmt.fndlsb.net",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.prd.fndlsb.net",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "Any testing, development, or perf environments are out of scope for this asset class unless the finding can reasonably impact production.\n\nFor any support assets such as `support.tvg.com` please do not submit any findings related to public objects being disclosed via the `/s/sfsites/aura` path. Many objects are intended to be public and do not contain sensitive data. ",
"max_severity": "critical",
"asset_identifier": "*.tvg.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*inf.fndlsb.net",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "1413721906",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "1485539253",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "1506229470",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "4njbets.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "4njbets.us.betfair.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "599664106",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "6740879082",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "com.fanduel.android.self",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "com.fanduel.casino",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "com.fanduel.racing",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "com.fanduel.sportsbook",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "login-4ngbets.us.betfair.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "login-4njbets.us.betfair.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "www.4njbets.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": [
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "none",
"asset_identifier": "*.fndl.dev",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "affiliates.fanduel.com",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": false,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "equibase-store.fanduel.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "https://fanduel.com",
"offers_swag": true,
"managed_program": false,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 186,
"response_efficiency_percentage": 96,
"average_time_to_report_resolved": null,
"average_time_to_first_program_response": 22
}