Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
17 in-scope
api.larksuite.com· criticalapp.larksuite.com· criticalcaldav.larksuite.com· criticalfile.larksuite.com· criticalhackers_chosendomain.larksuite.com· criticalinternal-api-drive-stream.larksuite.com· criticalinternal-api-lark-api.larksuite.com· criticalinternal-api.larksuite.com· criticallark-frontier.byteoversea.com· criticallarksuite.com· criticalopen.larksuite.com· criticalpassport.larksuite.com· criticalstatus.larksuite.com· criticalcom.larksuite.suite· critical1452166623· criticalMac OS Executable: Download here h…://www.larksuite.com/download· criticalWindows OS Executable: Download he…://www.larksuite.com/download· criticalnone listed
first indexed
92d ago · 17 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Lark Technologies.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/lark_technologies",
"name": "Lark Technologies",
"handle": "lark_technologies",
"targets": {
"in_scope": [
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "**Tier 1** Asset\n\nOnly the latest version of the application will be in scope. \n\n[Download from the Apple App Store here](https://apps.apple.com/app/lark-collaboration-tool/id1452166623)",
"max_severity": "critical",
"asset_identifier": "1452166623",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "DOWNLOADABLE_EXECUTABLES",
"instruction": "**Tier 1** Asset\n\nThis is the Lark Suite application for Mac OS. Only the latest version of the application will be in scope.\n\nPlease download the latest version of the application here: https://www.larksuite.com/download",
"max_severity": "critical",
"asset_identifier": "Mac OS Executable: Download here https://www.larksuite.com/download",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "DOWNLOADABLE_EXECUTABLES",
"instruction": "**Tier 1** Asset\n\nThis is the Lark Suite application for Windows. Only the latest version of the application will be in scope. \n\nPlease download the latest version of the application here: https://www.larksuite.com/download",
"max_severity": "critical",
"asset_identifier": "Windows OS Executable: Download here https://www.larksuite.com/download",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "**Tier 1** Asset",
"max_severity": "critical",
"asset_identifier": "api.larksuite.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "**Tier 2** Asset",
"max_severity": "critical",
"asset_identifier": "app.larksuite.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "**Tier 1** Asset",
"max_severity": "critical",
"asset_identifier": "caldav.larksuite.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "OTHER_APK",
"instruction": "**Tier 1** Asset\n\nOnly the latest version of the application will be in scope. \n\n[Download from the Google Play Store here](https://play.google.com/store/apps/details?id=com.larksuite.suite)",
"max_severity": "critical",
"asset_identifier": "com.larksuite.suite",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "**Tier 1** Asset",
"max_severity": "critical",
"asset_identifier": "file.larksuite.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "**Tier 1** Asset\n\n<hacker’s_chosendomain>.larksuite.com\nIf you find a vulnerability against your own test account domain, please feel free to use this asset for submission.\n",
"max_severity": "critical",
"asset_identifier": "hackers_chosendomain.larksuite.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "**Tier 1** Asset",
"max_severity": "critical",
"asset_identifier": "internal-api-drive-stream.larksuite.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "**Tier 1** Asset",
"max_severity": "critical",
"asset_identifier": "internal-api-lark-api.larksuite.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "**Tier 1** Asset",
"max_severity": "critical",
"asset_identifier": "internal-api.larksuite.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "**Tier 1** Asset",
"max_severity": "critical",
"asset_identifier": "lark-frontier.byteoversea.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "**Tier 1** Asset",
"max_severity": "critical",
"asset_identifier": "larksuite.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "**Tier 1** Asset",
"max_severity": "critical",
"asset_identifier": "open.larksuite.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "**Tier 1** Asset",
"max_severity": "critical",
"asset_identifier": "passport.larksuite.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "**Tier 2** Asset",
"max_severity": "critical",
"asset_identifier": "status.larksuite.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": []
},
"website": "https://www.larksuite.com",
"offers_swag": true,
"managed_program": true,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 278,
"response_efficiency_percentage": 57,
"average_time_to_report_resolved": null,
"average_time_to_first_program_response": 2
}