Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
14 in-scope
*.uat.unico.appscope· criticalaccountshomolog.acesso.io· criticalbackend-sdk.uat.private.unico.run· criticalblog.unico.io· mediumdevcenter.unico.io· mediumsdk-h1.unico.io/createprocess· highidcash-uat.unico.io· criticalidentityhomolog.acesso.io· criticalidpay-uat.unico.io· criticalissuer.idpay-uat.unico.io· criticalopenfinance.unico.io· criticalsecure.unico.io· criticalunico.io· critical[Unico] Liveness Bypass· criticalfirst indexed
92d ago · 14 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Unico IDtech.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/unico_idtech",
"name": "Unico IDtech",
"handle": "unico_idtech",
"targets": {
"in_scope": [
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.uat.unico.app",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "OTHER",
"instruction": "Test environment for identifying weaknesses in the Liveness verification system and exploring potential bypass methods.\n\nCurrently available as:\n1. APK (Android)\n2. IPA (iOS)\n3. Web Page\n\nPlease refer to the program policy for detailed test criteria and artifact links.\n\nDetailed Info: https://sdk-h1.unico.io/docs",
"max_severity": "critical",
"asset_identifier": "[Unico] Liveness Bypass",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "accountshomolog.acesso.io",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "backend-sdk.uat.private.unico.run",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "medium",
"asset_identifier": "blog.unico.io",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "medium",
"asset_identifier": "devcenter.unico.io",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Scope related to Unico Liveness Testing. This endpoint is used for the final liveness validation.",
"max_severity": "high",
"asset_identifier": "https://sdk-h1.unico.io/createprocess",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "idcash-uat.unico.io",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "identityhomolog.acesso.io",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "idpay-uat.unico.io",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "issuer.idpay-uat.unico.io",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "openfinance.unico.io",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "secure.unico.io",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "unico.io",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": [
{
"asset_type": "WILDCARD",
"instruction": "\nScope related to the By Unico API.\n\nThe API reference for the By Unico API is available at https://devcenter.unico.io/unico-idcloud/by-unico-integration/by-unico-api/api-reference.\n",
"max_severity": "none",
"asset_identifier": "*.cadastro.uat.unico.app",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "uconf.uat.unico.app",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "http://unico.io",
"offers_swag": false,
"managed_program": true,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 398,
"response_efficiency_percentage": 91,
"average_time_to_report_resolved": 2971,
"average_time_to_first_program_response": 5
}