Attack surface
12 in-scope
soundtrack.io· Tier 1api.soundtrackyourbrand.com· Tier 1— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Soundtrack Technologies.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
first indexed
2h ago · 12 in-scope assets
// only one snapshot on record — changes appear from the next ingest onward
{
"id": "18058413-5255-4f5c-a9db-c6ac027bb5d6",
"url": "https://www.intigriti.com/programs/syb/soundtrackyourbrand/detail",
"name": "Soundtrack Technologies",
"handle": "soundtrackyourbrand",
"status": "open",
"targets": {
"in_scope": [
{
"type": "url",
"impact": "Tier 1",
"endpoint": "https://soundtrack.io",
"description": "Our public web site."
},
{
"type": "ios",
"impact": "Tier 1",
"endpoint": "1114799709",
"description": "The iOS Player app that allows you to browse and play music.\n\nIn order to use the iOS Player you will need a pairing code that you can obtain through https://app.soundtrack.io/ using the test credentials.\n\nhttps://www.youtube.com/watch?v=y7HGAtsB6Tg"
},
{
"type": "ios",
"impact": "Tier 1",
"endpoint": "1114800186",
"description": "The iOS Remote that allows you to remotely control your Soundtrack Players.\n\nIn order to use the iOS Remote you will need a remote code that you can obtain through https://app.soundtrack.io/ using the test credentials.\n\nhttps://www.youtube.com/watch?v=cmAe1kRvOeY"
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "api.soundtrackyourbrand.com",
"description": "Our public API. Used by us as well as third parties. You can use your regular login token to authenticate.\n\nDocs: https://developer.soundtrackyourbrand.com/api\nGraphQL Explorer: https://api.soundtrackyourbrand.com/v2/explore\n\nPlease use one of the claimed test credentials. In order to use the API you can login using your claimed credentials (via loginUser) and use the token you get back to issue API calls."
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "billing.api.soundtrackyourbrand.com",
"description": "Our billing service. Handles payments (one time and recurring), price and product management and subscription renewals."
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "builds.soundtrackyourbrand.com",
"description": "Our service which does gradual rollout of our player software to our Windows client and hardware players."
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "business.soundtrackyourbrand.com",
"description": "Our web based management console that allows users to administer their players, music and their account.\n\n**To claim bounties for this domain you need to use one of the claimed test credentials.**"
},
{
"type": "android",
"impact": "Tier 1",
"endpoint": "com.soundtrackyourbrand.soundtrack.player",
"description": "The Android Player app that allows you to browse and play music.\n\nIn order to use the Android Player you will need a pairing code that you can obtain through https://app.soundtrack.io/ using the test credentials.\n\nhttps://www.youtube.com/watch?v=y7HGAtsB6Tg"
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "https://auth.api.soundtrackyourbrand.com/",
"description": "Our authentication service."
},
{
"type": "other",
"impact": "Tier 1",
"endpoint": "https://builds.soundtrackyourbrand.com/download/WIN32SOUNDTRACK/latest",
"description": "The Windows Player that allows you to play music. No user interface except for a tray icon.\n\nIn order to use the Windows Player you will need a pairing code that you can obtain through https://app.soundtrack.io/ using the test credentials.\n\nhttps://www.youtube.com/watch?v=HjFfXcjSEmM"
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "https://radio.api.soundtrackyourbrand.com/",
"description": "Our playlisting service."
},
{
"type": "other",
"impact": "Tier 1",
"endpoint": "macOS app",
"description": "The macOS Player app allows you to browse and play music. You can find it in the App Store: https://apps.apple.com/se/app/soundtrack-player/id1114799709?l=en\n\nIn order to use the macOS you will need a pairing code that you can obtain through https://app.soundtrack.io/ using the test credentials.\n\nhttps://www.youtube.com/watch?v=y7HGAtsB6Tg"
}
],
"out_of_scope": []
},
"max_bounty": {
"value": 3500,
"currency": "EUR"
},
"min_bounty": {
"value": 50,
"currency": "EUR"
},
"tacRequired": false,
"company_handle": "syb",
"twoFactorRequired": false,
"confidentiality_level": "public"
}billing.api.soundtrackyourbrand.com· Tier 1builds.soundtrackyourbrand.com· Tier 1business.soundtrackyourbrand.com· Tier 1auth.api.soundtrackyourbrand.com/· Tier 1radio.api.soundtrackyourbrand.com/· Tier 11114799709· Tier 11114800186· Tier 1builds.soundtrackyourbrand.com/download/WIN32SOUNDTRACK/latest· Tier 1macOS app· Tier 1— none listed —