Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for T-Mobile.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"name": "T-Mobile",
"url": "https://bugcrowd.com/engagements/t-mobile",
"allows_disclosure": false,
"managed_by_bugcrowd": true,
"safe_harbor": "full",
"max_payout": 133700,
"targets": {
"in_scope": [
{
"type": "other",
"target": "Self-Register Account on T-Mobile Microsoft Entra ID",
"uri": null,
"name": "Self-Register Account on T-Mobile Microsoft Entra ID",
"ipAddress": ""
},
{
"type": "network",
"target": "Cellular Network Auth Bypass via Web App/T-Life (404-200-7239)",
"uri": null,
"name": "Cellular Network Auth Bypass via Web App/T-Life (404-200-7239)",
"ipAddress": ""
},
{
"type": "network",
"target": "T&P Servers (Temporarily Out of Scope)",
"uri": null,
"name": "T&P Servers (Temporarily Out of Scope)",
"ipAddress": "http://10.72.218.66/flag.txt, http://10.62.252.214/flag.txt"
},
{
"type": "website",
"target": "https://t-mobile.com",
"uri": "https://t-mobile.com",
"name": "t-mobile.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://account.t-mobile.com",
"uri": "https://account.t-mobile.com",
"name": "account.t-mobile.com",
"ipAddress": ""
},
{
"type": "api",
"target": "https://api.t-mobile.com",
"uri": "https://api.t-mobile.com",
"name": "*.api.t-mobile.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://metrobyt-mobile.com",
"uri": "https://metrobyt-mobile.com",
"name": "metrobyt-mobile.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://sprint.com",
"uri": "https://sprint.com",
"name": "sprint.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://tfb.t-mobile.com",
"uri": "https://tfb.t-mobile.com",
"name": "tfb.t-mobile.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://devedge.t-mobile.com",
"uri": "https://devedge.t-mobile.com",
"name": "devedge.t-mobile.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://tess.service-now.com",
"uri": "https://tess.service-now.com",
"name": "tess.service-now.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://digits.t-mobile.com",
"uri": "https://digits.t-mobile.com",
"name": "DIGITS - Web, Desktop, Mobile",
"ipAddress": ""
},
{
"type": "website",
"target": "https://account.business.t-mobile.com",
"uri": "https://account.business.t-mobile.com",
"name": "account.business.t-mobile.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://t-mobile.com",
"uri": "https://t-mobile.com",
"name": "*.t-mobile.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://metrobyt-mobile.com",
"uri": "https://metrobyt-mobile.com",
"name": "*.metrobyt-mobile.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://sprint.com",
"uri": "https://sprint.com",
"name": "*.sprint.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://api.vistarmedia.com",
"uri": "https://api.vistarmedia.com",
"name": "api.vistarmedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://packages.cortexpowered.com",
"uri": "https://packages.cortexpowered.com",
"name": "packages.cortexpowered.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://api.vistarmedia.eu",
"uri": "https://api.vistarmedia.eu",
"name": "api.vistarmedia.eu",
"ipAddress": ""
},
{
"type": "website",
"target": "https://production-dynam-creative.vistarmedia.com",
"uri": "https://production-dynam-creative.vistarmedia.com",
"name": "production-dynam-creative.vistarmedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://storybook.vistarmedia.com",
"uri": "https://storybook.vistarmedia.com",
"name": "storybook.vistarmedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://creatives.vistarmedia.com",
"uri": "https://creatives.vistarmedia.com",
"name": "creatives.vistarmedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://sflower.cortexpowered.com",
"uri": "https://sflower.cortexpowered.com",
"name": "sflower.cortexpowered.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://production-delivery-metrics-svc.vistarmedia.com",
"uri": "https://production-delivery-metrics-svc.vistarmedia.com",
"name": "production-delivery-metrics-svc.vistarmedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://maps.vistarmedia.com",
"uri": "https://maps.vistarmedia.com",
"name": "maps.vistarmedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://transcodes-cdn.vistarmedia.com",
"uri": "https://transcodes-cdn.vistarmedia.com",
"name": "transcodes-cdn.vistarmedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://assets-cdn.vistarmedia.com",
"uri": "https://assets-cdn.vistarmedia.com",
"name": "assets-cdn.vistarmedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://docker-staging.adstruc.com",
"uri": "https://docker-staging.adstruc.com",
"name": "docker-staging.adstruc.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://staging-trafficking.vistarmedia.com",
"uri": "https://staging-trafficking.vistarmedia.com",
"name": "staging-trafficking.vistarmedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://job-svc-b.vistarmedia.com",
"uri": "https://job-svc-b.vistarmedia.com",
"name": "job-svc-b.vistarmedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://docsite.vistarmedia.com",
"uri": "https://docsite.vistarmedia.com",
"name": "docsite.vistarmedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://sfleet.cortexpowered.com",
"uri": "https://sfleet.cortexpowered.com",
"name": "sfleet.cortexpowered.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://audience-builder.vistarmedia.com",
"uri": "https://audience-builder.vistarmedia.com",
"name": "audience-builder.vistarmedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://staging-login.vistarmedia.com",
"uri": "https://staging-login.vistarmedia.com",
"name": "staging-login.vistarmedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://clients.adstruc.com",
"uri": "https://clients.adstruc.com",
"name": "clients.adstruc.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://demo.adstruc.com",
"uri": "https://demo.adstruc.com",
"name": "demo.adstruc.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://*.uscc.net",
"uri": "https://*.uscc.net",
"name": "*.uscc.net",
"ipAddress": ""
},
{
"type": "website",
"target": "https://*.uscc.com",
"uri": "https://*.uscc.com",
"name": "*.uscc.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://*.uscellular.com",
"uri": "https://*.uscellular.com",
"name": "*.uscellular.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://dashboard-101.moengage.com",
"uri": "https://dashboard-101.moengage.com",
"name": "dashboard-101.moengage.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://www.assurancewireless.com",
"uri": "https://www.assurancewireless.com",
"name": "assurancewireless.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://*.assurancewireless.com",
"uri": "https://*.assurancewireless.com",
"name": "*.assurancewireless.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://assets.platform.blis.com",
"uri": "https://assets.platform.blis.com",
"name": "assets.platform.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://assets.development.amazon-tacticalplanner.com",
"uri": "https://assets.development.amazon-tacticalplanner.com",
"name": "assets.development.amazon-tacticalplanner.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://assets.platform.development.blis.com",
"uri": "https://assets.platform.development.blis.com",
"name": "assets.platform.development.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://assets.platform.rc.blis.com",
"uri": "https://assets.platform.rc.blis.com",
"name": "assets.platform.rc.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://audiencelogos.blis.com",
"uri": "https://audiencelogos.blis.com",
"name": "audiencelogos.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://blis.com",
"uri": "https://blis.com",
"name": "blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://creative.infinity.blismedia.com",
"uri": "https://creative.infinity.blismedia.com",
"name": "creative.infinity.blismedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://development.wmaudience.com",
"uri": "https://development.wmaudience.com",
"name": "development.wmaudience.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://imply-pivot.blis.com",
"uri": "https://imply-pivot.blis.com",
"name": "imply-pivot.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://imply-pivot.test.blis.com",
"uri": "https://imply-pivot.test.blis.com",
"name": "imply-pivot.test.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://imply.blis.com",
"uri": "https://imply.blis.com",
"name": "imply.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://imply.internal.platform.blis.com",
"uri": "https://imply.internal.platform.blis.com",
"name": "imply.internal.platform.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://imply.platform.blis.com",
"uri": "https://imply.platform.blis.com",
"name": "imply.platform.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://imply.platform.development.blis.com",
"uri": "https://imply.platform.development.blis.com",
"name": "imply.platform.development.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://imply.platform.rc.blis.com",
"uri": "https://imply.platform.rc.blis.com",
"name": "imply.platform.rc.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://imply.test.blis.com",
"uri": "https://imply.test.blis.com",
"name": "imply.test.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://imply.wmaudience.com",
"uri": "https://imply.wmaudience.com",
"name": "imply.wmaudience.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://internal.platform.blis.com",
"uri": "https://internal.platform.blis.com",
"name": "internal.platform.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://jenkins-github.gcp.blis.com",
"uri": "https://jenkins-github.gcp.blis.com",
"name": "jenkins-github.gcp.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://platform.blis.com",
"uri": "https://platform.blis.com",
"name": "platform.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://platform.blismedia.com",
"uri": "https://platform.blismedia.com",
"name": "platform.blismedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://platform.development.blis.com",
"uri": "https://platform.development.blis.com",
"name": "platform.development.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://platform.development2.blis.com",
"uri": "https://platform.development2.blis.com",
"name": "platform.development2.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://platform.rc.blis.com",
"uri": "https://platform.rc.blis.com",
"name": "platform.rc.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://privacy.blismedia.com",
"uri": "https://privacy.blismedia.com",
"name": "privacy.blismedia.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://rc.wmaudience.com",
"uri": "https://rc.wmaudience.com",
"name": "rc.wmaudience.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://signature.blis.com",
"uri": "https://signature.blis.com",
"name": "signature.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://sitepixel.blis.com",
"uri": "https://sitepixel.blis.com",
"name": "sitepixel.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://sitepixel.dev.blis.com",
"uri": "https://sitepixel.dev.blis.com",
"name": "sitepixel.dev.blis.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://wiki.atom-lens.com",
"uri": "https://wiki.atom-lens.com",
"name": "wiki.atom-lens.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://wmaudience.com",
"uri": "https://wmaudience.com",
"name": "wmaudience.com",
"ipAddress": ""
},
{
"type": "other",
"target": "Subdomain Takeover",
"uri": null,
"name": "Subdomain Takeover",
"ipAddress": ""
},
{
"type": "other",
"target": "Leaked Credentials",
"uri": "",
"name": "Leaked Credentials",
"ipAddress": ""
},
{
"type": "ios",
"target": "https://apps.apple.com/us/app/t-mobile/id561625752",
"uri": "https://apps.apple.com/us/app/t-mobile/id561625752",
"name": "T-Mobile - iOS",
"ipAddress": ""
},
{
"type": "android",
"target": "https://play.google.com/store/apps/details?id=com.tmobile.pr.mytmobile",
"uri": "https://play.google.com/store/apps/details?id=com.tmobile.pr.mytmobile",
"name": "T-Mobile - Android",
"ipAddress": ""
}
],
"out_of_scope": [
{
"type": "website",
"target": "/self-service-*",
"uri": "",
"name": "/self-service-*",
"ipAddress": ""
},
{
"type": "network",
"target": "http://10.72.218.66/flag.txt",
"uri": null,
"name": "http://10.72.218.66/flag.txt",
"ipAddress": ""
},
{
"type": "network",
"target": "http://10.62.252.214/flag.txt",
"uri": null,
"name": "http://10.62.252.214/flag.txt",
"ipAddress": ""
},
{
"type": "website",
"target": "*.sprint.net",
"uri": "",
"name": "*.sprint.net",
"ipAddress": ""
},
{
"type": "website",
"target": "*.mobile.uscc.net",
"uri": "",
"name": "*.mobile.uscc.net",
"ipAddress": ""
},
{
"type": "website",
"target": "*.mobile.uscc.com",
"uri": "",
"name": "*.mobile.uscc.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://*.moengage.com",
"uri": "https://*.moengage.com",
"name": "*.moengage.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://appointments.uscellular.com",
"uri": "https://appointments.uscellular.com",
"name": "appointments.uscellular.com",
"ipAddress": ""
},
{
"type": "other",
"target": "Any domain, property, product, protocol, or service of the app/hardware/software version not explicitly listed in the In-Scope section is out of scope; submissions are welcome but not guaranteed for the bounty/bonus.",
"uri": "",
"name": "Any domain, property, product, protocol, or service of the app/hardware/software version not explicitly listed in the In-Scope section is out of scope; submissions are welcome but not guaranteed for the bounty/bonus.",
"ipAddress": ""
}
]
}
}Self-Register Account on T-Mobile Microsoft Entra IDCellular Network Auth Bypass via Web App/T-Life (404-200-7239)T&P Servers (Temporarily Out of Scope)Subdomain TakeoverLeaked Credentials10.72.218.66/flag.txt10.62.252.214/flag.txtAny domain, property, product, pro…ranteed for the bounty/bonus.packages.cortexpowered.com