Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for EXNESS.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 121,
"average_time_to_first_program_response": 23,
"average_time_to_report_resolved": 1337,
"handle": "exness",
"id": 0,
"managed_program": false,
"name": "EXNESS",
"offers_bounties": true,
"offers_swag": true,
"response_efficiency_percentage": 99,
"submission_state": "open",
"url": "https://hackerone.com/exness",
"website": "https://www.exness.com",
"targets": {
"in_scope": [
{
"asset_identifier": "Any subdomain application issue",
"asset_type": "OTHER",
"availability_requirement": "low",
"confidentiality_requirement": "medium",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Exness subdomains of exness.(tld)",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "Any subdomain infrastructure issue",
"asset_type": "OTHER",
"availability_requirement": "high",
"confidentiality_requirement": "low",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "low",
"max_severity": "critical"
},
{
"asset_identifier": "Exness Investor",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "https://apps.apple.com/id/app/exness-investor/id1579331769",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "Exness Trade: Online Trading",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "https://apps.apple.com/id/app/exness-trader-trade-on-the-go/id1359763701",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "External service data leakage ",
"asset_type": "OTHER",
"availability_requirement": "medium",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Feel free to search secrets on github/pastebin and other services, but keep in mind, that such issues could be posted earlier and are ineligible for a bounty for now",
"integrity_requirement": "none",
"max_severity": "critical"
},
{
"asset_identifier": "api.excalls.mobi",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Mobile API",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "com.exness.android.pa",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Exness Trade: Online Trading\nhttps://play.google.com/store/apps/details?id=com.exness.android.pa",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "exness.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Public Area for Web Trading",
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "exnessaffiliates.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Partnership programs",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://my.exness.com/pa/pim/manager",
"asset_type": "URL",
"availability_requirement": "medium",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Portfolio Management",
"integrity_requirement": "low",
"max_severity": "high"
},
{
"asset_identifier": "https://my.exness.com/webtrading/",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Web Terminal For Trading",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "my.exness.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Personal Area for Web Trading",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "pay.ibex.exchange",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Payments Services",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "pwapi.ex2b.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Public Web API",
"integrity_requirement": "high",
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "stat.* (e.g. stat.exnessaffiliates.com)",
"asset_type": "URL",
"availability_requirement": "none",
"confidentiality_requirement": "none",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "Deprecated",
"integrity_requirement": "none",
"max_severity": "none"
}
]
}
}Exness Investor· criticalExness Trade: Online Trading· criticalAny subdomain application issue· criticalAny subdomain infrastructure issue· criticalExternal service data leakage· criticalcom.exness.android.pa· criticalstat.* (e.g. stat.exnessaffiliates.com)url