bounty.index
/to search
Live data paused. Neon is grumpy. Programs still load from the upstream mirror; watchlists and alerts are taking a nap.
Featured on
Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates
programs/HackerOne/mendix
Mendix

HackerOne·23 in-scope · 4 out·updated 17m ago·RSS
Discord →open program
vdpmanagedopen
first response
—
no reports yet
scope
4 out
asset mix
url
20 url · 3 wildcard
last change
—
no history yet
In scope

023
wildcards03
Recent changes

— no diffs detected in snapshot history yet —
Community reports

0 reports
No reports yet — be the first to share your triage timing for Mendix.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
Your notes

▸ raw source payload
{
  "allows_bounty_splitting": false,
  "average_time_to_bounty_awarded": null,
  "average_time_to_first_program_response": 8,
  "average_time_to_report_resolved": 638,
  "handle": "mendix",
  "id": 0,
  "managed_program": true,
  "name": "Mendix",
  "offers_bounties": false,
  "offers_swag": false,
  "response_efficiency_percentage": 38,
  "submission_state": "open",
  "url": "https://hackerone.com/mendix",
  "website": "https://mendix.com",
  "targets": {
    "in_scope": [
      {
        "asset_identifier": "*.mendix.com",
        "asset_type": "WILDCARD",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "# *.mendix.com\n\nThis is an open-ended program, we want to be better and we welcome your help us get there.\n\n## Observations\n\n  - Some of the sub-domains are behind sign-up\n  - The CIA impact will vary depending on the explored vulnerabilities.",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "*.timeseries.com",
        "asset_type": "WILDCARD",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "*.timeseries.nl",
        "asset_type": "WILDCARD",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "3dvis.mendixcloud.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "#3dvis.mendixcloud.com\n\n3dviewer production environment",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "3s.mendixcloud.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "## Endpoints\n  - URL: https://3s.mendixcloud.com",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "alm.mendixcloud.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "## Endpoints\n  - URL:  https://alm.mendixcloud.com",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "contributor.mendixcloud.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "#contributor.mendixcloud.com\n \nThis is a frontend application for onboarding flow in Marketplace.\n \n## Endpoints\n  - URL:  https://contributor.mendixcloud.com",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "datalake-sync.apps.mendix.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "## Endpoints\n  - URL:  https://datalake-sync.apps.mendix.com",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "dataprivacy.mendixcloud.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "## Endpoints\n  - URL:  https://dataprivacy.mendixcloud.com",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "dealservice.mendixcloud.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "## Endpoints\n  - URL:  https://dealservice.mendixcloud.com",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "deskallocation.mendixcloud.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "## Endpoints\n  - URL: https://deskallocation.mendixcloud.com",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "employees.mendix.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "## Endpoints\n  - URL: https://employees.mendix.com",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "gateway.us-east-1.sws.siemens.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "# Authorization information:\nEndpoint                                     :   gateway.us-east-1.sws.siemens.com\n- samAccessKeyId                  :   3491d6d93e82498e828d468ebce592f0\n- samSecretAccessKey       :   gAgnBmdPGnlOtX/I0CoY7aIJVoU95lkJ7DorNXI1SBk=",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "k8s-licbrk-licenseb-11d216e80e-384217420.eu-central-1.elb.amazonaws.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "license broker\n\nurl:\nk8s-licbrk-licenseb-11d216e80e-384217420.eu-central-1.elb.amazonaws.com",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "marketplaceadmin.mendixcloud.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "mxbpconfig.mendixcloud.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "# Visualisation Platform\n\nThis application is used for Mendix Basic Package configuration.\n\n## Endpoints\n - App's URL: https://mxbpconfig.mendixcloud.com",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "mxpeople.mendixcloud.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "## Endpoints\n  - URL: https://mxpeople.mendixcloud.com",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "notification.billing.appservices.mendix.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "provisioning.servicemanagement.mendix.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "revenuedatahub.mendixcloud.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "## Endpoints\n  - URL: https://revenuedatahub.mendixcloud.com",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "servicemanagement-accp.mendixcloud.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "simplate.mendixcloud.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "## Endpoints\n  - URL: https://simplate.mendixcloud.com",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "slm.store.mendix.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "#slm.appservices.mendix.com\n \nAppService Lifecycle service\n \n## Endpoints\n  - URL:  https://slm.store.mendix.com",
        "integrity_requirement": "high",
        "max_severity": "critical"
      }
    ],
    "out_of_scope": [
      {
        "asset_identifier": "event.us-east-1.sws.siemens.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "none"
      },
      {
        "asset_identifier": "http://o0pv3l7chl.execute-api.us-east-1.amazonaws.com/dev",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "none"
      },
      {
        "asset_identifier": "https://react.vis.pre2.usea1.devops.sws.siemens.com/sample/dist/index.html",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "none"
      },
      {
        "asset_identifier": "poh0v3odoi.execute-api.eu-central-1.amazonaws.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "none"
      }
    ]
  }
}