bounty.index

/to search

Live data paused. Neon is grumpy. Programs still load from the upstream mirror; watchlists and alerts are taking a nap.

Featured on

Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates

programs/HackerOne/penn_entertainment

Penn Entertainment

HackerOne·11 in-scope · 5 out·updated 4m ago·RSS

Discord →open program

vdpmanagedopen

first response

—

no reports yet

scope

5 out

asset mix

url

7 url · 2 ios · 1 wildcard

last change

—

no history yet

In scope

011

wildcards01

+*.thescore.com· critical

urls07

+about.thescore.bet· critical

Recent changes

— no diffs detected in snapshot history yet —

Community reports

0 reports

No reports yet — be the first to share your triage timing for Penn Entertainment.

// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.

Your notes

▸ raw source payload

{
  "allows_bounty_splitting": false,
  "average_time_to_bounty_awarded": null,
  "average_time_to_first_program_response": 2,
  "average_time_to_report_resolved": 2178,
  "handle": "penn_entertainment",
  "id": 0,
  "managed_program": true,
  "name": "Penn Entertainment",
  "offers_bounties": false,
  "offers_swag": false,
  "response_efficiency_percentage": 75,
  "submission_state": "open",
  "url": "https://hackerone.com/penn_entertainment",
  "website": "https://www.pennentertainment.com/",
  "targets": {
    "in_scope": [
      {
        "asset_identifier": "*.thescore.com",
        "asset_type": "WILDCARD",
        "availability_requirement": "medium",
        "confidentiality_requirement": "medium",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": "medium",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "285692706",
        "asset_type": "APPLE_STORE_APP_ID",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "6463805689",
        "asset_type": "APPLE_STORE_APP_ID",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "about.thescore.bet",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "com.fivemobile.thescore",
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "hollywoodcasino.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "pennentertainment.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "pennplaycasino.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "thescore.bet",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "thescore.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "thescoreesports.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "critical"
      }
    ],
    "out_of_scope": [
      {
        "asset_identifier": "*.pgs.casino",
        "asset_type": "WILDCARD",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "about.espnbet.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "campaignmanager.thescore.com",
        "asset_type": "URL",
        "availability_requirement": "low",
        "confidentiality_requirement": "low",
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": "low",
        "max_severity": "none"
      },
      {
        "asset_identifier": "com.espn.bet",
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "none"
      },
      {
        "asset_identifier": "espnbet.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": "high",
        "max_severity": "none"
      }
    ]
  }
}

+hollywoodcasino.com· critical