Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Snapchat.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 394,
"average_time_to_first_program_response": 13,
"average_time_to_report_resolved": 1493,
"handle": "snapchat",
"id": 0,
"managed_program": false,
"name": "Snapchat",
"offers_bounties": true,
"offers_swag": false,
"response_efficiency_percentage": 93,
"submission_state": "open",
"url": "https://hackerone.com/snapchat",
"website": "https://www.snapchat.com/",
"targets": {
"in_scope": [
{
"asset_identifier": "*.sc-core.net",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Snapchat's internal services",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "*.sc-corp.net",
"asset_type": "OTHER",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "Lens Studio",
"asset_type": "DOWNLOADABLE_EXECUTABLES",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "Tier A - Core Assets",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "Tier B - Non Core (Bitmoji, Playcanvas)",
"asset_type": "OTHER",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "accounts.snapchat.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[Core asset]\nSnapchat's account management website. ",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "ads.snapchat.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "medium",
"max_severity": "high"
},
{
"asset_identifier": "app.snapchat.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[Core asset]\nMain server-side application hosted on Google App Engine under the hostname feelinsonice-hrd.appspot.com and app.snapchat.com.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "blog.playcanvas.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "business.snapchat.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Snapchat's Business Manager. ",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "businesshelp.snapchat.com",
"asset_type": "URL",
"availability_requirement": "medium",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Snapchat's Salesforce instance",
"integrity_requirement": "low",
"max_severity": "high"
},
{
"asset_identifier": "code.playcanvas.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "com.bitstrips.imoji",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[Non-core asset]\n[iOS App Store](https://itunes.apple.com/us/app/bitmoji-keyboard-your-avatar/id868077558)",
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "com.bitstrips.imoji",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[Non-core asset]\n[Google Play Store](https://play.google.com/store/apps/details?id=com.bitstrips.imoji)",
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "com.snapchat.android",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": "low",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[Core asset]\n[Google Play Store](https://play.google.com/store/apps/details?id=com.snapchat.android)",
"integrity_requirement": "low",
"max_severity": "critical"
},
{
"asset_identifier": "com.toyopagroup.picaboo",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": "low",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[Core asset]\n[iOS App Store](https://itunes.apple.com/us/app/snapchat/id447188370?mt=8)",
"integrity_requirement": "low",
"max_severity": "high"
},
{
"asset_identifier": "create.snapchat.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Snapchat's Geofilter creation tool. ",
"integrity_requirement": "low",
"max_severity": "high"
},
{
"asset_identifier": "developer.playcanvas.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "forum.playcanvas.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "geofilters.snapchat.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[Core asset]\nSnapchat's on-demand Geofilters purchase website. ",
"integrity_requirement": "low",
"max_severity": "high"
},
{
"asset_identifier": "https://lensstudio.snapchat.com/api/",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "kit.snapchat.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[Core asset]\nSNAPKIT web application and SDKs",
"integrity_requirement": "low",
"max_severity": "high"
},
{
"asset_identifier": "launch.playcanvas.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "login.playcanvas.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "map.snapchat.com",
"asset_type": "URL",
"availability_requirement": "none",
"confidentiality_requirement": "none",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "low",
"max_severity": "low"
},
{
"asset_identifier": "msg.playcanvas.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "my.snapchat.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Snapchat's Spotlight on the web. ",
"integrity_requirement": "low",
"max_severity": "high"
},
{
"asset_identifier": "playcanv.as",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "playcanvas.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "relay.playcanvas.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "rt.playcanvas.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "scan.snapchat.com",
"asset_type": "URL",
"availability_requirement": "none",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[Core asset]\nSnapcode creation website",
"integrity_requirement": "none",
"max_severity": "low"
},
{
"asset_identifier": "snappublisher.snapchat.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[Core asset]\nSnapchat's publisher tool. ",
"integrity_requirement": "low",
"max_severity": "high"
},
{
"asset_identifier": "spectacles.com",
"asset_type": "URL",
"availability_requirement": "none",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[Core asset]\nSnapchat's spectacles purchase website. ",
"integrity_requirement": "none",
"max_severity": "low"
},
{
"asset_identifier": "store.playcanvas.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "store.snapchat.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Snapchat's Bitmoji Merch Store",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "story.snapchat.com",
"asset_type": "URL",
"availability_requirement": "none",
"confidentiality_requirement": "none",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "low",
"max_severity": "low"
},
{
"asset_identifier": "web.snapchat.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "www.bitmoji.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[Non-core asset]",
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "www.bitstrips.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[Non-core asset]",
"integrity_requirement": "low",
"max_severity": "medium"
}
],
"out_of_scope": [
{
"asset_identifier": "Spectacles",
"asset_type": "HARDWARE",
"availability_requirement": "low",
"confidentiality_requirement": "medium",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "none"
},
{
"asset_identifier": "Spectacles charging case",
"asset_type": "HARDWARE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "dev.playcanv.as",
"asset_type": "URL",
"availability_requirement": "none",
"confidentiality_requirement": "none",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": "none",
"max_severity": "none"
},
{
"asset_identifier": "http://dev*.playcanvas.com",
"asset_type": "WILDCARD",
"availability_requirement": "none",
"confidentiality_requirement": "none",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": "none",
"max_severity": "none"
},
{
"asset_identifier": "returns.spectacles.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "returns.spectacles.com application is owned and managed by Netsuite. Please consider reporting vulnerabilities directly to them.",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "support.snapchat.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "Static support website",
"integrity_requirement": null,
"max_severity": "none"
}
]
}
}geofilters.snapchat.com· highkit.snapchat.com· highlaunch.playcanvas.com· mediumlogin.playcanvas.com· mediummap.snapchat.com· lowmsg.playcanvas.com· mediummy.snapchat.com· highplaycanv.as· mediumplaycanvas.com· mediumrelay.playcanvas.com· mediumrt.playcanvas.com· mediumscan.snapchat.com· lowsnappublisher.snapchat.com· highspectacles.com· lowstore.playcanvas.com· mediumstore.snapchat.com· criticalstory.snapchat.com· lowweb.snapchat.com· criticalwww.bitmoji.com· mediumwww.bitstrips.com· medium*.sc-corp.net· criticalLens Studio· mediumTier A - Core Assets· criticalTier B - Non Core (Bitmoji, Playcanvas)· mediumcom.bitstrips.imoji· mediumcom.snapchat.android· criticalSpectaclesSpectacles charging case