Xiaomi Bug Bounty Program on Hackerone

{ "allows_bounty_splitting": true, "average_time_to_bounty_awarded": 111, "average_time_to_first_program_response": 47, "average_time_to_report_resolved": 536, "handle": "xiaomi", "id": 0, "managed_program": false, "name": "Xiaomi", "offers_bounties": true, "offers_swag": false, "response_efficiency_percentage": 70, "submission_state": "open", "url": "https://hackerone.com/xiaomi", "website": "http://www.mi.com", "targets": { "in_scope": [ { "asset_identifier": "*.airstar-finance.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.airstar.com", "asset_type": "WILDCARD", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "*.airstarfinance.net", "asset_type": "WILDCARD", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "*.aleenote.cn", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.aleenote.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.baoliyun.com", "asset_type": "WILDCARD", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "*.duokan.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.hongyuanib.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.mi.cn", "asset_type": "WILDCARD", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "*.mi.com", "asset_type": "WILDCARD", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "*.mifile.cn", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.migames.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.miinsurtech.cn", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.miinsurtech.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.miinsurtech.net", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.mijiayoupin.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.mioffice.cn", "asset_type": "WILDCARD", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "*.mios.cn", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.miot-spec.org", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.mipay.com", "asset_type": "WILDCARD", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "*.mipay.net", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.miui.cn", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.miui.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.miwifi.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.oktukids.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.openvela.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.wali.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.xiangkankeji.cn", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.xiangkankeji.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.xiangkannews.cn", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.xiaomi.com", "asset_type": "WILDCARD", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "*.xiaomi.net", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.xiaomi.org", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.xiaomiev.com", "asset_type": "WILDCARD", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "*.xiaomimimo.com", "asset_type": "WILDCARD", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "*.xiaomimobile.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.xiaomiprint.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.xiaomiwear.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.xiaomiyoupin.com", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.xunkid.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.xunkids.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.youpin.cn", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.zmifi.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "MIUI OS for Xiaomi Phone", "asset_type": "OTHER", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "MIUI is Xiaomi's phone operating system (OS), customized on stock Android. The scope includes pre-installed apps signed with a Xiaomi certification.", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "Mi Band", "asset_type": "HARDWARE", "availability_requirement": "low", "confidentiality_requirement": "low", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "https://www.mi.com/hk/wearables/", "integrity_requirement": "medium", "max_severity": "high" }, { "asset_identifier": "Mi Electric Scooter ", "asset_type": "HARDWARE", "availability_requirement": "low", "confidentiality_requirement": "low", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "https://www.mi.com/us/mi-electric-scooter/", "integrity_requirement": "medium", "max_severity": "high" }, { "asset_identifier": "Mi Home Webcam ", "asset_type": "HARDWARE", "availability_requirement": "low", "confidentiality_requirement": "low", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "https://www.mi.com/us/mi-home-security-camera/ , https://www.mi.com/in/camera-360/", "integrity_requirement": "medium", "max_severity": "high" }, { "asset_identifier": "Mi Laser Projector", "asset_type": "HARDWARE", "availability_requirement": "low", "confidentiality_requirement": "low", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "https://www.mi.com/us/mi-laser-projector-150/", "integrity_requirement": "medium", "max_severity": "high" }, { "asset_identifier": "Mi Robot Vacuum", "asset_type": "HARDWARE", "availability_requirement": "low", "confidentiality_requirement": "low", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": " https://www.mi.com/hk/mi-robot-vacuum/ ", "integrity_requirement": "medium", "max_severity": "high" }, { "asset_identifier": "Mi TV ", "asset_type": "HARDWARE", "availability_requirement": "low", "confidentiality_requirement": "low", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "https://www.mi.com/in/product-list/tv/", "integrity_requirement": "medium", "max_severity": "high" }, { "asset_identifier": "Mi TV Box", "asset_type": "HARDWARE", "availability_requirement": "low", "confidentiality_requirement": "low", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "https://www.mi.com/us/mi-box-s/", "integrity_requirement": "medium", "max_severity": "high" }, { "asset_identifier": "Mi/Redmi Phone", "asset_type": "HARDWARE", "availability_requirement": "low", "confidentiality_requirement": "low", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "https://www.mi.com/hk/mobile/ ", "integrity_requirement": "medium", "max_severity": "high" }, { "asset_identifier": "Other APK Assets", "asset_type": "OTHER", "availability_requirement": "medium", "confidentiality_requirement": "low", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "com.miui.screenrecorder\ncom.android.providers.telephony\ncom.android.dynsystem\ncom.miui.powerkeeper\ncom.xiaomi.miplay_client\ncom.milink.service\ncom.xiaomi.mi_connect_service\ncom.android.updater\ncom.miui.securityadd\ncom.miui.gallery\ncom.android.mms.service\ncom.miui.msa.global\ncom.android.browser\ncom.miui.videoplayer\ncom.android.soundrecorder\ncom.miui.backup\ncom.miui.notification\ncom.android.certinstaller\ncom.miui.huanji\ncom.miui.hybrid\ncom.miui.vsimcore\ncom.miui.securitycore\ncom.mi.health\ncom.xiaomi.simactivate.service\ncom.miui.phrase\ncom.miui.player\ncom.miui.miservice\ncom.android.provision\ncom.miui.system\ncom.miui.global.packageinstaller\ncom.miui.compass\ncom.miui.cit\ncom.miui.android.fashiongallery\ncom.miui.bugreport\ncom.android.fileexplorer\ncom.android.camera\ncom.xiaomi.glgm\ncom.xiaomi.xmsf\ncom.miui.mishare.connectivity\ncom.miui.freeform\ncom.xiaomi.finddevice\ncom.mi.global.bbs\ncom.xiaomi.joyose\ncom.mi.android.globalFileexplorer\ncom.miui.notes\ncom.miui.wmsvc\ncom.xiaomi.midrop\ncom.miui.touchassistant\ncom.miui.miwallpaper\ncom.xiaomi.bluetooth\ncom.miui.cleanmaster\ncom.miui.analytics\ncom.android.settings\ncom.xiaomi.scanner\ncom.android.phone\ncom.android.deskclock\ncom.android.systemui\ncom.xiaomi.discover\ncom.android.thememanager\ncom.android.bluetooth\ncom.miui.face\ncom.miui.home", "integrity_requirement": "low", "max_severity": "high" }, { "asset_identifier": "Other Hardware Assets", "asset_type": "OTHER", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Accepted ranges of hardware in Xiaomi’s Program include Xiaomi and Mijia products ( these are for assets that are not specified in the Hardware/IoT scope list )", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "com.android.browser", "asset_type": "OTHER_APK", "availability_requirement": "medium", "confidentiality_requirement": "low", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "low", "max_severity": "high" }, { "asset_identifier": "com.mi.global.shop", "asset_type": "OTHER_APK", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "com.miui.cloudbackup", "asset_type": "OTHER_APK", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "com.miui.cloudservice", "asset_type": "OTHER_APK", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "com.miui.micloudsync", "asset_type": "OTHER_APK", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "com.xiaomi.account", "asset_type": "OTHER_APK", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "com.xiaomi.market", "asset_type": "OTHER_APK", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "com.xiaomi.mibrain.speech", "asset_type": "OTHER_APK", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "com.xiaomi.micloud.sdk", "asset_type": "OTHER_APK", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "com.xiaomi.mipicks", "asset_type": "OTHER_APK", "availability_requirement": null, "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.xiaomi.payment", "asset_type": "OTHER_APK", "availability_requirement": null, "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.xiaomi.smarthome", "asset_type": "OTHER_APK", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": "high", "max_severity": "critical" } ], "out_of_scope": [] } }

Xiaomi

In scope

Recent changes

Community reports

Your notes

Out of scope