Bühler Group VDP

{
  "id": "4afd6f0f-40a3-4f6d-a332-56b5970d12a0",
  "name": "Bühler Group VDP",
  "company_handle": "buhlergroup",
  "handle": "buhlergroupvdp",
  "url": "https://www.intigriti.com/programs/buhlergroup/buhlergroupvdp/detail",
  "status": "open",
  "confidentiality_level": "public",
  "tacRequired": false,
  "twoFactorRequired": false,
  "min_bounty": {
    "value": 0,
    "currency": "EUR"
  },
  "max_bounty": {
    "value": 0,
    "currency": "EUR"
  },
  "targets": {
    "in_scope": [
      {
        "type": "wildcard",
        "endpoint": "*.buhlergroup.com",
        "description": "- Our main domain containing hundreds of subdomains/assets. Can be customer facing websites and services but also assets for internal purposes\n- For assets requiring authentication, please refer to the FAQ section",
        "impact": "No Bounty"
      },
      {
        "type": "wildcard",
        "endpoint": "*.pk-buhler.ch",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "wildcard",
        "endpoint": "*.buhler-datascience.ch",
        "description": "- containing subdomains/assets specific to our data science team\n- For assets requiring authentication, please refer to the FAQ section",
        "impact": "No Bounty"
      },
      {
        "type": "wildcard",
        "endpoint": "*.buhlercloud.com",
        "description": "- containing subdomains/assets related to a customer facing web application\n- For assets requiring authentication, please refer to the FAQ section",
        "impact": "No Bounty"
      },
      {
        "type": "wildcard",
        "endpoint": "*.buhlergroup.ai",
        "description": "- containing subdomains/assets related to customer facing AI services\n- For assets requiring authentication, please refer to the FAQ section",
        "impact": "No Bounty"
      },
      {
        "type": "wildcard",
        "endpoint": "*.buhlergroup.cn",
        "description": "- containing subdomains/assets located in our Chinese locations. Mainly IT systems related to internal purposes.\n- For assets requiring authentication, please refer to the FAQ section",
        "impact": "No Bounty"
      },
      {
        "type": "wildcard",
        "endpoint": "*.buhlergroup.io",
        "description": "- containing subdomains/assets related to customer facing digital services\n- For assets requiring authentication, please refer to the FAQ section",
        "impact": "No Bounty"
      },
      {
        "type": "wildcard",
        "endpoint": "*.buhlertest.ch",
        "description": "- containing subdomains/assets of test systems\n- For assets requiring authentication, please refer to the FAQ section",
        "impact": "No Bounty"
      },
      {
        "type": "iprange",
        "endpoint": "194.9.120.0 - 194.9.123.255",
        "description": "- This is our public IP range used for systems located in the DMZ. (Sub)domains listed above may point to IPs in this range but there are also other types of assets such as network devices.\n- For assets requiring authentication, please refer to the FAQ section",
        "impact": "No Bounty"
      }
    ],
    "out_of_scope": [
      {
        "type": "url",
        "endpoint": "kroki.devops.buhlergroup.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "puml.devops.buhlergroup.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "wildcard",
        "endpoint": "*.info.buhlergroup.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "wildcard",
        "endpoint": "*.learnhub.buhlergroup.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "wildcard",
        "endpoint": "*.virtualworld-portal.buhlergroup.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "wildcard",
        "endpoint": "*.virtualworld.buhlergroup.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "wildcard",
        "endpoint": "*.webinars.buhlergroup.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "bestbuy.buhlergroup.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "channel.buhlergroup.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "gitlab.buhler-datascience.ch/api/v4/projects",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "imap.buhlergroup.cn",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "pop.buhlergroup.cn",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "smtp.buhlergroup.cn",
        "description": null,
        "impact": "Out of scope"
      }
    ]
  }
}