how we sort the index, not an estimate of what you’ll earn
Attack surface
13 in-scope
*.swisspass.chscope· Tier 2*.sbb.chscope· Tier 3*elvetino.ch· Tier 3*sbbcargo.com· Tier 3*transsicura.ch· Tier 3www.sbb.ch· Tier 2www.elvetino.ch· Tier 3www.sbbcargo.com· Tier 3www.transsicura.ch· Tier 3Mobile Apps· Tier 1Mobile Apps· Tier 3All other Web and mobile APPs owned by SBBAll other SBB owned IT assets· No Bountynone listed
+ added 3 scopes · *elvetino.ch, *sbbcargo.com, *transsicura.ch
64d ago
first indexed
92d ago · 10 in-scope assets
No reports yet. Be the first to share your triage timing for SBB - Swiss Federal Railways.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "196fa177-ac2d-41b0-91bb-07bc9db43b7a",
"url": "https://www.intigriti.com/programs/sbb/sbbglobal/detail",
"name": "SBB - Swiss Federal Railways",
"handle": "sbbglobal",
"status": "open",
"targets": {
"in_scope": [
{
"type": "other",
"impact": "Tier 1",
"endpoint": " Mobile Apps",
"description": "**SBB Mobile** - your personal travel companion for public transport.\n[SBB Mobile IOS](https://apps.apple.com/us/app/sbb-mobile/id294855237) | [SBB Mobile Android](https://play.google.com/store/apps/details?id=ch.sbb.mobile.android.b2c&feature=search_result&hl=en)\n\n**SBB Preview** - [always be among the first to test the latest features.](https://www.sbb.ch/en/travel-information/apps/sbb-preview.html)\n[SBB Preview IOS](https://apps.apple.com/us/app/sbb-preview/id1074833098) | [SBB Preview Android](https://play.google.com/store/apps/details?id=ch.sbb.mobile.android.preview)\n\n**Backend URLs**\n[*.sbbmobile.ch]()\n\nPlease find more details about the apps in the\n[FAQ for SBB Mobile and SBB Preview](https://www.sbb.ch/en/help-and-contact/products-services/apps/sbb-mobile-sbb-preview/sbb-mobile-app.html)"
},
{
"type": "wildcard",
"impact": "Tier 2",
"endpoint": "*.swisspass.ch",
"description": "[Swisspass](https://www.swisspass.ch/home?lang=en) is the key to mobility in Switzerland.\n\nWith SwissPass customers can manage their travelcard details easily and use the partner services.\n\nPlease note that the following URL scheme is excluded from the program: `https://mailing.swisspass.ch/r/wxmc/swisspass/{20-chars}/{20-chars}/{13-chars}/{26-chars}`"
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "www.sbb.ch",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.sbb.ch",
"description": "Please note that the following URL scheme is excluded from the program: `https://order.info.sbb.ch/r/wxmc/sbb/{20-chars}/{20-chars}/{13-chars}/{26-chars}`"
},
{
"type": "other",
"impact": "Tier 3",
"endpoint": "Mobile Apps",
"description": "**SBB Freesurf** - browse the web for free on the train.\n[SBB Freesurf IOS](https://apps.apple.com/us/app/sbb-freesurf/id1437409619) | [SBB Freesurf Android](https://play.google.com/store/search?q=freesurf&c=apps&hl=en)\n\n**SBB GO** - as a study paricipant, you can record your customer journey with the SBB go app and evaluate SBB Touchpoints along your journey.\n[SBB GO IOS](https://apps.apple.com/ch/app/sbb-go/id1224135762) | [SBB GO Android](https://play.google.com/store/apps/details?id=ch.sbb.kd.kom.sbbgo)\n\n**SBB Inclusive** - provides visual and digital customer information in stations and on SBB long-distance services\n[SBB Inclusive IOS](https://apps.apple.com/ch/app/sbb-inclusive/id1495023290) | [SBB Inclusive Android](https://play.google.com/store/apps/details?id=ch.sbb.inclusive&hl=en)\n\n**SBB P-Rail** - [your parking space at the station](https://www.sbb.ch/en/tickets-offers/private-transport/car-parking/park-and-rail.html)\n[P+Rail IOS](https://apps.apple.com/us/app/p-rail/id1355008152) | [P+Rail Android](https://play.google.com/store/apps/details?id=ch.sbb.prail2&hl=en_US&gl=US&pli=1=)"
},
{
"type": "url",
"impact": "Tier 3",
"endpoint": "www.elvetino.ch",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*elvetino.ch",
"description": null
},
{
"type": "url",
"impact": "Tier 3",
"endpoint": "www.sbbcargo.com",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*sbbcargo.com",
"description": null
},
{
"type": "url",
"impact": "Tier 3",
"endpoint": "www.transsicura.ch",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*transsicura.ch",
"description": null
},
{
"type": "other",
"impact": null,
"endpoint": "All other Web and mobile APPs owned by SBB ",
"description": null
},
{
"type": "other",
"impact": "No Bounty",
"endpoint": "All other SBB owned IT assets",
"description": null
}
],
"out_of_scope": []
},
"max_bounty": {
"value": 6666,
"currency": "EUR"
},
"min_bounty": {
"value": 25,
"currency": "EUR"
},
"tacRequired": false,
"company_handle": "sbb",
"twoFactorRequired": false,
"confidentiality_level": "public"
}