Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
34 in-scope
*.kwsdose.bescope· Tier 3*.playuzleuven.bescope· Tier 3*.uzleuven.*· Tier 3*.contactallerg(y|ie).uzleuven.be· No Bounty*.mir.uzleuven.bescope· No Bounty*dev.uzleuven.be· No Bounty*idp*.uzleuven.be· No Bounty*stag*.uzleuven.be· No Bountyautodiscover.uzleuven.be· Tier 1ecrf.uzleuven.be· Tier 1extranet-asa.uzleuven.be· Tier 1extranet.uzleuven.be· Tier 1liquidfiles.uzleuven.be· Tier 1mx1.uzleuven.be· Tier 1mx2.uzleuven.be· Tier 1pcrstudioruzb.uzleuven.be· Tier 1prddsplunkhf.uzleuven.be· Tier 1sts.uzleuven.be· Tier 1www.uzleuven.be· Tier 1wp5-truststroke.uzleuven.be· Tier 2cardsonline.azdiest.be· Tier 2liquidfilestest.uzleuven.be· Tier 2random.uzleuven.be/random/· Tier 2teststs.uzleuven.be· Tier 2w1.uzleuven.be· Tier 2cardsonlinetst.azdiest.be· Tier 3files.uzleuven.be· No Bountykumulus.uzleuven.be· No Bountymijnacc.uzleuven.be· No Bountymirc.uzleuven.be· No Bountyprddnighting01.uzleuven.be· No Bountyw1.uzleuven.be/random· No Bountyziekenhuisschool.be· No Bounty193.58.149.121,193.58.149.98,193.5…193.58.149.108,193.58.149.111· Tier 2first indexed
92d ago · 34 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for UZ Leuven.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "2cf03670-6a2d-4ac7-8b1e-2e0d84338204",
"url": "https://www.intigriti.com/programs/uz%20leuven/uzleuven/detail",
"name": "UZ Leuven",
"handle": "uzleuven",
"status": "open",
"targets": {
"in_scope": [
{
"type": "url",
"impact": "Tier 1",
"endpoint": "autodiscover.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "ecrf.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "extranet-asa.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "extranet.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "liquidfiles.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "mx1.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "mx2.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "pcrstudioruzb.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "prddsplunkhf.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "sts.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "www.uzleuven.be",
"description": null
},
{
"type": "iprange",
"impact": "Tier 2",
"endpoint": "193.58.149.121,193.58.149.98,193.58.149.82,193.58.149.101,193.58.149.107,193.58.149.108,193.58.149.111",
"description": "These are the ip's used by our reverse proxy.\nThe Host header will determine the bounty tier.\nIf a report is submitted where the Host header is not used we will default to Tier 2."
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "wp5-truststroke.uzleuven.be",
"description": "* access to /api/ should only work from BE or NL ip's\n* access to other paths or / should not work"
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "cardsonline.azdiest.be",
"description": "This webapp should return a http 403 error due to ip whitelisting."
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "liquidfilestest.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "random.uzleuven.be/random/",
"description": null
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "teststs.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "w1.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Tier 3",
"endpoint": "cardsonlinetst.azdiest.be",
"description": "This webapp should return a http 403 error due to ip whitelisting."
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.kwsdose.be",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.playuzleuven.be",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.uzleuven.*",
"description": "#### *.uzleuven.be (tier 3) only applies to everything that hasn't been listed in the scope."
},
{
"type": "wildcard",
"impact": "No Bounty",
"endpoint": "*.contactallerg(y|ie).uzleuven.be",
"description": null
},
{
"type": "wildcard",
"impact": "No Bounty",
"endpoint": "*.mir.uzleuven.be",
"description": null
},
{
"type": "wildcard",
"impact": "No Bounty",
"endpoint": "*dev.uzleuven.be",
"description": null
},
{
"type": "wildcard",
"impact": "No Bounty",
"endpoint": "*idp*.uzleuven.be",
"description": null
},
{
"type": "wildcard",
"impact": "No Bounty",
"endpoint": "*stag*.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "No Bounty",
"endpoint": "files.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "No Bounty",
"endpoint": "kumulus.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "No Bounty",
"endpoint": "mijnacc.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "No Bounty",
"endpoint": "mirc.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "No Bounty",
"endpoint": "prddnighting01.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "No Bounty",
"endpoint": "w1.uzleuven.be/random",
"description": null
},
{
"type": "url",
"impact": "No Bounty",
"endpoint": "ziekenhuisschool.be",
"description": null
}
],
"out_of_scope": [
{
"type": "url",
"impact": "Out of scope",
"endpoint": "boekentoy.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "uz-laboboeken.web.app",
"description": null
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "laboboeken.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "boekentoy.firebaseio.com",
"description": null
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "uz-laboboeken.firebaseio.com",
"description": null
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "jobs.uzleuven.be",
"description": null
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "uzleuven.atlassian.net",
"description": null
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "vacatures.uzleuven.be",
"description": null
}
]
},
"max_bounty": {
"value": 5000,
"currency": "EUR"
},
"min_bounty": {
"value": 50,
"currency": "EUR"
},
"tacRequired": false,
"company_handle": "uz leuven",
"twoFactorRequired": false,
"confidentiality_level": "public"
}