bounty.index

/to search

Live data paused. Neon is grumpy. Programs still load from the upstream mirror; watchlists and alerts are taking a nap.

Featured on

Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates

programs/Intigriti/uzleuven

UZ Leuven

Intigriti·payout €50 – €5.0K·34 in-scope · 8 out·updated 55m ago·RSS

Discord →open program

bountyopen

first response

—

no reports yet

scope

8 out

asset mix

url

25 url · 8 wildcard · 1 other

last change

—

no history yet

In scope

034

wildcards08

Recent changes

— no diffs detected in snapshot history yet —

Community reports

0 reports

No reports yet — be the first to share your triage timing for UZ Leuven.

// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.

Your notes

▸ raw source payload

{
  "id": "2cf03670-6a2d-4ac7-8b1e-2e0d84338204",
  "name": "UZ Leuven",
  "company_handle": "uz leuven",
  "handle": "uzleuven",
  "url": "https://www.intigriti.com/programs/uz%20leuven/uzleuven/detail",
  "status": "open",
  "confidentiality_level": "public",
  "tacRequired": false,
  "twoFactorRequired": false,
  "min_bounty": {
    "value": 50,
    "currency": "EUR"
  },
  "max_bounty": {
    "value": 5000,
    "currency": "EUR"
  },
  "targets": {
    "in_scope": [
      {
        "type": "url",
        "endpoint": "autodiscover.uzleuven.be",
        "description": null,
        "impact": "Tier 1"
      },
      {
        "type": "url",
        "endpoint": "ecrf.uzleuven.be",
        "description": null,
        "impact": "Tier 1"
      },
      {
        "type": "url",
        "endpoint": "extranet-asa.uzleuven.be",
        "description": null,
        "impact": "Tier 1"
      },
      {
        "type": "url",
        "endpoint": "extranet.uzleuven.be",
        "description": null,
        "impact": "Tier 1"
      },
      {
        "type": "url",
        "endpoint": "liquidfiles.uzleuven.be",
        "description": null,
        "impact": "Tier 1"
      },
      {
        "type": "url",
        "endpoint": "mx1.uzleuven.be",
        "description": null,
        "impact": "Tier 1"
      },
      {
        "type": "url",
        "endpoint": "mx2.uzleuven.be",
        "description": null,
        "impact": "Tier 1"
      },
      {
        "type": "url",
        "endpoint": "pcrstudioruzb.uzleuven.be",
        "description": null,
        "impact": "Tier 1"
      },
      {
        "type": "url",
        "endpoint": "prddsplunkhf.uzleuven.be",
        "description": null,
        "impact": "Tier 1"
      },
      {
        "type": "url",
        "endpoint": "sts.uzleuven.be",
        "description": null,
        "impact": "Tier 1"
      },
      {
        "type": "url",
        "endpoint": "www.uzleuven.be",
        "description": null,
        "impact": "Tier 1"
      },
      {
        "type": "iprange",
        "endpoint": "193.58.149.121,193.58.149.98,193.58.149.82,193.58.149.101,193.58.149.107,193.58.149.108,193.58.149.111",
        "description": "These are the ip's used by our reverse proxy.\nThe Host header will determine the bounty tier.\nIf a report is submitted where the Host header is not used we will default to Tier 2.",
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "wp5-truststroke.uzleuven.be",
        "description": "* access to /api/ should only work from BE or NL ip's\n* access to other paths or / should not work",
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "cardsonline.azdiest.be",
        "description": "This webapp should return a http 403 error due to ip whitelisting.",
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "liquidfilestest.uzleuven.be",
        "description": null,
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "random.uzleuven.be/random/",
        "description": null,
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "teststs.uzleuven.be",
        "description": null,
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "w1.uzleuven.be",
        "description": null,
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "cardsonlinetst.azdiest.be",
        "description": "This webapp should return a http 403 error due to ip whitelisting.",
        "impact": "Tier 3"
      },
      {
        "type": "wildcard",
        "endpoint": "*.kwsdose.be",
        "description": null,
        "impact": "Tier 3"
      },
      {
        "type": "wildcard",
        "endpoint": "*.playuzleuven.be",
        "description": null,
        "impact": "Tier 3"
      },
      {
        "type": "wildcard",
        "endpoint": "*.uzleuven.*",
        "description": "#### *.uzleuven.be (tier 3) only applies to everything that hasn't been listed in the scope.",
        "impact": "Tier 3"
      },
      {
        "type": "wildcard",
        "endpoint": "*.contactallerg(y|ie).uzleuven.be",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "wildcard",
        "endpoint": "*.mir.uzleuven.be",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "wildcard",
        "endpoint": "*dev.uzleuven.be",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "wildcard",
        "endpoint": "*idp*.uzleuven.be",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "wildcard",
        "endpoint": "*stag*.uzleuven.be",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "files.uzleuven.be",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "kumulus.uzleuven.be",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "mijnacc.uzleuven.be",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "mirc.uzleuven.be",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "prddnighting01.uzleuven.be",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "w1.uzleuven.be/random",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "ziekenhuisschool.be",
        "description": null,
        "impact": "No Bounty"
      }
    ],
    "out_of_scope": [
      {
        "type": "url",
        "endpoint": "boekentoy.uzleuven.be",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "uz-laboboeken.web.app",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "laboboeken.uzleuven.be",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "boekentoy.firebaseio.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "uz-laboboeken.firebaseio.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "jobs.uzleuven.be",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "uzleuven.atlassian.net",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "vacatures.uzleuven.be",
        "description": null,
        "impact": "Out of scope"
      }
    ]
  }
}