VRT

{
  "id": "3219ed72-e563-458d-aafd-9ce8ca4e3087",
  "name": "VRT",
  "company_handle": "vrtnv",
  "handle": "vrtnv",
  "url": "https://www.intigriti.com/programs/vrtnv/vrtnv/detail",
  "status": "open",
  "confidentiality_level": "public",
  "tacRequired": false,
  "twoFactorRequired": false,
  "min_bounty": {
    "value": 100,
    "currency": "EUR"
  },
  "max_bounty": {
    "value": 2000,
    "currency": "EUR"
  },
  "targets": {
    "in_scope": [
      {
        "type": "other",
        "endpoint": "API's",
        "description": "*  vrt.be/vrtnu-api/graphql/v1\n*  vrt.be/vrtnu-api/graphql/public/v1\n*  vrtnws-api.vrt.be\n*  api.sporza.be",
        "impact": "Tier 2"
      },
      {
        "type": "other",
        "endpoint": "Sockets",
        "description": "* wss://messaging.vrt.be/",
        "impact": "Tier 2"
      },
      {
        "type": "other",
        "endpoint": "Mobile Applications",
        "description": "[VRT MAX iOS App](https://apps.apple.com/us/app/vrt-max/id1337574835)\n[VRT MAX Android App](https://play.google.com/store/apps/details?id=be.vrt.vrtnu)\n[VRT NWS iOS App](https://apps.apple.com/us/app/vrt-nws/id952769219)\n[VRT NWS Android App](https://play.google.com/store/apps/details?id=be.vrt.mobile.android.deredactie)\n[Sporza iOS App](https://apps.apple.com/us/app/sporza/id878339906)\n[Sporza Android App](https://play.google.com/store/apps/details?id=com.fwc2014.vrt.and)\n[Ketnet Junior iOS App](https://apps.apple.com/us/app/ketnet-junior/id1001982587)\n[Ketnet Junior Android App](https://play.google.com/store/apps/details?id=be.vrt.ketnet.ketnetjr)",
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "player.vrt.be",
        "description": "Mediaplayer implementation.",
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "profiel.vrt.be",
        "description": "VRT-profile with Single Sign On implementation",
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "sporza.be",
        "description": "Sporza is the brand name for all VRT sports broadcasts on radio, television, internet and multimedia.",
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "vrt.be/interactie/121-chat/",
        "description": "VRT's future messaging platform. It allows users to send chat messages and images with radio-station hosts. In the future, new features will be added like video upload, polls, group chat, ...\n\nTo be able to use the messaging platform, you have to register for a VRT profile.",
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "vrt.be/vrtmax",
        "description": "VRT's online video platform. It allows its users to (re-)watch television programs of its brands één, Canvas and Ketnet on the internet. \n\nTo be able to fully use VRT MAX, you have to register for a VRT profile. Using all of VRT MAX's content is only possible for users with a Belgian residential address. Without the login, you can still watch the live channels.",
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "vrt.be/vrtnws",
        "description": "VRT NWS is the news brand of VRT. Informing the Flemish citizen is an essential part of it's job.",
        "impact": "Tier 2"
      },
      {
        "type": "other",
        "endpoint": "Brand Sites",
        "description": "All brand sites owned by VRT.\n\nThe main site www.vrt.be and www.vrt.be/* is also \"No bounty\" (except paths in the \"in scope\" section)",
        "impact": "No Bounty"
      }
    ],
    "out_of_scope": [
      {
        "type": "url",
        "endpoint": "cds.vrt.radio",
        "description": "The cds domain for VRT radio sites.",
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "innovatie.vrt.be",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "wildcard",
        "endpoint": "shop.*.be",
        "description": null,
        "impact": "Out of scope"
      }
    ]
  }
}