Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
5 in-scope
All domains, subdomains, apps not listed in-scopeotherfirst indexed
92d ago · 5 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for DECATHLON.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "decathlon",
"name": "DECATHLON",
"public": true,
"managed": null,
"targets": {
"in_scope": [
{
"type": "mobile-application-ios",
"target": "https://apps.apple.com/fr/app/decathlon-shopping/id1168607403"
},
{
"type": "mobile-application-android",
"target": "https://play.google.com/store/apps/details?id=com.decathlon.app"
},
{
"type": "api",
"target": "https://(navigate|engage|checkout|internal|cached-api|api).shoppingapp.decathlon.com/*"
},
{
"type": "web-application",
"target": "https://www.decathlon.(fr|ch|co.uk|it|nl|de|pt|es|be|pl|cz|ca)/"
},
{
"type": "web-application",
"target": "https://www.decathlon.(hu|ro|com.tr)/"
}
],
"out_of_scope": [
{
"type": "other",
"target": "All domains, subdomains, apps not listed in-scope"
}
]
},
"disabled": false,
"max_bounty": 2500,
"min_bounty": 50
}