— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for GoTo Financial - Public Bounty Program.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"id": "goto-financial-public-bounty-program",
"name": "GoTo Financial - Public Bounty Program",
"public": true,
"disabled": false,
"managed": null,
"min_bounty": 5,
"max_bounty": 5000,
"targets": {
"in_scope": [
{
"target": "https://apps.apple.com/id/app/gopay-transfer-pulsa-bills/id6446321594",
"type": "mobile-application-ios"
},
{
"target": "https://play.google.com/store/apps/details?id=com.gojek.gopay&hl=id",
"type": "mobile-application-android"
},
{
"target": "*.gopayapi.com",
"type": "wildcard"
},
{
"target": "gopaymerchant.midtrans.com",
"type": "web-application"
},
{
"target": "mokapos.com",
"type": "web-application"
},
{
"target": "*.go-pay.co.id",
"type": "wildcard"
},
{
"target": "api.midtrans.com",
"type": "api"
},
{
"target": "app.midtrans.com",
"type": "web-application"
},
{
"target": "www.midtrans.com",
"type": "web-application"
},
{
"target": "*.gaming.gopayapi.com",
"type": "wildcard"
},
{
"target": "*.findaya.com",
"type": "wildcard"
},
{
"target": "*.findaya.co.id",
"type": "wildcard"
},
{
"target": "*.gtflabs.io",
"type": "wildcard"
},
{
"target": "*.mab.co.id",
"type": "wildcard"
}
],
"out_of_scope": [
{
"target": "- Any staging environment will be out of scope (staging domain could be indicated by words like test/integration/staging, etc)",
"type": "other"
},
{
"target": "- All other Goto Financial assets not listed above are to be considered as out of scope",
"type": "other"
}
]
}
}- Any staging environment will be …est/integration/staging, etc)other- All other Goto Financial assets …be considered as out of scopeother