Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
6 in-scope
All domains or subdomains not list…in the above list of 'Scopes'other- Any reports relating to improper… this was intended by design.otherfirst indexed
91d ago · 6 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Moneybox Bug Bounty.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "moneybox-bug-bounty",
"name": "Moneybox Bug Bounty",
"public": true,
"managed": null,
"targets": {
"in_scope": [
{
"type": "api",
"target": "https://api.moneyboxapp.com"
},
{
"type": "web-application",
"target": "https://admin.moneyboxapp.org"
},
{
"type": "web-application",
"target": "https://admin-roundups.moneyboxapp.org"
},
{
"type": "mobile-application-ios",
"target": "https://apps.apple.com/gb/app/moneybox-save-and-invest/id1049797239"
},
{
"type": "mobile-application-android",
"target": "https://play.google.com/store/apps/details?id=com.moneyboxapp"
},
{
"type": "web-application",
"target": "https://sycamore.moneyboxapp.org"
}
],
"out_of_scope": [
{
"type": "other",
"target": "All domains or subdomains not listed in the above list of 'Scopes'"
},
{
"type": "other",
"target": "- Any reports relating to improper authorization / information disclosure on api.moneyboxapp.com through /investment/payments/GetGiftUser/{code} and PII leak or sensitive data exposure is out of scope as this was intended by design."
}
]
},
"disabled": false,
"max_bounty": 2000,
"min_bounty": 50
}