Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
10 in-scope
Out-Of-Scope are also other applic…page is completely different)otherThose include but are not limited … before executing the tests):otherwww.otto.de/reblogotherwww.otto.de/roombeezotherwww.otto.de/twoforfashionotherwww.otto.de/soulfullyotherwww.otto.de/updatedotherwww.otto.de/newsroomotherwww.otto.de/kundenchatotherwww.otto.de/claraotherwww.otto.de/user/sendcallbackrequestotherwww.otto.de/user/contactFormSubmitotherkeycloak.apps.otto.deotherAll domains not listed In-Scopeother/apps-messenger (the chatbot in general is out of scope)other/trackingotherPlease let us know if you have any…uestions regarding the scope.other+ added 1 scope · https://www.teleoptiprd.otto.de
− removed 1 scope · https://teleoptiprd.otto.de
8d ago
first indexed
92d ago · 10 in-scope assets
No reports yet. Be the first to share your triage timing for OTTO.DE Bug Bounty.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "otto-de-bug-bounty",
"name": "OTTO.DE Bug Bounty",
"public": true,
"managed": null,
"targets": {
"in_scope": [
{
"type": "web-application",
"target": "https://www.otto.de"
},
{
"type": "web-application",
"target": "https://www.otto.de/jobs"
},
{
"type": "mobile-application-android",
"target": "https://play.google.com/store/apps/details?id=de.cellular.ottohybrid&hl=de"
},
{
"type": "mobile-application-ios",
"target": "https://apps.apple.com/de/app/otto-shopping-m%C3%B6bel/id404844644"
},
{
"type": "web-application",
"target": "https://www.lascana.de/"
},
{
"type": "web-application",
"target": "https://www.teleoptiprd.otto.de"
},
{
"type": "web-application",
"target": "https://mmp.otto.de"
},
{
"type": "web-application",
"target": "https://orbidder.otto.de"
},
{
"type": "web-application",
"target": "https://supplier-connect.otto.de"
},
{
"type": "web-application",
"target": "https://retail-api.otto.de"
}
],
"out_of_scope": [
{
"type": "other",
"target": "Out-Of-Scope are also other applications hosted under the www.otto.de domain but have a different path, that is not part of our core online shop itself (you will notice, since the design of the page is completely different)"
},
{
"type": "other",
"target": "Those include but are not limited to (if unsure, contact us before executing the tests):"
},
{
"type": "other",
"target": "https://www.otto.de/reblog"
},
{
"type": "other",
"target": "https://www.otto.de/roombeez"
},
{
"type": "other",
"target": "https://www.otto.de/twoforfashion"
},
{
"type": "other",
"target": "https://www.otto.de/soulfully"
},
{
"type": "other",
"target": "https://www.otto.de/updated"
},
{
"type": "other",
"target": "https://www.otto.de/newsroom"
},
{
"type": "other",
"target": "https://www.otto.de/kundenchat"
},
{
"type": "other",
"target": "https://www.otto.de/clara"
},
{
"type": "other",
"target": "https://www.otto.de/user/sendcallbackrequest"
},
{
"type": "other",
"target": "https://www.otto.de/user/contactFormSubmit"
},
{
"type": "other",
"target": "https://keycloak.apps.otto.de"
},
{
"type": "other",
"target": "All domains not listed In-Scope"
},
{
"type": "other",
"target": "/apps-messenger (the chatbot in general is out of scope)"
},
{
"type": "other",
"target": "/tracking"
},
{
"type": "other",
"target": "Please let us know if you have any questions regarding the scope."
}
]
},
"disabled": false,
"max_bounty": 2500,
"min_bounty": 50
}