doctolib-public-bug-bounty-program
9
In Scope
26
Out of Scope
In-Scope Assets (9)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.doctolib.(fr|de|it|com|net) | URL | Yes | ||
| *.siilo.com | OTHER | Yes | - | |
| Special scenarios (see description) | URL | Yes | - | |
| http://play.google.com/store/apps/details?id=fr.doctolib.www | ANDROID | Yes | ||
| https://apps.apple.com/fr/app/doctolib/id925339063 | IOS | Yes | - | |
| https://apps.apple.com/ie/app/doctolib-siilo/id1083002150 | IOS | Yes | - | |
| https://play.google.com/store/apps/details?id=com.siilo.android&hl=en | ANDROID | Yes | ||
| pro.doctolib.(fr|de|it) (see "Free features for healthcare professionals")) | URL | Yes | - | |
| www.doctolib.(fr|de|it) | URL | Yes |
Out-of-Scope Assets (26)
| Asset | Category | Bounty | |
|---|---|---|---|
| Any *.sslip.io, *.nip.io, AWS ELB / load-balancer hostname, or raw IPv4 / IPv6 address | OTHER | Yes | |
| Craft CMS on www.siilo.com, plus siilo.com marketing / staging sub-domains (l.siilo.com, l-dev.siilo.com, web.siilo.com, web-dev.siilo.com, www-admin.siilo.com, mjt-dev.siilo.com, att-dev-nl.siilo.com, sandbox-nl.siilo.com, connect.siilo.com, prod-nl-web.siilo.com) | OTHER | Yes | |
| Look-alike, typo-squatting or expired domains not owned by Doctolib (e.g. www.dioctolib.de, doctolib.fr.evil.com, doctodketest.tk, doctolib-poc.partner-experience.com) | OTHER | Yes | |
| Note: should you discover a critical issue within an asset that falls outside the program's scope, we would appreciate it and may choose to offer a reward at our discretion. | OTHER | Yes | |
| Public GitHub repositories we do not own (such as student projects doing) | OTHER | Yes | |
| There is no IDOR on /api/security/tanker_groups via subject_id | OTHER | Yes | |
| Third-party assets linked from our products (e.g. login.decathlon.net, wallet.esw.esante.gouv.fr, preprod.alaxione.fr, hooks.zapier.com, cron.signitic.app, job-boards.greenhouse.io, docto.digitalstack.it, and any hospital-specific or customer-specific host) | OTHER | Yes | |
| api.tanker.io (Accessing the tanker private key is normal functioning of the Tanker protocol) | OTHER | Yes | |
| billing-client-logs.billing.doctolib.fr | api-external.datascience.doctolibdata.com | OTHER | Yes | |
| community.doctolib.com | .fr | .de | .it | OTHER | Yes | |
| developers.doctolib.com | OTHER | Yes | |
| dmp.doctolib.fr | dmp-prd-aws-*.doctolib.fr | OTHER | Yes | |
| doctocommit.doctolib.fr | OTHER | Yes | |
| doctolib-ps-ehr-downloads.s3.amazonaws.com | OTHER | Yes | |
| doctolib.atlassian.net and any *.atlassian.net path | OTHER | Yes | |
| doctolib.zendesk.com | siilo.zendesk.com | OTHER | Yes | |
| exceptions.doctolib.fr | .de | OTHER | Yes | |
| fb.doctolib.com | fb-dev.doctolib.fr | OTHER | Yes | |
| fm.doctolib.fr | fm.doctolib.it | voip.doctolib.de and other decommissioned / dangling Doctolib sub-domains | OTHER | Yes | |
| info.doctolib.com | .fr | .de | .it | OTHER | Yes | |
| media.doctolib.com | OTHER | Yes | |
| pro-app.doctolib.com | OTHER | Yes | |
| share.doctolib.net | OTHER | Yes | |
| status.doctolib.com | .fr | .it | OTHER | Yes | |
| store.doctolib.com | OTHER | Yes | |
| vettore.it and any related Vettore assets | OTHER | Yes |