otto-de-bug-bounty
10
In Scope
17
Out of Scope
In-Scope Assets (10)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| https://apps.apple.com/de/app/otto-shopping-m%C3%B6bel/id404844644 | IOS | Yes | - | |
| https://mmp.otto.de | URL | Yes | ||
| https://orbidder.otto.de | URL | Yes | ||
| https://play.google.com/store/apps/details?id=de.cellular.ottohybrid&hl=de | ANDROID | Yes | ||
| https://retail-api.otto.de | URL | Yes | ||
| https://supplier-connect.otto.de | URL | Yes | ||
| https://teleoptiprd.otto.de | URL | Yes | ||
| https://www.lascana.de/ | URL | Yes | ||
| https://www.otto.de | URL | Yes | ||
| https://www.otto.de/jobs | URL | Yes |
Out-of-Scope Assets (17)
| Asset | Category | Bounty | |
|---|---|---|---|
| /apps-messenger (the chatbot in general is out of scope) | OTHER | Yes | |
| /tracking | OTHER | Yes | |
| All domains not listed In-Scope | OTHER | Yes | |
| Out-Of-Scope are also other applications hosted under the www.otto.de domain but have a different path, that is not part of our core online shop itself (you will notice, since the design of the page is completely different) | OTHER | Yes | |
| Please let us know if you have any questions regarding the scope. | OTHER | Yes | |
| Those include but are not limited to (if unsure, contact us before executing the tests): | OTHER | Yes | |
| https://keycloak.apps.otto.de | OTHER | Yes | |
| https://www.otto.de/clara | OTHER | Yes | |
| https://www.otto.de/kundenchat | OTHER | Yes | |
| https://www.otto.de/newsroom | OTHER | Yes | |
| https://www.otto.de/reblog | OTHER | Yes | |
| https://www.otto.de/roombeez | OTHER | Yes | |
| https://www.otto.de/soulfully | OTHER | Yes | |
| https://www.otto.de/twoforfashion | OTHER | Yes | |
| https://www.otto.de/updated | OTHER | Yes | |
| https://www.otto.de/user/contactFormSubmit | OTHER | Yes | |
| https://www.otto.de/user/sendcallbackrequest | OTHER | Yes |