Airbnb

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*.airbnb-aws.com URL critical
Low-priority asset.
*.airbnb.com URL critical
*.airbnbcitizen.com URL critical
Low-priority asset.
*.atairbnb.com URL high high high critical
Low-priority asset.
*.byairbnb.com URL critical
Low-priority asset.
*.luxuryretreats.com URL critical
Low-priority asset.
*.muscache.com URL critical
Low-priority asset.
*.withairbnb.com URL critical
Low-priority asset.
Localized airbnb sites listed at the link below: OTHER critical
**https://www.airbnb.com/sitemaps/localized**
api.airbnb.com URL critical
assets.airbnb.com URL critical
callbacks.airbnb.com URL critical
com.airbnb.android GOOGLE_PLAY_APP_ID critical
com.airbnb.app APPLE_STORE_APP_ID critical
com.luxuryretreats.ios APPLE_STORE_APP_ID critical
Low-priority asset.
m.airbnb.com URL critical
next.airbnb.com URL critical
omgpro.airbnb.com URL critical
one.airbnb.com URL critical
open.airbnb.com URL critical
support-api.airbnb.com URL critical
www.airbnb.com URL critical
luckey.app URL critical
luckey.fr URL critical
luckey.in URL critical
luckeyhomes.com URL critical
*.hoteltonight-test.com URL high high high critical
admin.demo.urbandoor.com URL high high high critical
demo.urbandoor.com URL high high high critical
provider.demo.urbandoor.com URL high high high critical

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity