MTN Group

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
Areeba.com.gn URL critical
Irancell.ir URL critical
Lonestarcell.com URL critical
Mtn-bissau.com URL critical
Mtn.bj URL critical
Mtn.ci URL critical
Mtn.cm URL critical
Mtn.co.rw URL critical
Mtn.co.sz URL critical
Mtn.co.ug URL critical
Mtn.co.za URL critical
Mtn.com.af URL critical
Mtn.com.gh URL critical
Mtn.com.ye URL critical
Mtn.sd URL critical
Mtnblog.co.za URL critical
Mtnbusiness.com URL critical
Mtnbusiness.com.ng URL critical
Mtncameroon.net URL critical
Mtncongo.net URL critical
Mtnfootball.com URL critical
Mtnonline.com URL critical
Mtnplay.co.za URL critical
Mtnzakhele.co.za URL critical
Mtnzambia.co.zm URL critical
mtn.com URL critical
mtnplay.co.zm URL critical
mtnselfcare.co.zm URL critical
mtngbissau.com URL high high high critical
www.mtn.zm URL high high high critical

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
Mtn.com.cy URL none
This is from an entity that was sold off
https://www.mtn.com/contact/become-supplier/ OTHER none
Aware of the fucntion and tested via pentest teams
https://www.mtn.com/investors/sign-up-for-investor-information/ OTHER none
Not in scope aware of this and we have tested and happy with results from external pen testing firm
https://www.mtn.com/xmlrpc.php URL none
HI, Hosted WordPress site, this is enabled on the hosted environment, other mitigation in place to prevent ddos and brute force from happening
Mtn-bissau.com URL none
Domain does not belong to MTN Bissau.