/engagements/kohls

BugcrowdView on Bugcrowd
RawAI Enhanced
4
In Scope
29
Out of Scope

In-Scope Assets (4)

AssetCategoryBountyQuick Links
Kohl’s entire public digital footprint that is not Out-Of-Scope(See list below)OTHERYes-
https://www.kohls.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://www.kohls.com/feature/app.jspANDROIDYes-
https://www.kohls.com/feature/app.jspIOSYes-
Out-of-Scope Assets (29)
AssetCategoryBounty
*kohls.com/checkout/prequal_inquiry.jsp#/preQualEligibleURLYes
*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLYes
*kohls.com/kohlscredit/prequalURLYes
*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/preQualEligibleURLYes
*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLYes
*kohlsecommerce.com/kohlscredit/prequalOTHERYes
*qa*.kohls.comURLYes
any domain with archaius.json endoint is out of scopeURLYes
apply.kohls.comURLYes
author-mykohls.kohls.comURLYes
author-qa65-mykohls.kohls.comURLYes
author-stage65-mykohls.kohls.comURLYes
connection.kohls.comURLYes
corporate.kohls.comURLYes
developer.kohls.comURLYes
http://www.b2b.kohls.comURLYes
kconnect.kohls.comURLYes
kohlsmerch.kohls.com/URLYes
lclive.kohls.comURLYes
link-preprod.kohls.comURLYes
mykohls-origin.kohls.comURLYes
mykohls.kohls.comURLYes
origin-stage65-corporate.kohls.comURLYes
origin-stage65-mykohls.kohls.comURLYes
productchampions.kohls.comURLYes
stage65-corporate.kohls.comURLYes
stage65-mykohls.kohls.comURLYes
vp-*.kohls.comURLYes
wfh*.kohls.comURLYes