/engagements/t-mobile
51
In Scope
6
Out of Scope
In-Scope Assets (51)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| Assets labeled as in-scope | OTHER | Yes | - | |
| Cellular Network Auth Bypass via Web/Mobile App | OTHER | Yes | - | |
| Internal Server via Internet Network | OTHER | Yes | - | |
| Self Register Account on T-Mobile Microsoft Entra ID | OTHER | Yes | - | |
| T&P Servers | OTHER | Yes | - | |
| https://*.assurancewireless.com | URL | Yes | ||
| https://*.uscc.com | URL | Yes | ||
| https://*.uscc.net | URL | Yes | ||
| https://*.uscellular.com | URL | Yes | ||
| https://account.t-mobile.com | URL | Yes | ||
| https://api.t-mobile.com | URL | Yes | ||
| https://api.vistarmedia.com | URL | Yes | ||
| https://api.vistarmedia.eu | URL | Yes | ||
| https://apps.apple.com/us/app/syncup-drive/id1576574297 | IOS | Yes | - | |
| https://apps.apple.com/us/app/syncup-kids/id1503394062 | IOS | Yes | - | |
| https://apps.apple.com/us/app/syncup-tracker/id1526380335 | IOS | Yes | - | |
| https://apps.apple.com/us/app/t-life-t-mobile-tuesdays/id1111876388 | IOS | Yes | - | |
| https://apps.apple.com/us/app/t-mobile/id561625752 | IOS | Yes | - | |
| https://assets-cdn.vistarmedia.com | URL | Yes | ||
| https://audience-builder.vistarmedia.com | URL | Yes | ||
| https://clients.adstruc.com | URL | Yes | ||
| https://creatives.vistarmedia.com | URL | Yes | ||
| https://dashboard-101.moengage.com | URL | Yes | ||
| https://demo.adstruc.com | URL | Yes | ||
| https://devedge.t-mobile.com | URL | Yes | ||
| https://digits.t-mobile.com | URL | Yes | ||
| https://digits.t-mobile.com/ | OTHER | Yes | - | |
| https://docker-staging.adstruc.com | URL | Yes | ||
| https://docsite.vistarmedia.com | URL | Yes | ||
| https://job-svc-b.vistarmedia.com | URL | Yes | ||
| https://maps.vistarmedia.com | URL | Yes | ||
| https://metrobyt-mobile.com | URL | Yes | ||
| https://packages.cortexpowered.com | URL | Yes | ||
| https://play.google.com/store/apps/details?id=com.tmobile.drive | ANDROID | Yes | ||
| https://play.google.com/store/apps/details?id=com.tmobile.kids | ANDROID | Yes | ||
| https://play.google.com/store/apps/details?id=com.tmobile.pr.mytmobile | ANDROID | Yes | ||
| https://play.google.com/store/apps/details?id=com.tmobile.syncuptag | ANDROID | Yes | ||
| https://play.google.com/store/apps/details?id=com.tmobile.tuesdays&hl=en_US&gl=US | ANDROID | Yes | ||
| https://production-delivery-metrics-svc.vistarmedia.com | URL | Yes | ||
| https://production-dynam-creative.vistarmedia.com | URL | Yes | ||
| https://sfleet.cortexpowered.com | URL | Yes | ||
| https://sflower.cortexpowered.com | URL | Yes | ||
| https://sprint.com | URL | Yes | ||
| https://staging-login.vistarmedia.com | URL | Yes | ||
| https://staging-trafficking.vistarmedia.com | URL | Yes | ||
| https://storybook.vistarmedia.com | URL | Yes | ||
| https://t-mobile.com | URL | Yes | ||
| https://tess.service-now.com | URL | Yes | ||
| https://tfb.t-mobile.com | URL | Yes | ||
| https://transcodes-cdn.vistarmedia.com | URL | Yes | ||
| https://www.assurancewireless.com | URL | Yes |
Out-of-Scope Assets (6)
| Asset | Category | Bounty | |
|---|---|---|---|
| *.mobile.uscc.com | URL | Yes | |
| *.mobile.uscc.net | URL | Yes | |
| *.sprint.net | URL | Yes | |
| /self-service-* | URL | Yes | |
| Any domain, property, product, protocol, or service of the app/hardware/software version not explicitly listed in the In-Scope section is out of scope; submissions are welcome but not guaranteed for the bounty/bonus. | OTHER | Yes | |
| https://*.moengage.com | URL | Yes |