/engagements/upwork

BugcrowdView on Bugcrowd
RawAI Enhanced
12
In Scope
14
Out of Scope

In-Scope Assets (12)

AssetCategoryBountyQuick Links
Direct ContractsURLYes-
Upwork - Android ApplicationANDROIDYes-
Upwork - Marketplace PortalURLYes-
Upwork - MessagesURLYes-
Upwork - Mobile Application AndroidANDROIDYes-
Upwork - Mobile Application IOSIOSYes-
Upwork - api.upwork.com/graphqlURLYes-
Upwork - iOS ApplicationIOSYes-
Upwork Dash Messenger Desktop Version (www.upwork.com/downloads)HARDWAREYes-
api.upwork.com/graphqlURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://www.upwork.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
www.upwork.com/api URLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (14)
AssetCategoryBounty
Any Third-party ServicesOTHERYes
Any subdomain/domain/property not listed in the 'in scope' section, is out of scope. OTHERYes
Social media hijackingOTHERYes
careers.upwork.comOTHERYes
community.stage.upwork.comOTHERYes
community.upwork.comOTHERYes
e.upwork.comOTHERYes
pardot.upwork.comOTHERYes
signature.upwork.comOTHERYes
stage.upwork.comOTHERYes
status.upwork.comOTHERYes
support.upwork.comOTHERYes
tip.upwork.comURLYes
tip.upwork.com OTHERYes