box_private

HackerOneView on HackerOne

RawAI Enhanced

12

In Scope

2

Out of Scope

In-Scope Assets (12)

Asset	Category	Bounty	Quick Links
Android Box Mobile App	ANDROID	Yes	-
Box Drive	OTHER	Yes	-
Box Tools	OTHER	Yes	-
account.box.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
api.box.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
app.box.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
cloud.app.box.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
dl.boxcloud.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
iOS Box Mobile App	IOS	Yes	-
m.box.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
notes.services.box.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
upload.box.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (2)

Asset	Category	Bounty
signrequest.com	URL	No
sr-staging-1.com	URL	No

Scope Changes (29)

Sep 8, 2026

Change	Asset	Category	Scope	Time
Removed	sr-staging-1.com	URL	Out of Scope	18:50
Removed	signrequest.com	URL	Out of Scope	18:50

Sep 1, 2026

Change	Asset	Category	Scope	Time
Added	box tools	OTHER	In Scope	19:50

Aug 4, 2026

Change	Asset	Category	Scope	Time
Added	m.box.com	URL	In Scope	14:50
Added	notes.services.box.com	URL	In Scope	14:50
Added	sr-staging-1.com	URL	In Scope	14:50
Added	signrequest.com	URL	In Scope	14:50
Added	app.box.com	URL	In Scope	14:50
Added	account.box.com	URL	In Scope	14:50
Added	api.box.com	URL	In Scope	14:50
Added	upload.box.com	URL	In Scope	14:50
Added	dl.boxcloud.com	URL	In Scope	14:50
Added	cloud.app.box.com	URL	In Scope	14:50
Added	ios box mobile app	IOS	In Scope	14:50
Added	android box mobile app	ANDROID	In Scope	14:50
Added	app.box.com	URL	In Scope	14:50
Added	account.box.com	URL	In Scope	14:50
Added	api.box.com	URL	In Scope	14:50
Added	dl.boxcloud.com	URL	In Scope	14:50
Added	box drive	URL	In Scope	14:50
Added	notes.services.box.com	URL	In Scope	14:50
Added	sr-staging-1.com	URL	In Scope	14:50
Added	signrequest.com	URL	In Scope	14:50
Added	upload.box.com	URL	In Scope	14:50
Added	cloud.app.box.com	URL	In Scope	14:50
Added	android box mobile app	ANDROID	In Scope	14:50
Added	m.box.com	URL	In Scope	14:50
Added	ios box mobile app	IOS	In Scope	14:50
Added	box drive	OTHER	In Scope	14:50