20 Minuten
20 Minuten on Bugcrowd · Bugcrowd Active
Scope
At a glance
- Maximum payout: $5,000
- Public disclosure: Not allowed
- Managed by the platform: Yes
- Safe harbour: Full
In scope
https://www.20min.chhttps://coral.20min.ch/https://api.20min.ch/https://videoplayer.20min.chhttps://partner-feeds.20min.chhttps://screenplayer.20min.chhttps://audio.20min.ch/
Out of scope
https://tgt.tamedia.chhttp://auth.20min.chhttps://cre-api.tamedia.chhttps://track.20min.chSocial Media Links (older than 2 years)Subdomain TakeoverDMARC, SPF, DKIMhttps://*.connect.ringier.ch*.onelog.ch*.20min-tv.ch*.newsnetz.tv*.appuser.ch*.iagentur.ch*.streamboat.ch*.streamboatserver.chOther Domains and Subdomains not specifically in scope
Imported from the public directory. Always confirm scope on the official program page before testing.