PentestingHere
Log in Join

Airbnb

Airbnb on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: Yes
  • Swag: No
  • Managed by the platform: No
  • Average first response: 0.2 days
  • Average time to resolution: 161.4 days

In scope

  • *.airbnb-aws.com
  • *.airbnb.com
  • *.airbnb.org
  • *.airbnbcitizen.com
  • *.airbnbpayments.com
  • *.atairbnb.com
  • *.byairbnb.com
  • *.hoteltonight-test.com
  • *.hoteltonight.com
  • *.luxuryretreats.com
  • *.muscache.com
  • *.musta.ch
  • *.withairbnb.com
  • Localized airbnb sites listed at the link below:
  • api.airbnb.com
  • assets.airbnb.com
  • callbacks.airbnb.com
  • com.airbnb.android
  • com.airbnb.app
  • com.luxuryretreats.ios
  • m.airbnb.com
  • next.airbnb.com
  • one.airbnb.com
  • open.airbnb.com
  • support-api.airbnb.com
  • www.airbnb.com
  • www.hoteltonight.com

Out of scope

  • admin.demo.urbandoor.com
  • demo.urbandoor.com
  • luckey.app
  • luckey.fr
  • luckey.in
  • luckey.partners
  • luckeyhomes.com
  • provider.demo.urbandoor.com

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback