PentestingHere
Log in Join

Hilton

Hilton on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: Yes
  • Swag: Yes
  • Managed by the platform: Yes
  • Average first response: 0.1 days
  • Average time to resolution: Not published

In scope

  • *.hilton.com
  • *.hilton.io
  • *.hiltonbusinessonline.com
  • *.hiltonlocalbiz.com
  • 121.200.237.36/29
  • 167.187.0.0/16
  • 192.251.123.0/24
  • 192.251.124.0/24
  • 192.251.125.0/24
  • 192.251.126.0/24
  • 203.79.37.2/29
  • 62.216.152.46/29
  • 82.196.42.196/28
  • Hilton Franchised Properties
  • Hilton Third Party Applications
  • Managed Property Assets
  • com.hilton.android.hhonors
  • hilton.com
  • hilton.io
  • hiltonbusinessonline.com
  • hiltonlocalbiz.com
  • id635150066
  • resmax.hilton.com

Out of scope

  • *.hamptonhotels.com.cn
  • *.hiltonhotels.jp
  • a1.hilton.com
  • eis.hilton.com
  • guestfeedback.hilton.com
  • hgv.com
  • hiltonfoundation.org
  • hiltongrandvacations.com
  • hiltonnet.hilton.com
  • https://jobs.hilton.com
  • onqinsider.hilton.com
  • pim.hilton.com

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback