PentestingHere
Log in Join

Nextcloud

Nextcloud on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: No, this is a VDP
  • Swag: No
  • Managed by the platform: No
  • Average first response: 0.5 days
  • Average time to resolution: 103.5 days

In scope

  • Desktop Client
  • apps.nextcloud.com
  • auth.nextcloud.com
  • com.nextcloud.Talk
  • com.nextcloud.client
  • com.nextcloud.talk2
  • com.peterandlinda.iOCNotes
  • crm.nextcloud.com
  • customerupdates.nextcloud.com
  • docs.nextcloud.com
  • download.nextcloud.com
  • help.nextcloud.com
  • https://github.com/nextcloud/collectives
  • https://github.com/nextcloud/files_confidential
  • https://github.com/nextcloud/tables
  • https://github.com/roundcube/roundcubemail
  • it.niedermann.owncloud.notes
  • it.twsweb.Nextcloud
  • knowledge.nextcloud.com
  • lists.nextcloud.com
  • logs.nextcloud.com
  • lookup.nextcloud.com
  • newsletter.nextcloud.com
  • nextcloud.com
  • nextcloud/3rdparty
  • nextcloud/activity
  • nextcloud/approval
  • nextcloud/bruteforcesettings
  • nextcloud/calendar
  • nextcloud/calendar_resource_management
  • nextcloud/circles
  • nextcloud/contacts
  • nextcloud/data_request
  • nextcloud/deck
  • nextcloud/end_to_end_encryption
  • nextcloud/external
  • nextcloud/files_accesscontrol
  • nextcloud/files_antivirus
  • nextcloud/files_automatedtagging
  • nextcloud/files_fulltextsearch

54 more assets on the official page.

Out of scope

  • cloud.nextcloud.com
  • conf.nextcloud.com
  • daita/files_fulltextsearch_tesseract
  • demo.nextcloud.com
  • drone.nextcloud.com
  • https://nextcloud.atlassian.net/jira/dashboard
  • sentry.nextcloud.com
  • try.nextcloud.com

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback