Skip to content
Learn more about root-me.cloud
Log in

Aurora Pay (demo): Scope

Download CSVLast updated on
1-6 of 6
Assets of Aurora Pay (demo)
Asset nameTypeCoverageMax. severityBountyLast updateResolved Reports

www.aurorapay.example

Marketing and the sign-in entry point.

  • nginx
  • next.js
DomainIn scopeCriticalEligible0 (0%)

app.aurorapay.example

The wallet web app — everything here is behind the login. Account takeover and access-control issues are highest value.

  • react
  • rails
DomainIn scopeCriticalEligible0 (0%)

api.aurorapay.example

The REST API behind the app and mobile clients. Token and authorization flaws welcome.

  • rails
  • postgresql
APIIn scopeCriticalEligible0 (0%)

*.aurorapay.example

Aurora-operated subdomains, except those listed out of scope.

WildcardIn scopeCriticalEligible0 (0%)

com.aurorapay.wallet

The Aurora Pay Android app.

Android: Play StoreIn scopeCriticalEligible0 (0%)

status.aurorapay.example

Out of scope: third-party status page.

OtherOut of scopeNoneIneligible0 (0%)

1-6 of 6

Rewards

SeverityRewards
Low$100 – $250
Medium$250 – $1,000
High$1,000 – $4,000
Critical$4,000 – $15,000

Stats

Total bounties paid
$0
Average bounty
–
Top bounty range
$4,000 – $15,000
Reports received | 90 days
0
Last report resolved
–
Reports resolved
0
Hackers thanked
0
Assets in scope
5