Skip to content
Learn more about root-me.cloud
Log in

Nimbus Drive (demo): Scope

Download CSVLast updated on
1-5 of 5
Assets of Nimbus Drive (demo)
Asset nameTypeCoverageMax. severityBountyLast updateResolved Reports

www.nimbusdrive.example

The web app and sign-in.

DomainIn scopeCriticalEligible0 (0%)

api.nimbusdrive.example

File, sharing and membership API. IDOR and missing-authorization reports are highest value.

  • go
  • postgresql
APIIn scopeCriticalEligible0 (0%)

*.nimbusdrive.example

Nimbus-operated subdomains, except those out of scope.

WildcardIn scopeCriticalEligible0 (0%)

https://dl.nimbusdrive.example/

Signed download endpoint — test whether a link can be scoped up or reused across accounts.

URLIn scopeCriticalEligible0 (0%)

docs.nimbusdrive.example

Out of scope: static documentation on a third-party host.

OtherOut of scopeNoneIneligible0 (0%)

1-5 of 5

Rewards

SeverityRewards
Low$75 – $200
Medium$200 – $800
High$800 – $3,000
Critical$3,000 – $10,000

Stats

Total bounties paid
$0
Average bounty
–
Top bounty range
$3,000 – $10,000
Reports received | 90 days
0
Last report resolved
–
Reports resolved
0
Hackers thanked
0
Assets in scope
4