Skip to content
Learn more about root-me.cloud
Log in

Parcelo (demo): Scope

Download CSVLast updated on
1-5 of 5
Assets of Parcelo (demo)
Asset nameTypeCoverageMax. severityLast updateResolved Reports

www.parcelo.example

The customer web app and sign-in.

DomainIn scopeCritical0 (0%)

api.parcelo.example

Orders, addresses and tracking API. IDOR on tracking and address endpoints is highest value.

  • python
  • fastapi
APIIn scopeCritical0 (0%)

*.parcelo.example

Parcelo-operated subdomains, except those out of scope.

WildcardIn scopeCritical0 (0%)

https://track.parcelo.example/

Public tracking link — test whether one link exposes another customer's details.

URLIn scopeCritical0 (0%)

status.parcelo.example

Out of scope: third-party status page.

OtherOut of scopeNone0 (0%)

1-5 of 5

Rewards

This is a vulnerability disclosure program: it does not pay cash rewards. Every resolved report earns reputation and a public thank-you on the Thanks page.

SeverityReputation
Low+10 reputation
Medium+15 reputation
High+22 reputation
Critical+32 reputation

Earned when a report is resolved at that severity. How reputation works

Stats

Reports received | 90 days
0
Last report resolved
–
Reports resolved
0
Hackers thanked
0
Assets in scope
4