vulns.co
/
GKData.io MCP

HackerOne · 3 min read

Booking.com

Paid Bounty

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Directory row 170; Active program checkbox checked; Bounties minimum displayed $100. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 49 published rows
AssetTypeGroup / eligibility
*.fareharbor.comWILDCARDBounty eligible: Yes
*.booking.comWILDCARDBounty eligible: Yes
*.rentalcars.comWILDCARDBounty eligible: Yes
*.fareharbor.engineeringWILDCARDBounty eligible: Yes
booking.comURLBounty eligible: Yes
secure.booking.comURLBounty eligible: Yes
careers.booking.comURLBounty eligible: Yes
https://iphone-xml.booking.com/json/URLBounty eligible: Yes
https://secure-iphone-xml.booking.com/json/URLBounty eligible: Yes
account.booking.comURLBounty eligible: Yes
kyc-onboarding.booking.comURLBounty eligible: Yes
taxi.booking.comURLBounty eligible: Yes
widget.rentalcars.comURLBounty eligible: Yes
cars.booking.comURLBounty eligible: Yes
supplier.auth.toag.booking.comURLBounty eligible: Yes
paymentcomponent.booking.comURLBounty eligible: Yes
metasearch-api.booking.comURLBounty eligible: Yes
experiences.booking.comURLBounty eligible: Yes
webhooks.booking.comURLBounty eligible: Yes
taxis.booking.comURLBounty eligible: Yes
paybridge.booking.comURLBounty eligible: Yes
phone-validation.taxi.booking.comURLBounty eligible: Yes
indicative-pricing.taxi.booking.comURLBounty eligible: Yes
admin.booking.comURLBounty eligible: Yes
chat.booking.comURLBounty eligible: Yes
autocomplete.booking.comURLBounty eligible: Yes
distribution-xml.booking.comURLBounty eligible: Yes
paynotifications.booking.comURLBounty eligible: Yes
supply-xml.booking.comURLBounty eligible: Yes
accommodations.booking.comURLBounty eligible: Yes
portal.taxi.booking.comURLBounty eligible: Yes
flights.booking.comURLBounty eligible: Yes
secure-supply-xml.booking.comURLBounty eligible: Yes
http://secure-iphone-xml.booking.com/json/URLBounty eligible: Yes
spark.fareharbor.comURLBounty eligible: Yes
www.fareharbor.comURLBounty eligible: Yes
teleport.fareharbor.engineeringURLBounty eligible: Yes
demo.fareharbor.comURLBounty eligible: Yes
readonly.fareharbor.comURLBounty eligible: Yes
marketing.fareharbor.comURLBounty eligible: Yes
sites.fareharbor.comURLBounty eligible: Yes
compass.fareharbor.comURLBounty eligible: Yes
fhdn.fareharbor.comURLBounty eligible: Yes
tableau.fareharbor.engineeringURLBounty eligible: Yes
fareharborsites.comURLBounty eligible: Yes
https://play.google.com/store/apps/details?id=com.booking&hl=enGOOGLE_PLAY_APP_IDBounty eligible: Yes
https://play.google.com/store/apps/details?id=com.booking.hotelmanager&hl=enGOOGLE_PLAY_APP_IDBounty eligible: Yes
https://apps.apple.com/us/app/booking-com-hotels-travel/id367003839APPLE_STORE_APP_IDBounty eligible: Yes
https://apps.apple.com/us/app/pulse-for-booking-com-partners/id992795726APPLE_STORE_APP_IDBounty eligible: Yes
Out of scope · 26 published rows
AssetTypeGroup / eligibility
www.booking.com/bbmanage/*WILDCARDBounty eligible: No
www.booking.com/bbmanage/data/*WILDCARDBounty eligible: No
secure.booking.com/company/*WILDCARDBounty eligible: No
secure.booking.com/orgnode/*WILDCARDBounty eligible: No
spadmin.booking.com/URLBounty eligible: No
business.booking.com/URLBounty eligible: No
https://www.booking.com/bbm.htmlURLBounty eligible: No
https://secure.booking.com/companyjoin.htmlURLBounty eligible: No
https://secure.booking.com/enterprise/signon.en-gb.htmlURLBounty eligible: No
https://ugcupload.booking.com/upload_bbtool_company_logoURLBounty eligible: No
https://fareharbor.com/demo/URLBounty eligible: No
jobs.booking.comURLBounty eligible: No
welcomekit.booking.com/URLBounty eligible: No
cpass.booking.comURLBounty eligible: No
awscpasslab.booking.comURLBounty eligible: No
ams.merchandise.booking.comURLBounty eligible: No
medialibrary.booking.comURLBounty eligible: No
www.sustainability.booking.comURLBounty eligible: No
procurement.booking.comURLBounty eligible: No
workforce.booking.comURLBounty eligible: No
workforce-dev.voicedqs.booking.comURLBounty eligible: No
surveys.booking.comURLBounty eligible: No
partnerfeedback.booking.comURLBounty eligible: No
recruitmentsurveys.booking.comURLBounty eligible: No
desk-demo.fareharbor.engineeringURLBounty eligible: No
desk-demo-api.fareharbor.engineeringURLBounty eligible: No

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

d5550c789111 · JSON exports & schemas · CC BY 4.0 content / MIT software