{"id":"af060dcd-2c70-4c6a-aefc-309347f57f36","engagementId":"6af906ee-3271-4b03-8fbe-3d7da1889b24","data":{"brief":{"id":"3afec953-d481-4231-babf-506afed88b66","name":"Gaming Corps Vulnerability Disclosure Engagement","tagline":"Gaming Corps™ is a casino game provider focusing on creating original content, offering niche video games and premium casino games.","description":"\u003cp\u003eGaming Corps™ is a casino game provider focusing on creating original content, offering niche video games and premium casino games. Our iGaming portfolio consists of Casino Slots, Multiplier Games (Crash/Jet), Mine Games and Table Games (Blackjack/baccarat), into which we infuse our experience from Gaming to create modern, exciting content. \u003c/p\u003e\n\n\u003ch2\u003eRatings\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this engagement will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","targetsOverview":"\u003cp\u003eIf you happen to identify a security vulnerability on a target that is not in scope, but it demonstrably belongs to Gaming Corps, you can report it to this engagement.\u003c/p\u003e\n\n\u003ch3\u003eCredentials\u003c/h3\u003e\n\n\u003cp\u003ePlease use 1 random user ID from this list to perform your testing: \u003cspan class=\"rp-resources__download-link bc-m-0 bc-icon bc-icon--after cc-icon--download\" data-tooltip-id=\"5fad1d86-e164-4c72-8bc4-18303f821467\"\u003e\u003ca href=\"https://bugcrowd.com/engagements/gamingcorps-vdp-pro/attachments/5fad1d86-e164-4c72-8bc4-18303f821467\" download\u003eplayer_uid_list.txt\u003c/a\u003e\u003c/span\u003e.\u003c/p\u003e\n\n\u003ch3\u003eFocus Areas\u003c/h3\u003e\n\n\u003cp\u003eWe are interested in issues that result in players earning more money than they should, and not in visual issues without a real effect.\u003c/p\u003e\n\n\u003ch2\u003eExcluded Submission Types\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eP5 vulnerabilities\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvailability/volumetric testing e.g.:\n\n\u003cul\u003e\n\u003cli\u003eDoS/DDoS/Network DoS\u003c/li\u003e\n\u003cli\u003eRate limiting bypass attempts\u003c/li\u003e\n\u003cli\u003eEmail bombing flooding\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eOut of Scope\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eInteracting or manipulate other stakeholders and their associated accounts including:\n\n\u003cul\u003e\n\u003cli\u003eSocial engineering attacks\u003c/li\u003e\n\u003cli\u003ePhishing attacks\u003c/li\u003e\n\u003cli\u003ePhysical attacks\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eThird party providers and services\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eSafe Harbor\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire through the \u003ca href=\"https://bugcrowd-support.freshdesk.com/support/tickets/new\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Support Portal\u003c/a\u003e before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"1fac64dc-395d-4398-96fa-10fc371fbf56","name":"In scope","targets":[{"id":"91889612-c619-4347-9141-2dc0ee15c580","uri":"https://lobby.gamingcorpscasino.com/","name":"lobby.gamingcorpscasino.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fce62c0a-bb1f-4055-aed6-68ffe17b1be6","sortOrder":0},"sortOrder":0,"tags":[{"id":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","name":"Games","targetId":"91889612-c619-4347-9141-2dc0ee15c580"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":"\u003ch2\u003eTarget Information:\u003c/h2\u003e\n\n\u003cp\u003eTo begin testing, simply open a supported browser and use the provided lobby URL to launch the game. We recommend using Google Chrome or Mozilla Firefox with hardware acceleration enabled. Please note that the\u003cbr\u003e\ngame may not launch or function correctly if hardware acceleration is disabled or if unsupported browsers are used.\u003c/p\u003e\n\n\u003cp\u003eYou can give it a try using the lobby URL below!\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://lobby.gamingcorpscasino.com?game_code=raider_riches_96\u0026language=en\u0026currency=EUR\u0026casino_token=gamingcorps\u0026play_for_fun=true\u0026platform=desktop\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://lobby.gamingcorpscasino.com?game_code=raider_riches_96\u0026amp;language=en\u0026amp;currency=EUR\u0026amp;casino_token=gamingcorps\u0026amp;play_for_fun=true\u0026amp;platform=desktop\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003cp\u003e\u003cstrong\u003ePlease focus with the game Raider Riches\u003c/strong\u003e (code raider_riches_96, raider_riches_94 and raider_riches_92) as develop on our platform but first time by an external studio.\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003ePlease focus also on trying, in real play, to have the game reward you more than expected or abuse the game in order to have more profit than normal\u003c/strong\u003e\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003ePlease find the complete user guide here:\u003c/strong\u003e \u003ca href=\"https://bugcrowd.com/engagements/gamingcorps-vdp-pro/attachments/77d27a78-92a4-4ef4-a177-23807a48bdca\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eGaming Corps Games User Guide.pdf\u003c/a\u003e.\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eHere is a link to our “game matrix.”\u003c/strong\u003e. The game matrix will include all information needed for the games: \u003ca href=\"https://bugcrowd.com/engagements/gamingcorps-vdp-pro/attachments/3eb07a8c-27f0-4fad-b6ea-48388ca054e8\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eGame Matrix (game information).xlsx\u003c/a\u003e\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[{"id":"3eb07a8c-27f0-4fad-b6ea-48388ca054e8","attachmentPath":"https://bugcrowd.com/engagements/gamingcorps-vdp-pro/attachments/3eb07a8c-27f0-4fad-b6ea-48388ca054e8","name":"Game%20Matrix%20(game%20information).xlsx","filename":"Game%20Matrix%20(game%20information).xlsx","description":null,"icon":"fileOther","size":17017,"sizeLabel":"16.6 KB","uploadedAt":"30 Jun 2025","fileType":"Document","embedUrl":"https://bugcrowd.com/engagements/gamingcorps-vdp-pro/attachments/3eb07a8c-27f0-4fad-b6ea-48388ca054e8"},{"id":"77d27a78-92a4-4ef4-a177-23807a48bdca","attachmentPath":"https://bugcrowd.com/engagements/gamingcorps-vdp-pro/attachments/77d27a78-92a4-4ef4-a177-23807a48bdca","name":"Gaming%20Corps%20Games%20User%20Guide.pdf","filename":"Gaming%20Corps%20Games%20User%20Guide.pdf","description":null,"icon":"fileOther","size":39194641,"sizeLabel":"37.4 MB","uploadedAt":"30 Jun 2025","fileType":"Document","embedUrl":"https://bugcrowd.com/engagements/gamingcorps-vdp-pro/attachments/77d27a78-92a4-4ef4-a177-23807a48bdca"},{"id":"5fad1d86-e164-4c72-8bc4-18303f821467","attachmentPath":"https://bugcrowd.com/engagements/gamingcorps-vdp-pro/attachments/5fad1d86-e164-4c72-8bc4-18303f821467","name":"player_uid_list.txt","filename":"player_uid_list.txt","description":null,"icon":"fileOther","size":18960,"sizeLabel":"18.5 KB","uploadedAt":"30 Jun 2025","fileType":"Document","embedUrl":"https://bugcrowd.com/engagements/gamingcorps-vdp-pro/attachments/5fad1d86-e164-4c72-8bc4-18303f821467"}],"engagement":{"id":"6af906ee-3271-4b03-8fbe-3d7da1889b24","code":"gamingcorps-vdp-pro","state":"in_progress","endsAt":null,"bountyId":"ceb72efb-e729-48c7-9f07-cd0ac2d6da1f","startsAt":"2025-07-08T06:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Games","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/3e27/2dae/d8b0a7b5/a44c8386bc03fa99c885f02a925f0d81_gaming_corps_logo.jpeg","logoBackgroundColor":"#fff","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2025-07-08T06:00:00.131Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/gamingcorps-vdp-pro","changelogs":"/engagements/gamingcorps-vdp-pro/changelog","submissions":null,"announcements":"/engagements/gamingcorps-vdp-pro/announcements","hallOfFame":"/engagements/gamingcorps-vdp-pro/hall_of_fames","crowdstream":"/engagements/gamingcorps-vdp-pro/crowdstream"},"announcementsCount":2,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/gamingcorps-vdp-pro/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=gamingcorps-vdp-pro\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/gamingcorps-vdp-pro/engagement_subscribers","engagementChangelogsUrl":"/engagements/gamingcorps-vdp-pro/changelog","publishedAt":"2025-07-24T14:34:40.574Z","engagementChangelogUrl":"/engagements/gamingcorps-vdp-pro/changelog/af060dcd-2c70-4c6a-aefc-309347f57f36","createUserFeedbacksUrl":"/engagements/gamingcorps-vdp-pro/feedbacks","engagementCrowdstreamUrl":"/engagements/gamingcorps-vdp-pro/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}