{"id":"135dcfde-cc84-4d0a-a183-c5e4938a8067","engagementId":"7e62f01b-b965-4e73-a7c6-66eed8bbc435","data":{"brief":{"id":"7dcf9694-910a-48b4-8262-e57081d19a06","name":"PlanetHoster Bug Bounty ","tagline":"PlanetHoster invites you to test their web hosting platform!","description":"\u003cp\u003ePlanetHoster offers premium Web Hosting Solutions: Shared Hosting World Platform, Reseller solution Multi-World and Dedicated Server HybridCloud.\u003c/p\u003e\n\n\u003cp\u003eNo technology is perfect, and PlanetHoster believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our assets. Good luck and happy hunting!\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eRatings/Rewards\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"95db792c-091b-4c81-8d72-b09b1d065f09","targetsOverview":"\u003cp\u003e\u003cem\u003eAny domain/property of PlanetHoster not listed in the targets section is out of scope. This includes any/all subdomains not listed above.\u003c/em\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eAccess/Credentials\u003c/h2\u003e\n\n\u003cp\u003eEach researcher will be given one test account. \u003cstrong\u003ePlease do not change your test email address as this would put you out of compliance with our program.\u003c/strong\u003e This will be verified during report submission. To obtain credentials, scroll to the bottom of this brief and click the \u003ccode\u003eGet Credentials\u003c/code\u003e button.\u003c/p\u003e\n\n\u003ch3\u003eAccount Credit\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eThe accounts are pre-loaded with €100 of credit to test purchasing and payments on the PlanetHoster platform. You should be supplied with enough credit to fully test the web application, but if you need more credit, please reach out to \u003ca href=\"https://bugcrowd-support.freshdesk.com/support/tickets/new\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Support\u003c/a\u003e with your reason for needing additional credit. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eNavigating to world.planethoster.net\u003c/h3\u003e\n\n\u003cp\u003e\u003cstrong\u003eGet Your Login Details:\u003c/strong\u003e Log in to your \u003ca href=\"https://my.planethoster.net\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://my.planethoster.net\u003c/a\u003e account and navigate to \u003ccode\u003eMy Services\u003c/code\u003e and select \"WORLD\" under \u003ccode\u003eProduct/Service\u003c/code\u003e. \u003cbr\u003e\n\u003cstrong\u003eLog Into world.planethoster.net:\u003c/strong\u003e navigate to \u003ca href=\"https://world.planethoster.net\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://world.planethoster.net\u003c/a\u003e and input your provided credentials. \u003c/p\u003e\n\n\u003ch3\u003eWhitelist IP for API Access\u003c/h3\u003e\n\n\u003cp\u003eOnce signed into the PlanetHoster web portal, to use the API, please whitelist your IP here: \u003ca href=\"https://my.planethoster.net/domain-reseller\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eDomain Reseller API - Account Info page\u003c/a\u003e \u003c/p\u003e\n\n\u003cp\u003eOnce you have access the page a support ticket must be opened (Located at the top right of the page). The ticket details should state the following: \u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eSubject: Whitelist IP for API testing\u003c/li\u003e\n\u003cli\u003eQuestion: I am testing on behalf of the Bugcrowd bug bounty program and am requesting that my IP \u003cem\u003e[PROVIDE IP ADDRESS HERE]\u003c/em\u003e is whitelisted for API testing. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eOnce the ticket is reviewed and approved you will be able to access to use the PlanetHoster API.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eFocus Areas\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eDomain Names, DNS Management, Order form\u003c/li\u003e\n\u003cli\u003eAccess to other users' accounts / information\u003c/li\u003e\n\u003cli\u003eInformation that should not be available\u003c/li\u003e\n\u003cli\u003eUser passwords\u003c/li\u003e\n\u003cli\u003eWorld hosting panel\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eOut-of-Scope\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eAny type of DDoS or DoS attacks\u003c/strong\u003e - remember you are testing on production\u003c/li\u003e\n\u003cli\u003eAutomated testing on Support channels\u003c/li\u003e\n\u003c/ul\u003e","safeHarborStatus":{"status":"partial","label":"Partial safe harbor","description":"This engagement provides a limited goodwill statement about not pursuing legal action related to security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"9327f14c-fd2a-46bf-a089-22c520cffb4b","name":"In Scope ","targets":[{"id":"15ca463c-4e7f-42cc-b8bd-a472adb4d50e","uri":"https://my.planethoster.com","name":"my.planethoster.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a88e1c54-8b06-4424-ba87-3b824db90218","sortOrder":0},"sortOrder":0,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"15ca463c-4e7f-42cc-b8bd-a472adb4d50e"},{"id":"4e9d5c53-3b04-4bca-ba30-e8e33d87019a","name":"Ruby on Rails","targetId":"15ca463c-4e7f-42cc-b8bd-a472adb4d50e"},{"id":"7ff6bfde-4352-4ff1-b376-565d898c283f","name":"nginx","targetId":"15ca463c-4e7f-42cc-b8bd-a472adb4d50e"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"15ca463c-4e7f-42cc-b8bd-a472adb4d50e"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"15ca463c-4e7f-42cc-b8bd-a472adb4d50e"},{"id":"dd477d24-b394-460d-aaf7-9bd213555968","name":"Ruby","targetId":"15ca463c-4e7f-42cc-b8bd-a472adb4d50e"}],"recentChangeFlags":null},{"id":"9b55cd9e-cbc9-428a-a11b-c117d5b08485","uri":"https://api.planethoster.net","name":"api.planethoster.net","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a13a38c4-606f-4132-b5ad-44c7e7eb2de0","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"9b55cd9e-cbc9-428a-a11b-c117d5b08485"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"9b55cd9e-cbc9-428a-a11b-c117d5b08485"},{"id":"cbf0ee58-c41b-4dee-9d08-cefd01f5d7d6","name":"HTTP","targetId":"9b55cd9e-cbc9-428a-a11b-c117d5b08485"}],"recentChangeFlags":null},{"id":"84714955-6707-4014-a3f0-f7c266411649","uri":"https://world.planethoster.net","name":" world.planethoster.net","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0d5a226b-1578-4250-887a-68d1e399b56b","sortOrder":0},"sortOrder":0,"tags":[{"id":"7ff6bfde-4352-4ff1-b376-565d898c283f","name":"nginx","targetId":"84714955-6707-4014-a3f0-f7c266411649"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"84714955-6707-4014-a3f0-f7c266411649"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"84714955-6707-4014-a3f0-f7c266411649"},{"id":"e4ad1c44-2f86-487b-9793-0add0dbfdcf2","name":"Zone.js","targetId":"84714955-6707-4014-a3f0-f7c266411649"},{"id":"eaa69542-87cd-413a-9b74-3e75f9fb01e4","name":"Angular","targetId":"84714955-6707-4014-a3f0-f7c266411649"}],"recentChangeFlags":null},{"id":"16229c3a-0c96-4fc9-ba79-6c0c27aded27","uri":"https://mg.n0c.com/","name":"https://mg.n0c.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"7c2ca7c9-8eb6-4ffc-b3c9-68da1c2cc798","sortOrder":0},"sortOrder":0,"tags":[{"id":"7ff6bfde-4352-4ff1-b376-565d898c283f","name":"nginx","targetId":"16229c3a-0c96-4fc9-ba79-6c0c27aded27"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"16229c3a-0c96-4fc9-ba79-6c0c27aded27"}],"recentChangeFlags":null},{"id":"7b314740-6ed2-4a7e-87b2-44318bd92036","uri":"https://www.planethoster.com","name":"www.planethoster.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"72eeae9c-250b-442f-8617-7657345eae10","sortOrder":0},"sortOrder":0,"tags":[{"id":"005d6fd9-5c1a-45f7-a2b6-af0e2fdfd820","name":"Laravel","targetId":"7b314740-6ed2-4a7e-87b2-44318bd92036"},{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"7b314740-6ed2-4a7e-87b2-44318bd92036"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"7b314740-6ed2-4a7e-87b2-44318bd92036"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"7b314740-6ed2-4a7e-87b2-44318bd92036"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7b314740-6ed2-4a7e-87b2-44318bd92036"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"e077738d-02f7-4b59-8c53-f2842f76cdc1","p1MaxCents":300000,"p1MinCents":200000,"p2MaxCents":225000,"p2MinCents":125000,"p3MaxCents":150000,"p3MinCents":80000,"p4MaxCents":100000,"p4MinCents":20000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003ch2\u003eAPI Documentation \u0026amp; Setup\u003c/h2\u003e\n\n\u003cp\u003e\u003ca href=\"https://apidoc.planethoster.net/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ePlanetHoster API Docs\u003c/a\u003e\u003c/p\u003e\n\n\u003ch2\u003eBase URLs for PlanetHoster\u0026#39;s Rest APIs\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eDomain API - \u003ca href=\"https://api.planethoster.net/reseller-api/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://api.planethoster.net/reseller-api/\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWorld API - \u003ca href=\"https://api.planethoster.net/world-api/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://api.planethoster.net/world-api/\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{"1":{"min":2000,"max":3000},"2":{"min":1250,"max":2250},"3":{"min":800,"max":1500},"4":{"min":200,"max":1000},"5":{"min":null,"max":null}},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"7e62f01b-b965-4e73-a7c6-66eed8bbc435","code":"planethosterinc","state":"in_progress","endsAt":null,"bountyId":"f6c7e3e6-a842-40ae-a45f-75487d2861ad","startsAt":"2017-11-07T20:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Cloud","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/9528/1050/1388c3d8/adaa4ccf79121daff74a1d1c627201c5_planethosterlogo.png","logoBackgroundColor":"#FFFFFF","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2017-11-07T20:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/planethosterinc","changelogs":"/engagements/planethosterinc/changelog","submissions":null,"announcements":"/engagements/planethosterinc/announcements","hallOfFame":"/engagements/planethosterinc/hall_of_fames","crowdstream":"/engagements/planethosterinc/crowdstream"},"announcementsCount":10,"knownIssuesEnabled":false,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/planethosterinc/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=planethosterinc\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/planethosterinc/engagement_subscribers","engagementChangelogsUrl":"/engagements/planethosterinc/changelog","publishedAt":"2026-07-14T13:54:09.748Z","engagementChangelogUrl":"/engagements/planethosterinc/changelog/135dcfde-cc84-4d0a-a183-c5e4938a8067","createUserFeedbacksUrl":"/engagements/planethosterinc/feedbacks","engagementCrowdstreamUrl":"/engagements/planethosterinc/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}