{"id":"b69beeee-cf0b-4630-a624-9e19bc9ead74","engagementId":"4c22f397-70f5-476a-85bb-a7584006221e","data":{"brief":{"id":"d5ccba03-dd27-45b5-8ab1-f7d551668ced","name":"University of Melbourne Vulnerability Disclosure Program","tagline":"University of Melbourne Vulnerability Disclosure Program","description":"\u003cp\u003eNo technology is perfect and University of Melbourne believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our platforms and services. \u003c/p\u003e\n\n\u003cp\u003eGood luck, and happy hunting!\u003c/p\u003e\n\n\u003ch2\u003eRatings/Rewards:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":null,"targetsOverview":"\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":false,"additionalInformation":""},"scope":[{"id":"873fbba4-fd8c-42fb-a42c-ee74750a6948","name":"University of Melbourne - University services in scope","targets":[{"id":"66db3560-c937-427b-ab55-d7064da792a8","uri":"https://*.unimelb.edu.au","name":"*.unimelb.edu.au","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2888ff08-bd26-45bc-8444-9833ce3f30d4","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"66db3560-c937-427b-ab55-d7064da792a8"},{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"66db3560-c937-427b-ab55-d7064da792a8"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"66db3560-c937-427b-ab55-d7064da792a8"}],"recentChangeFlags":null},{"id":"7d077fdf-90e5-440f-a778-4725424cb743","uri":"","name":"103.12.108.0/22","category":"network","ipAddress":"103.12.108.0/22","description":null,"engagementBriefTargetGroupTarget":{"id":"c9e4443c-3881-45e4-b429-e0227c7c6be7","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"7d077fdf-90e5-440f-a778-4725424cb743"},{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"7d077fdf-90e5-440f-a778-4725424cb743"}],"recentChangeFlags":null},{"id":"efa7ce70-1618-4ac1-a21c-11427f0158cc","uri":"","name":"128.250.0.0/16","category":"network","ipAddress":"128.250.0.0/16","description":null,"engagementBriefTargetGroupTarget":{"id":"9c3e668a-5e83-4954-b655-1c1f2e0c9bf3","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"efa7ce70-1618-4ac1-a21c-11427f0158cc"},{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"efa7ce70-1618-4ac1-a21c-11427f0158cc"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eThe network range provided is University of Melbournes production enterprise business network. Please be mindful of rate limits, scanning and automated that tools that have the potential to cause disruption. \u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"8d0b9fc4-796d-4a29-904a-6ed4a4f166ea","name":"University of Melbourne - Pollen Monitoring in scope","targets":[{"id":"6db86425-0e14-46af-8c59-1b3d26f60adb","uri":"https://www.pollenforecast.com.au/","name":"https://www.pollenforecast.com.au/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"dfa08fc6-aa85-4b76-9978-f99dc56b5030","sortOrder":0},"sortOrder":0,"tags":[{"id":"29ad39e7-82e8-4428-8474-fdfb5ceeb8d5","name":"Cloudflare CDN","targetId":"6db86425-0e14-46af-8c59-1b3d26f60adb"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"6db86425-0e14-46af-8c59-1b3d26f60adb"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"6db86425-0e14-46af-8c59-1b3d26f60adb"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6db86425-0e14-46af-8c59-1b3d26f60adb"},{"id":"f21f7de7-31b4-4cc8-89a4-39c9eb6b7345","name":"Python","targetId":"6db86425-0e14-46af-8c59-1b3d26f60adb"}],"recentChangeFlags":null},{"id":"43225246-4b2a-47e8-a009-916f57023cb3","uri":"https://apps.apple.com/au/app/melbourne-pollen-count/id707461899","name":"Melbourne Pollen Count - iOS app","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fc7bba8a-7bad-4d77-9518-46babb9aa459","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"43225246-4b2a-47e8-a009-916f57023cb3"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"43225246-4b2a-47e8-a009-916f57023cb3"}],"recentChangeFlags":null},{"id":"797e9185-0b4e-4d1b-95f5-3392907f370a","uri":"https://play.google.com/store/apps/details?id=com.plenum.pollen","name":"Melbourne Pollen Count - Android ","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"aef44a8f-fe4e-4868-b574-8772e80d23c6","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"797e9185-0b4e-4d1b-95f5-3392907f370a"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"797e9185-0b4e-4d1b-95f5-3392907f370a"}],"recentChangeFlags":null},{"id":"9cb43213-c564-4bba-9efa-050ec214164c","uri":"https://apps.apple.com/au/app/canberra-pollen-count/id914338280","name":"Canberra Pollen Count - iOS app","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fcf901a4-3ad1-43b0-8433-6e8ded8f1225","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"9cb43213-c564-4bba-9efa-050ec214164c"}],"recentChangeFlags":null},{"id":"32bae90b-d2e3-4932-8fb0-ee8a50aec427","uri":"https://play.google.com/store/apps/details?id=com.plenum.canberra","name":"Canberra Pollen Count - Android","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d6fa1445-033c-4d50-b6ea-740e1175688e","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"32bae90b-d2e3-4932-8fb0-ee8a50aec427"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"32bae90b-d2e3-4932-8fb0-ee8a50aec427"}],"recentChangeFlags":null},{"id":"7f0b2c6e-4f89-45f8-bb1e-247480f2bfdc","uri":"https://apps.apple.com/au/app/sydney-pollen-count-forecast/id1036166930","name":"Sydney Pollen Count - iOS","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6561fec9-7be5-4a6a-b7c6-670265a1a3cc","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"7f0b2c6e-4f89-45f8-bb1e-247480f2bfdc"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"7f0b2c6e-4f89-45f8-bb1e-247480f2bfdc"}],"recentChangeFlags":null},{"id":"6d8f0a22-23d2-4aea-94f8-9c34e6fc75ca","uri":"https://play.google.com/store/apps/details?id=com.plenum.sydney","name":"Sydney Pollen Count - Android ","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"23c86b58-4085-43ec-9f59-1866a6bc3e2e","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"6d8f0a22-23d2-4aea-94f8-9c34e6fc75ca"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"6d8f0a22-23d2-4aea-94f8-9c34e6fc75ca"}],"recentChangeFlags":null},{"id":"cafab05c-088a-42a9-acaa-bd8f9a335088","uri":"https://apps.apple.com/au/app/perth-pollen-count/id1640644173","name":"Perth Pollen Count - iOS","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6deda40d-13ec-4089-87cd-6e3d630ced2d","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"cafab05c-088a-42a9-acaa-bd8f9a335088"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"cafab05c-088a-42a9-acaa-bd8f9a335088"}],"recentChangeFlags":null},{"id":"e00b8a7a-1b7b-4290-8e30-385c13259d46","uri":"https://play.google.com/store/apps/details?id=com.plenum.perth","name":"Perth Pollen Count - Android app","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"2243b2e5-94d0-4e36-93ea-7e177efaf476","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"e00b8a7a-1b7b-4290-8e30-385c13259d46"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"e00b8a7a-1b7b-4290-8e30-385c13259d46"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":1,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null},{"id":"edcef9ea-e910-4a1c-971f-603076ae3740","name":"University of Melbourne - Research Cloud (MRC) in scope","targets":[{"id":"ce19e55a-5011-47a0-9f2a-f08d055c86ca","uri":"","name":"45.113.232.0/22","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"dc8074c2-0c0f-452d-83fe-27b6c8e22be9","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"ce19e55a-5011-47a0-9f2a-f08d055c86ca"},{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"ce19e55a-5011-47a0-9f2a-f08d055c86ca"}],"recentChangeFlags":null},{"id":"9181a7ab-1c40-4bcd-96de-cdc93ecab607","uri":"","name":"103.6.252.0/22","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"99a05c17-3d47-457a-90dd-f5002509f8ca","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"9181a7ab-1c40-4bcd-96de-cdc93ecab607"},{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"9181a7ab-1c40-4bcd-96de-cdc93ecab607"}],"recentChangeFlags":null},{"id":"e4fb6e5b-8904-4f2e-b497-ba31daf033d5","uri":"","name":"115.146.80.0/20","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"34c46f76-8173-4bbc-8e43-dcb3814951eb","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"e4fb6e5b-8904-4f2e-b497-ba31daf033d5"},{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"e4fb6e5b-8904-4f2e-b497-ba31daf033d5"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":2,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eThe Melbourne Research Cloud (MRC) offers free on-demand computing resources to researchers at the University of Melbourne (and affiliated institutions). It provides similar functionality to commercial cloud providers such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform. Common use cases include data analysis and web hosting, but there are many other potential uses. \u003c/p\u003e\n\n\u003cp\u003eWe welcome researchers to do recon on these network ranges and submit findings on any system hosted within these ranges. Please be mindful to use appropriate rate limiting on your scanning or any automated testing.\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"4c22f397-70f5-476a-85bb-a7584006221e","code":"uni-melbourne-vdp","state":"in_progress","endsAt":null,"bountyId":"31d77ef0-5246-48ad-a0a6-6758434bcc30","startsAt":"2022-05-31T19:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":null,"methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/0e32/fbd5/461f3573/f04496ed180a79b372e0c5a475e58d17_unimelbourne.jpeg","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":false,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2022-05-31T19:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/uni-melbourne-vdp","changelogs":"/engagements/uni-melbourne-vdp/changelog","submissions":null,"announcements":"/engagements/uni-melbourne-vdp/announcements","hallOfFame":"/engagements/uni-melbourne-vdp/hall_of_fames","crowdstream":null},"announcementsCount":5,"knownIssuesEnabled":false,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/uni-melbourne-vdp/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=uni-melbourne-vdp\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/uni-melbourne-vdp/engagement_subscribers","engagementChangelogsUrl":"/engagements/uni-melbourne-vdp/changelog","publishedAt":"2024-10-02T05:01:05.667Z","engagementChangelogUrl":"/engagements/uni-melbourne-vdp/changelog/b69beeee-cf0b-4630-a624-9e19bc9ead74","createUserFeedbacksUrl":"/engagements/uni-melbourne-vdp/feedbacks","engagementCrowdstreamUrl":null,"acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}