Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
28
Disclosed reports
0
Subdomains
934,471
Vendor on CyberSIXT
Alibaba (13 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains934,471

Subdomains of Alibaba VDP
NameScopeFirst seen
dev.admin.1688.comadmin, devIn scope2026-11-14
basic-nodejs-dev.alibaba-work.1688.comdevIn scope2026-11-14
cim-api-dev.alibaba-work.1688.comapi, devIn scope2026-11-14
cim-dev.alibaba-work.1688.comdevIn scope2026-11-14
cim-geo-dev.alibaba-work.1688.comdevIn scope2026-11-14
dev.alibaba-work.1688.comdevIn scope2026-11-14
dogfood-dev.alibaba-work.1688.comdevIn scope2026-11-14
gcom-product-find-dev.alibaba-work.1688.comdevIn scope2026-11-14
gws-dev.alibaba-work.1688.comdevIn scope2026-11-14
localhost.alibaba-work.1688.comdevIn scope2026-11-14
nodejs-dev.alibaba-work.1688.comdevIn scope2026-11-14
searchportal-dev.alibaba-work.1688.comdevIn scope2026-11-14
basic-nodejs-dev.alibaba.1688.comdevIn scope2026-11-14
cim-api-dev.alibaba.1688.comapi, devIn scope2026-11-14
cim-dev.alibaba.1688.comdevIn scope2026-11-14
cim-geo-dev.alibaba.1688.comdevIn scope2026-11-14
dev.alibaba.1688.comdevIn scope2026-11-14
dogfood-dev.alibaba.1688.comdevIn scope2026-11-14
gcom-product-find-dev.alibaba.1688.comdevIn scope2026-11-14
gws-dev.alibaba.1688.comdevIn scope2026-11-14
localhost.alibaba.1688.comdevIn scope2026-11-14
nodejs-dev.alibaba.1688.comdevIn scope2026-11-14
searchportal-dev.alibaba.1688.comdevIn scope2026-11-14
api-dev.1688.comapi, devIn scope2026-11-14
basic-nodejs-dev.1688.comdevIn scope2026-11-14
blog-dev.1688.comdevIn scope2026-11-14
localhost.blog.1688.comdevIn scope2026-11-14
cim-api-dev.1688.comapi, devIn scope2026-11-14
cim-dev.1688.comdevIn scope2026-11-14
cim-geo-dev.1688.comdevIn scope2026-11-14
crm-dev.1688.comdevIn scope2026-11-14
dev.1688.comdevIn scope2026-11-14
dev-admin.1688.comadmin, devIn scope2026-11-14
dev-api.1688.comapi, devIn scope2026-11-14
dev-www.1688.comdevIn scope2026-11-14
admin.dev.1688.comadmin, devIn scope2026-11-14
alumni.dev.1688.comdevIn scope2026-11-14
antivirus.www-dev.admin.alumni.dev.1688.comadmin, devIn scope2026-11-14
api.dev.1688.comapi, devIn scope2026-11-14
autoconfig.dev.1688.comdevIn scope2026-11-14
blogx.dev.1688.comdevIn scope2026-11-14
ftp.dev.1688.comdata, devIn scope2026-11-14
m.dev.1688.comdevIn scope2026-11-14
mail.dev.1688.comdev, mailIn scope2026-11-14
mobile.dev.1688.comdevIn scope2026-11-14
secure.dev.1688.comdevIn scope2026-11-14
webdisk.dev.1688.comdevIn scope2026-11-14
wiki.dev.1688.comdev, toolsIn scope2026-11-14
www.dev.1688.comdevIn scope2026-11-14
dev0.1688.comdevIn scope2026-11-14
dev01.1688.comdevIn scope2026-11-14
dev02.1688.comdevIn scope2026-11-14
dev1.1688.comdevIn scope2026-11-14
dev10.1688.comdevIn scope2026-11-14
dev2.1688.comdevIn scope2026-11-14
autoconfig.dev2.1688.comdevIn scope2026-11-14
autodiscover.dev2.1688.comdev, mailIn scope2026-11-14
webdisk.dev2.1688.comdevIn scope2026-11-14
www.dev2.1688.comdevIn scope2026-11-14
dev3.1688.comdevIn scope2026-11-14
www.dev3.1688.comdevIn scope2026-11-14
dev4.1688.comdevIn scope2026-11-14
dev5.1688.comdevIn scope2026-11-14
dev6.1688.comdevIn scope2026-11-14
dev7.1688.comdevIn scope2026-11-14
devel.1688.comdevIn scope2026-11-14
www.devel.1688.comdevIn scope2026-11-14
devel2.1688.comdevIn scope2026-11-14
develop.1688.comdevIn scope2026-11-14
development.1688.comdevIn scope2026-11-14
webdisk.development.1688.comdevIn scope2026-11-14
www.development.1688.comdevIn scope2026-11-14
dogfood-dev.1688.comdevIn scope2026-11-14
espm-dev.1688.comdevIn scope2026-11-14
gcom-product-find-dev.1688.comdevIn scope2026-11-14
gws-dev.1688.comdevIn scope2026-11-14
local.1688.comdevIn scope2026-11-14
www.local.1688.comdevIn scope2026-11-14
localhost.1688.comdevIn scope2026-11-14
m-dev.1688.comdevIn scope2026-11-14
dev.m.1688.comdevIn scope2026-11-14
localhost.m.1688.comdevIn scope2026-11-14
nodejs-dev.1688.comdevIn scope2026-11-14
sk-lab-dev-186.iele.poztzb.1688.comdevIn scope2026-11-14
searchportal-dev.1688.comdevIn scope2026-11-14
local.secure.1688.comdevIn scope2026-11-14
dev.shop.1688.comdevIn scope2026-11-14
systemjs-dev.1688.comdevIn scope2026-11-14
www-dev.1688.comdevIn scope2026-11-14
alicom-dev.alibaba-inc.comdevIn scope2026-11-14
wildcard.alicom-dev.alibaba-inc.comdevIn scope2026-11-14
pai-eas-dev.ap-southeast-1.alibaba-inc.comdevIn scope2026-11-14
pre-dev.campus.alibaba-inc.comdevIn scope2026-11-14
pai-eas-dev.cn-hangzhou.alibaba-inc.comdevIn scope2026-11-14
pai-eas-dev.cn-shanghai.alibaba-inc.comdevIn scope2026-11-14
pai-eas-dev.cn-wulanchabu.alibaba-inc.comdevIn scope2026-11-14
pai-eas-dev.cn-zhangjiakou.alibaba-inc.comdevIn scope2026-11-14
dev.alibaba-inc.comdevIn scope2026-11-14
dev1.alibaba-inc.comdevIn scope2026-11-14
develop.alibaba-inc.comdevIn scope2026-11-14

710,334 names are covered by the program's own scope; 22 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.