Skip to content
Sign in

Bug bounty program

OP

OPPO

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
133
Disclosed reports
4
Subdomains
3,641

Most upvoted reports4

Most upvoted reports of OPPO
ReportWeaknessDisclosedBountyVotes
Arbitrary thread deletion on c.realme.com#869705Insecure Direct Object Reference–$60073
Information Disclosure at https://portal.finzfin.com/1.txt#1011073Information Disclosure–$5020
No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points#887684Input Validation and Logic–$10014
RXSS in https://store.oppomobile.com/#869870Cross-site Scripting–$10010

Subdomains3,641

Root
Scope
Name suggests
First seen
Text file3,641 names
Subdomains of OPPO
NameScopeFirst seen
account.coloros.comNot in the scope2026-11-14
activity.coloros.comNot in the scope2026-11-14
after-sales-eu.coloros.comNot in the scope2026-11-14
after-sales-sg.coloros.comNot in the scope2026-11-14
apicommunity.coloros.comNot in the scope2026-11-14
apps.coloros.comNot in the scope2026-11-14
breeno.apps.coloros.comNot in the scope2026-11-14
breenofs.apps.coloros.comNot in the scope2026-11-14
classify.apps.coloros.comNot in the scope2026-11-14
classify-eu.apps.coloros.comNot in the scope2026-11-14
classify-f.apps.coloros.comNot in the scope2026-11-14
i-grom.apps.coloros.comNot in the scope2026-11-14
ifgus-eu.apps.coloros.comNot in the scope2026-11-14
igus.apps.coloros.comNot in the scope2026-11-14
ilighthouse.apps.coloros.comNot in the scope2026-11-14
ilk.apps.coloros.comNot in the scope2026-11-14
ilk-eu.apps.coloros.comNot in the scope2026-11-14
ilkf.apps.coloros.comNot in the scope2026-11-14
ilockcard.apps.coloros.comNot in the scope2026-11-14
ilockcardf.apps.coloros.comNot in the scope2026-11-14
iproxyhonour.apps.coloros.comNot in the scope2026-11-14
iwisdom.apps.coloros.comNot in the scope2026-11-14
lighthouse.apps.coloros.comNot in the scope2026-11-14
meta-grom.apps.coloros.comNot in the scope2026-11-14
otarecruitf.apps.coloros.comNot in the scope2026-11-14
sccf.apps.coloros.comNot in the scope2026-11-14
sccf-eu.apps.coloros.comNot in the scope2026-11-14
smartcard.apps.coloros.comNot in the scope2026-11-14
smartcardf.apps.coloros.comNot in the scope2026-11-14
smartcardf-eu.apps.coloros.comNot in the scope2026-11-14
tedsync.apps.coloros.comNot in the scope2026-11-14
videoclip.apps.coloros.comNot in the scope2026-11-14
videoclipf.apps.coloros.comNot in the scope2026-11-14
videoclipf-eu.apps.coloros.comNot in the scope2026-11-14
asdt.coloros.comNot in the scope2026-11-14
athletic-board.coloros.comNot in the scope2026-11-14
avlconf.coloros.comNot in the scope2026-11-14
avlsecfs.coloros.comNot in the scope2026-11-14
bbs.coloros.comNot in the scope2026-11-14
bbs-test.coloros.comtestNot in the scope2026-11-14
breenofs.coloros.comNot in the scope2026-11-14
clonephone.coloros.comNot in the scope2026-11-14
i.clonephone.coloros.comNot in the scope2026-11-14
clonephonefs.coloros.comNot in the scope2026-11-14
coloroswebsitefs.coloros.comNot in the scope2026-11-14
comm.coloros.comNot in the scope2026-11-14
flow.comm.coloros.comNot in the scope2026-11-14
numbefs.comm.coloros.comNot in the scope2026-11-14
community.coloros.comNot in the scope2026-11-14
component-ota.coloros.comNot in the scope2026-11-14
component-ota-afs.coloros.comNot in the scope2026-11-14
component-ota-eu.coloros.comNot in the scope2026-11-14
component-ota-f.coloros.comNot in the scope2026-11-14
component-ota-fs-f.coloros.comNot in the scope2026-11-14
component-ota-in.coloros.comNot in the scope2026-11-14
conn1.coloros.comNot in the scope2026-11-14
conn2.coloros.comNot in the scope2026-11-14
conn2-origin-8318c4.coloros.comNot in the scope2026-11-14
conn3.coloros.comNot in the scope2026-11-14
conn4.coloros.comNot in the scope2026-11-14
conn5.coloros.comNot in the scope2026-11-14
disaster.coloros.comNot in the scope2026-11-14
en.coloros.comNot in the scope2026-11-14
enplatform.coloros.comNot in the scope2026-11-14
i.feedback.coloros.comNot in the scope2026-11-14
feedbackfs.coloros.comNot in the scope2026-11-14
file-grom.coloros.comNot in the scope2026-11-14
fileload.coloros.comNot in the scope2026-11-14
fms.coloros.comNot in the scope2026-11-14
foreign.coloros.comNot in the scope2026-11-14
i.feedback.foreign.coloros.comNot in the scope2026-11-14
i.ota.foreign.coloros.comNot in the scope2026-11-14
otafs.foreign.coloros.comNot in the scope2026-11-14
i.rus.foreign.coloros.comNot in the scope2026-11-14
rusfs.foreign.coloros.comNot in the scope2026-11-14
i.sau.foreign.coloros.comNot in the scope2026-11-14
saufs.foreign.coloros.comNot in the scope2026-11-14
fourier-phonescan-in.coloros.comNot in the scope2026-11-14
gui.coloros.comNot in the scope2026-11-14
guif.coloros.comNot in the scope2026-11-14
guif-eu.coloros.comNot in the scope2026-11-14
guif-in.coloros.comNot in the scope2026-11-14
guifs.coloros.comNot in the scope2026-11-14
h5.coloros.comNot in the scope2026-11-14
h5f.coloros.comNot in the scope2026-11-14
h5f-eu.coloros.comNot in the scope2026-11-14
h5fs.coloros.comNot in the scope2026-11-14
h5fsf.coloros.comNot in the scope2026-11-14
h5fsf-eu.coloros.comNot in the scope2026-11-14
hideip.coloros.comNot in the scope2026-11-14
hsb.coloros.comNot in the scope2026-11-14
hsbf.coloros.comNot in the scope2026-11-14
iacl-ota.coloros.comNot in the scope2026-11-14
icontributor.coloros.comNot in the scope2026-11-14
icontributor-eu.coloros.comNot in the scope2026-11-14
icosa.coloros.comNot in the scope2026-11-14
icosa-eu.coloros.comNot in the scope2026-11-14
icosa-sg.coloros.comNot in the scope2026-11-14
icota-eu.coloros.comNot in the scope2026-11-14
ifcontributor.coloros.comNot in the scope2026-11-14

16 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in