Skip to content
Connect AISign inSign up free

Bug bounty program

SN

Snapchat

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
40
Disclosed reports
37
Subdomains
1,681

Most upvoted reports37

All reports
Most upvoted reports of Snapchat
ReportWeaknessDisclosedBountyVotes
Exposed Kubernetes API - RCE/Exposed CredsAnalysed#455645Command and Code Injection2021-07-29$25,0001,191
Improper Authentication - any user can login as other user with otp/logout & otp/loginAnalysed#921780Authentication2021-09-03–972
Delete anyone's content spotlight remotely.Analysed#1819832Insecure Direct Object Reference2023-03-06$15,000801
Github Token Leaked publicly for https://github.sc-corp.netAnalysed#396467Cryptography2018-10-08–582
Publicly accessible Continuous Integration ToolAnalysed#313457Access Control2021-07-29–562
Access to multiple production Grafana dashboardsAnalysed#663628Information Disclosure2020-11-04$10,000464
Open prod Jenkins instanceAnalysed#231460Information Disclosure2017-08-19$15,000436
Server-Side Request Forgery using Javascript allows to exfill data from Google MetadataAnalysed#530974Server-Side Request Forgery2020-11-30–421
Stealing SSO Login Tokens (snappublisher.snapchat.com)Analysed#265943Authentication2021-07-29$7,500244
Leaked JFrog Artifactory username and password exposed on GitHub - https://snapchat.jfrog.ioAnalysed#911606Information Disclosure2021-08-12$15,000137

Subdomains1,681

Root
Scope
Name suggests
First seen
Text file1,681 names
Subdomains of Snapchat
NameScopeFirst seen
webattachmentsks-vendingtransactions-mq3.snappublisher.snapchat.comNot in the scope2026-11-14
webdisk.snappublisher.snapchat.comNot in the scope2026-11-14
webhook.snappublisher.snapchat.comNot in the scope2026-11-14
webmail.snappublisher.snapchat.commailNot in the scope2026-11-14
webmailchat-gateway051-prod.snappublisher.snapchat.comNot in the scope2026-11-14
westeurope-antivirus.snappublisher.snapchat.comNot in the scope2026-11-14
wfm-service.snappublisher.snapchat.comNot in the scope2026-11-14
whm.snappublisher.snapchat.comNot in the scope2026-11-14
whois.snappublisher.snapchat.comNot in the scope2026-11-14
wiki.snappublisher.snapchat.comtoolsNot in the scope2026-11-14
wildcard.snappublisher.snapchat.comNot in the scope2026-11-14
wordpress.snappublisher.snapchat.comNot in the scope2026-11-14
wp.snappublisher.snapchat.comNot in the scope2026-11-14
ww1.snappublisher.snapchat.comNot in the scope2026-11-14
www.snappublisher.snapchat.comNot in the scope2026-11-14
www1.snappublisher.snapchat.comNot in the scope2026-11-14
www2.snappublisher.snapchat.comNot in the scope2026-11-14
liveupdate.www2.snappublisher.snapchat.comNot in the scope2026-11-14
static.snapchat.comNot in the scope2026-11-14
static-payments.snapchat.comNot in the scope2026-11-14
store.snapchat.comIn scope2026-11-14
story.snapchat.comIn scope2026-11-14
story-insights.snapchat.comNot in the scope2026-11-14
us-east-1.story-studio.snapchat.comNot in the scope2026-11-14
storysharing.snapchat.comNot in the scope2026-11-14
studio-app.snapchat.comNot in the scope2026-11-14
studio-crash.snapchat.comNot in the scope2026-11-14
subscriptions.snapchat.comNot in the scope2026-11-14
subscriptions-beta.snapchat.comstagingNot in the scope2026-11-14
subscriptions-dev.snapchat.comdevNot in the scope2026-11-14
support.snapchat.comListed out of scope2026-11-14
mail.support.snapchat.commailNot in the scope2026-11-14
mail2.support.snapchat.commailNot in the scope2026-11-14
survey.snapchat.comNot in the scope2026-11-14
t.snapchat.comNot in the scope2026-11-14
test.snapchat.comtestNot in the scope2026-11-14
thekeys.snapchat.comNot in the scope2026-11-14
thekeysau.snapchat.comNot in the scope2026-11-14
thekeysca.snapchat.comNot in the scope2026-11-14
thekeyseu.snapchat.comNot in the scope2026-11-14
thekeysuk.snapchat.comNot in the scope2026-11-14
topic-sticker-vending.snapchat.comNot in the scope2026-11-14
topic-sticker-vending-us-east-1.snapchat.comNot in the scope2026-11-14
tr.snapchat.comNot in the scope2026-11-14
tr-shadow.snapchat.comNot in the scope2026-11-14
tr-shadow2.snapchat.comNot in the scope2026-11-14
tr2.snapchat.comNot in the scope2026-11-14
tr6.snapchat.comNot in the scope2026-11-14
trends.snapchat.comNot in the scope2026-11-14
v.snapchat.comNot in the scope2026-11-14
w.snapchat.comNot in the scope2026-11-14
web.snapchat.comIn scope2026-11-14
web-prod.snapchat.comNot in the scope2026-11-14
webattachments.snapchat.comNot in the scope2026-11-14
whatis.snapchat.comNot in the scope2026-11-14
ww.snapchat.comNot in the scope2026-11-14
www.snapchat.comNot in the scope2026-11-14
www.www.snapchat.comNot in the scope2026-11-14
o8.mail.spectacles.commailNot in the scope2026-11-14
orders.spectacles.comNot in the scope2026-11-14
cad-en.orders.spectacles.comNot in the scope2026-11-14
cad-fr.orders.spectacles.comNot in the scope2026-11-14
chf-de.orders.spectacles.comNot in the scope2026-11-14
chf-fr.orders.spectacles.comNot in the scope2026-11-14
e.orders.spectacles.comNot in the scope2026-11-14
eur-de.orders.spectacles.comNot in the scope2026-11-14
eur-en.orders.spectacles.comNot in the scope2026-11-14
eur-es.orders.spectacles.comNot in the scope2026-11-14
eur-fr.orders.spectacles.comNot in the scope2026-11-14
eur-it.orders.spectacles.comNot in the scope2026-11-14
eur-nl.orders.spectacles.comNot in the scope2026-11-14
gbp-en.orders.spectacles.comNot in the scope2026-11-14
ksa-en.orders.spectacles.comNot in the scope2026-11-14
pln-pl.orders.spectacles.comNot in the scope2026-11-14
uae-en.orders.spectacles.comNot in the scope2026-11-14
us-dev.orders.spectacles.comdevNot in the scope2026-11-14
returns.spectacles.comListed out of scope2026-11-14
www.returns.spectacles.comNot in the scope2026-11-14
email.subscription.spectacles.comNot in the scope2026-11-14
support.spectacles.comNot in the scope2026-11-14
www.spectacles.comNot in the scope2026-11-14

17 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated