dinum-hubee-private-bug-bounty-program

YesWeHackView on YesWeHack
RawAI Enhanced
3
In Scope
3
Out of Scope
In-Scope Assets (3)
AssetCategoryBountyQuick Links
https://api.hubee.bas.numerique.gouv.frURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://auth.bas.hubee.numerique.gouv.frOTHERYes-
https://portail.bas.hubee.numerique.gouv.frURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (3)
AssetCategoryBounty
All domains or subdomains not listed in the above list of "Scopes" are considered out of scope.OTHERYes
All scenarios involving compromise of the user's workstation or phishing attacks.OTHERYes
So, be careful, the URLs "https://hubee.numerique.gouv.fr" and "https://demarches.hubee.numerique.gouv.fr" are out of scope.OTHERYes
Scope Changes (6)
Apr 16, 2026
ChangeAssetCategoryScopeTime
Addedhttps://portail.bas.hubee.numerique.gouv.frURLIn Scope18:33
Addedhttps://auth.bas.hubee.numerique.gouv.frOTHERIn Scope18:33
Addedhttps://api.hubee.bas.numerique.gouv.frURLIn Scope18:33
Addedall domains or subdomains not listed in the above list of "scopes" are considered out of scopeOTHEROut of Scope18:33
Addedso, be careful, the urls "https://hubee.numerique.gouv.fr" and "https://demarches.hubee.numerique.gouv.fr" are out of scopeOTHEROut of Scope18:33
Addedall scenarios involving compromise of the user's workstation or phishing attacksOTHEROut of Scope18:33