Instruction: Please note that this domain hosts user-uploaded files which are intentionally public for sharing on IRC. These do not constitute an information disclosure vulnerability and reports will be closed as "Not Applicable".
Integrity requirements: high
Max severity: critical
Asset identifier: *.irccloud.com
Asset type: URL
Availability requirement: high
Confidentiality requirement: high
Eligible for bounty: true
Eligible for submissions: true
Instruction: In particular IRC connection hosts listed here: https://www.irccloud.com/networks
Integrity requirements: high
Max severity: critical
Asset identifier: api.irccloud.com
Asset type: URL
Availability requirement: high
Confidentiality requirement: high
Eligible for bounty: true
Eligible for submissions: true
Instruction:
Integrity requirements: high
Max severity: critical
Asset identifier: blog.irccloud.com
Asset type: URL
Availability requirement: low
Confidentiality requirement: low
Eligible for bounty: true
Eligible for submissions: true
Instruction:
Integrity requirements: low
Max severity: medium
Asset identifier: com.irccloud.IRCCloud
Asset type: APPLE_STORE_APP_ID
Availability requirement: high
Confidentiality requirement: high
Eligible for bounty: true
Eligible for submissions: true
Instruction: The iOS app is open source, decompilation issues are not eligible https://github.com/irccloud/ios
Vulnerabilities requiring local or root access to a device are also not eligible.
Integrity requirements: high
Max severity: critical
Asset identifier: com.irccloud.android
Asset type: GOOGLE_PLAY_APP_ID
Availability requirement: high
Confidentiality requirement: high
Eligible for bounty: true
Eligible for submissions: true
Instruction: The Android app is open source, decompilation issues are not eligible https://github.com/irccloud/android
Vulnerabilities requiring local or root access to a device are also not eligible.
