Bug Bounties

Lark Technologies

Powered by: 

Allows bounty splitting: 

Average time to first program response: 11

Average time to bounty awarded null: 73

Average time to report resolved: 

Handle lark_technologies

Managed program: true

Name: Lark Technologies

Offers bounties: true

Offers swag: true

Response efficiency percentage: 100

Submission state: open

Url: https://hackerone.com/lark_technologies

Website: https://www.larksuite.com

In scope:

  • Asset identifier: 1452166623
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset Only the latest version of the application will be in scope. [Download from the Apple App Store here](https://apps.apple.com/app/lark-collaboration-tool/id1452166623)
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Mac OS Executable: Download here https://www.larksuite.com/download
  • Asset type: DOWNLOADABLE_EXECUTABLES
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset This is the Lark Suite application for Mac OS. Only the latest version of the application will be in scope. Please download the latest version of the application here: https://www.larksuite.com/download
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Windows OS Executable: Download here https://www.larksuite.com/download
  • Asset type: DOWNLOADABLE_EXECUTABLES
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset This is the Lark Suite application for Windows. Only the latest version of the application will be in scope. Please download the latest version of the application here: https://www.larksuite.com/download
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: api.larksuite.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: app.larksuite.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 2** Asset
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: caldav.larksuite.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: com.larksuite.suite
  • Asset type: OTHER_APK
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset Only the latest version of the application will be in scope. [Download from the Google Play Store here](https://play.google.com/store/apps/details?id=com.larksuite.suite)
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: file.larksuite.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: hackers_chosendomain.larksuite.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset <hacker’s_chosendomain>.larksuite.com If you find a vulnerability against your own test account domain, please feel free to use this asset for submission.
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: internal-api-drive-stream.larksuite.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: internal-api-lark-api.larksuite.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: internal-api.larksuite.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: lark-frontier.byteoversea.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: larksuite.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: open.larksuite.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: passport.larksuite.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 1** Asset
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: status.larksuite.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: **Tier 2** Asset
  • Integrity requirements: 
  • Max severity: critical