Instruction: www.urbanclap.com is also our root and critical domain. Most of our traffic routes through it.
Integrity requirements:
Max severity: critical
Asset identifier: www.urbancompany.com
Asset type: URL
Availability requirement:
Confidentiality requirement:
Eligible for bounty: true
Eligible for submissions: true
Instruction: www.urbancompany.com is our main and critical domain. Most of our traffic routes through urbanclap.com. Other subdomains mentioned in scope are for internal purpose and either are password protected or Google auth protected. We do not wish anyone to login to mentioned domains and hence they are critical for us to find vulnerabilities in.
**partner.urbancompany.com is one of the critical subdomains within this asset.**
Testing Directions:
* A user can Sign Up using his phone number and email ID from the website home page or app. Do ensure that you are reachable on the mobile number that you shall use to register with us. While creating account reporters should use their own HackerOne email address like [handle]@wearehackerone.com
