Target Policy

https://hackerone.com/indrive?type=team

---

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• watchdocs.indriverapp.com

  URL

  critical
• argocd.indrive.dev

  URL

  critical
• ab-platform-api.eu-east-1.indriverapp.com

  URL

  critical
• profile-api.eu-east-1.indriverapp.com

  URL

  critical
• terra-*.indriverapp.com

  WILDCARD

  critical
• super-services.indriverapp.com

  URL

  critical
• wga.volans.tech

  URL

  critical
• *.indrive.com

  WILDCARD

  critical
• https://api-proxy.choco.kz/partner/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/tips/*

  WILDCARD

  critical
• landing.choco.kz

  URL

  critical
• https://api-proxy.choco.kz/ofd/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/orders/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/smart-receipt/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/courier/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/lavka-ab/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/ryadom-eta/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/ryadom-review/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/api/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/balance/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/composite/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/lavka-favorites/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/lavka-tip/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/lavka/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/lavka-promoaction/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/locations/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/loyalty/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/qrcode/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/reviews/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/v1/*

  WILDCARD

  critical
• https://ryadom-sso.choco.kz/oauth/*

  WILDCARD

  critical
• webryadom.choco.kz

  URL

  critical
• https://api.ryadom.kz/api/*

  WILDCARD

  critical
• https://api.ryadom.kz/courier/*

  WILDCARD

  critical
• https://api.ryadom.kz/lavka/*

  WILDCARD

  critical
• job.ryadom.kz

  URL

  critical
• ryadom.kz

  URL

  critical
• https://*.indriverjob.com

  WILDCARD

  critical
• volans.tech

  URL

  critical
• *.indriverapp.com

  WILDCARD

  critical
• new-order.eu-east-1.indriverapp.com

  URL

  critical
• aws.indrive.tech

  URL

  critical
• cargo.indrive.com

  URL

  critical
• https://cas-cf.euce1.indriverapp.com/api/passkey

  URL

  critical
• alternativa.film

  URL

  high
• intercity-*.eu-east-1.indriverapp.com

  WILDCARD

  critical
• http://terra-*.indriverapp.com

  WILDCARD

  critical
• http://intercity-*.eu-east-1.indriverapp.com

  WILDCARD

  critical
• http://*.indriverapp.com

  WILDCARD

  critical
• http://*.indriver.com

  WILDCARD

  medium
• http://*.indrive.com

  WILDCARD

  medium
• *.indriver.com

  WILDCARD

  medium
• messenger.eu-east-1.indriverapp.comNgi

  URL

  critical
• auroratechaward.com

  URL

  high
• ci.indrive.dev

  URL

  critical
• https://*.indriver.io

  WILDCARD

  critical
• auth2.indrive.tech

  URL

  critical
• bridekidnapping.alternativa.film

  URL

  high
• festival.alternativa.film

  URL

  high
• indrive.alternativa.film

  URL

  high
• truck-api.eu-east-1.indriverapp.com

  URL

  critical
• priority.eu-east-1.indriverapp.com

  URL

  critical
• messenger.eu-east-1.indriverapp.com

  URL

  critical
• external.indrive.dev

  URL

  critical
• debug.clairvoyance.indrive.tech

  URL

  critical
• ingest.clairvoyance.indrive.tech

  URL

  critical
• injob.indriver.com

  URL

  critical
• file-storage-front.eu-east-1.indriverapp.com

  URL

  critical
• auth.indrive.tech

  URL

  critical

Target Scope Domains

• ab-platform-api.eu-east-1.indriverapp.com
• alternativa.film
• api-proxy.choco.kz
• api.ryadom.kz
• argocd.indrive.dev
• auroratechaward.com
• auth.indrive.tech
• auth2.indrive.tech
• aws.indrive.tech
• bridekidnapping.alternativa.film
• cargo.indrive.com
• cas-cf.euce1.indriverapp.com
• ci.indrive.dev
• debug.clairvoyance.indrive.tech
• external.indrive.dev
• festival.alternativa.film
• file-storage-front.eu-east-1.indriverapp.com
• indrive.alternativa.film
• indrive.com
• indriver.com
• indriver.io
• indriverapp.com
• indriverjob.com
• ingest.clairvoyance.indrive.tech
• injob.indriver.com
• intercity-eu-east-1.indriverapp.com
• job.ryadom.kz
• landing.choco.kz
• messenger.eu-east-1.indriverapp.com
• messenger.eu-east-1.indriverapp.comngi
• new-order.eu-east-1.indriverapp.com
• priority.eu-east-1.indriverapp.com
• profile-api.eu-east-1.indriverapp.com
• ryadom-sso.choco.kz
• ryadom.kz
• super-services.indriverapp.com
• terra-indriverapp.com
• truck-api.eu-east-1.indriverapp.com
• volans.tech
• watchdocs.indriverapp.com
• webryadom.choco.kz
• wga.volans.tech

• 888 Subdomains
• 6874 Endpoints
• Download wordlist

---

Last Finished Scan:

---