Target Policy

https://hackerone.com/indrive?type=team

---

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• pm-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• pm-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• pot-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• pot-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• pr-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• argocd.indrive.dev

  URL

  critical
• idp-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• tr-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• txm-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• vm-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• was-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• indrive.com

  URL

  critical
• movie.indrive.com

  URL

  high
• intercity.indrive.com

  URL

  critical
• media.indrive.com

  URL

  critical
• alternativa.film

  URL

  high
• cht-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• cht-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• co-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• co-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• dr-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• es-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• ra-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• ra-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• careers.indrive.com

  URL

  critical
• coaching.supernovas.indrive.com

  URL

  critical
• url-checker.indrive.com

  URL

  critical
• www.supernovas.indrive.com

  URL

  critical
• ab-api-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• as-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• as-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• bdu-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• cas-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• ath-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• ath-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• baf-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• truck-api.eu-east-1.indriverapp.com

  URL

  critical
• fe-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• g2-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• fch-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• fe-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• g2-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• in-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• in-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• inc-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• inc-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• no-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• msg-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• msg-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• nha-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• nha-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• no-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• pa-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• pa-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• pc-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• pc-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• rc-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• rp-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• rp-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• rs-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• rsm-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• sc-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• sfc-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• sfc-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• sn-api-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• sn-api-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• sur-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• tr-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• profile-api.eu-east-1.indriverapp.com

  URL

  critical
• dh-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• terra-*.indriverapp.com

  WILDCARD

  critical
• https://api-proxy.choco.kz/partner/*

  WILDCARD

  critical
• es-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• gt-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• gt-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• https://cas-cf.euce1.indriverapp.com/api/passkey

  URL

  critical
• https://api-proxy.choco.kz/tips/*

  WILDCARD

  critical
• landing.choco.kz

  URL

  critical
• https://api-proxy.choco.kz/ofd/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/orders/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/smart-receipt/*

  WILDCARD

  critical
• isa-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• super-services.indriverapp.com

  URL

  none
• https://api-proxy.choco.kz/courier/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/lavka-ab/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/ryadom-eta/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/ryadom-review/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/api/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/balance/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/composite/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/lavka-favorites/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/lavka-tip/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/lavka/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/lavka-promoaction/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/locations/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/loyalty/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/qrcode/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/reviews/*

  WILDCARD

  critical
• https://api-proxy.choco.kz/v1/*

  WILDCARD

  critical
• https://ryadom-sso.choco.kz/oauth/*

  WILDCARD

  critical
• webryadom.choco.kz

  URL

  critical
• https://api.ryadom.kz/api/*

  WILDCARD

  critical
• https://api.ryadom.kz/courier/*

  WILDCARD

  critical
• https://api.ryadom.kz/lavka/*

  WILDCARD

  critical
• job.ryadom.kz

  URL

  critical
• ryadom.kz

  URL

  critical
• https://*.indriverjob.com

  WILDCARD

  critical
• gvt-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• icl-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• aws.indrive.tech

  URL

  critical
• wlr-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• co-in-gw-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• courier-cf.*.aws.indriverapp.com

  WILDCARD

  critical
• oymyakon.indriver.io

  URL

  critical
• http://terra-*.indriverapp.com

  WILDCARD

  critical
• http://intercity-*.eu-east-1.indriverapp.com

  WILDCARD

  critical
• http://*.indriverapp.com

  WILDCARD

  critical
• http://*.indriver.com

  WILDCARD

  medium
• http://*.indrive.com

  WILDCARD

  medium
• messenger.eu-east-1.indriverapp.comNgi

  URL

  critical
• ci.indrive.dev

  URL

  critical
• couriers.indrive.com

  URL

  critical
• auth2.indrive.tech

  URL

  critical
• *.indriverapp.com

  WILDCARD

  critical
• bridekidnapping.alternativa.film

  URL

  high
• festival.alternativa.film

  URL

  high
• indrive.alternativa.film

  URL

  high
• auroratechaward.com

  URL

  high
• new-order.eu-east-1.indriverapp.com

  URL

  critical
• intercity-*.eu-east-1.indriverapp.com

  WILDCARD

  critical
• volans.tech

  URL

  critical
• wga.volans.tech

  URL

  critical
• teammate.indriver.io

  URL

  critical
• ab-platform-api.eu-east-1.indriverapp.com

  URL

  critical
• *.indriver.com

  WILDCARD

  medium
• *.indrive.com

  WILDCARD

  high
• cargo.indrive.com

  URL

  critical
• watchdocs.indriverapp.com

  URL

  critical
• https://*.indriver.io

  WILDCARD

  critical
• priority.eu-east-1.indriverapp.com

  URL

  critical
• messenger.eu-east-1.indriverapp.com

  URL

  critical
• external.indrive.dev

  URL

  critical
• debug.clairvoyance.indrive.tech

  URL

  critical
• ingest.clairvoyance.indrive.tech

  URL

  critical
• injob.indriver.com

  URL

  critical
• file-storage-front.eu-east-1.indriverapp.com

  URL

  critical
• auth.indrive.tech

  URL

  critical

Target Scope Domains

• ab-api-cf.aws.indriverapp.com
• ab-platform-api.eu-east-1.indriverapp.com
• alternativa.film
• api-proxy.choco.kz
• api.ryadom.kz
• argocd.indrive.dev
• as-cf.aws.indriverapp.com
• as-gw-cf.aws.indriverapp.com
• ath-cf.aws.indriverapp.com
• ath-gw-cf.aws.indriverapp.com
• auroratechaward.com
• auth.indrive.tech
• auth2.indrive.tech
• aws.indrive.tech
• baf-cf.aws.indriverapp.com
• bdu-cf.aws.indriverapp.com
• bridekidnapping.alternativa.film
• careers.indrive.com
• cargo.indrive.com
• cas-cf.aws.indriverapp.com
• cas-cf.euce1.indriverapp.com
• cht-cf.aws.indriverapp.com
• cht-gw-cf.aws.indriverapp.com
• ci.indrive.dev
• co-cf.aws.indriverapp.com
• co-gw-cf.aws.indriverapp.com
• co-in-gw-cf.aws.indriverapp.com
• coaching.supernovas.indrive.com
• courier-cf.aws.indriverapp.com
• couriers.indrive.com
• debug.clairvoyance.indrive.tech
• dh-gw-cf.aws.indriverapp.com
• dr-cf.aws.indriverapp.com
• es-cf.aws.indriverapp.com
• es-gw-cf.aws.indriverapp.com
• external.indrive.dev
• fch-cf.aws.indriverapp.com
• fe-cf.aws.indriverapp.com
• fe-gw-cf.aws.indriverapp.com
• festival.alternativa.film
• file-storage-front.eu-east-1.indriverapp.com
• g2-cf.aws.indriverapp.com
• g2-gw-cf.aws.indriverapp.com
• gt-cf.aws.indriverapp.com
• gt-gw-cf.aws.indriverapp.com
• gvt-cf.aws.indriverapp.com
• icl-cf.aws.indriverapp.com
• idp-cf.aws.indriverapp.com
• in-cf.aws.indriverapp.com
• in-gw-cf.aws.indriverapp.com
• inc-cf.aws.indriverapp.com
• inc-gw-cf.aws.indriverapp.com
• indrive.alternativa.film
• indrive.com
• indriver.com
• indriver.io
• indriverapp.com
• indriverjob.com
• ingest.clairvoyance.indrive.tech
• injob.indriver.com
• intercity-eu-east-1.indriverapp.com
• intercity.indrive.com
• isa-cf.aws.indriverapp.com
• job.ryadom.kz
• landing.choco.kz
• media.indrive.com
• messenger.eu-east-1.indriverapp.com
• messenger.eu-east-1.indriverapp.comngi
• movie.indrive.com
• msg-cf.aws.indriverapp.com
• msg-gw-cf.aws.indriverapp.com
• new-order.eu-east-1.indriverapp.com
• nha-cf.aws.indriverapp.com
• nha-gw-cf.aws.indriverapp.com
• no-cf.aws.indriverapp.com
• no-gw-cf.aws.indriverapp.com
• oymyakon.indriver.io
• pa-cf.aws.indriverapp.com
• pa-gw-cf.aws.indriverapp.com
• pc-cf.aws.indriverapp.com
• pc-gw-cf.aws.indriverapp.com
• pm-cf.aws.indriverapp.com
• pm-gw-cf.aws.indriverapp.com
• pot-cf.aws.indriverapp.com
• pot-gw-cf.aws.indriverapp.com
• pr-gw-cf.aws.indriverapp.com
• priority.eu-east-1.indriverapp.com
• profile-api.eu-east-1.indriverapp.com
• ra-cf.aws.indriverapp.com
• ra-gw-cf.aws.indriverapp.com
• rc-gw-cf.aws.indriverapp.com
• rp-cf.aws.indriverapp.com
• rp-gw-cf.aws.indriverapp.com
• rs-cf.aws.indriverapp.com
• rsm-cf.aws.indriverapp.com
• ryadom-sso.choco.kz
• ryadom.kz
• sc-cf.aws.indriverapp.com
• sfc-cf.aws.indriverapp.com
• sfc-gw-cf.aws.indriverapp.com
• sn-api-cf.aws.indriverapp.com
• sn-api-gw-cf.aws.indriverapp.com
• sur-cf.aws.indriverapp.com
• teammate.indriver.io
• terra-indriverapp.com
• tr-cf.aws.indriverapp.com
• tr-gw-cf.aws.indriverapp.com
• truck-api.eu-east-1.indriverapp.com
• txm-cf.aws.indriverapp.com
• url-checker.indrive.com
• vm-gw-cf.aws.indriverapp.com
• volans.tech
• was-gw-cf.aws.indriverapp.com
• watchdocs.indriverapp.com
• webryadom.choco.kz
• wga.volans.tech
• wlr-cf.aws.indriverapp.com
• www.supernovas.indrive.com

• 888 Subdomains
• 6874 Endpoints
• Download wordlist

---

Last Finished Scan:

---