Target Policy

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• https://stage.services.mastercard.com/dxp/send/email

  api

  None
• https://stage.services.mastercard.com/dxp/form/submit

  api

  None
• https://stage.services.mastercard.com/dxp/twitter/timeline?screenName=MastercardUK

  api

  None
• https://stage.services.mastercard.com/dxp/twitter/hashtag?hashtag=Priceless

  api

  None
• https://stage.services.mastercard.com/dxp/search/dm-mccom

  api

  None
• https://stage.services.mastercard.com/dxp/suggest/dm-mccom

  api

  None
• https://stage.services.mastercard.com/dxp/captcha/generate

  api

  None
• https://stage.services.mastercard.com/dxp/offers/getofferdetails/8e6a1d47-0489-4cd6-9263-b349b30b91fc

  api

  None
• https://stage.services.mastercard.com/dxp/offers/getofferdetails/774cc452-1f91-49d9-8a95-5c896ee70b63

  api

  None
• https://stage.services.mastercard.com/dm/ugc/user/reply

  api

  None
• https://stage.services.mastercard.com/dm/ugc/user/reply/like

  api

  None
• https://stage.services.mastercard.com/dm/ugc/user/reply/dislike

  api

  None
• https://stage.services.mastercard.com/dm/ugc/user/feedback?

  api

  None
• https://stage.services.mastercard.com/dm/ugc/user/comment/dislike

  api

  None
• https://stage.services.mastercard.com/dm/ugc/user/comment/like

  api

  None
• https://stage.services.mastercard.com/dm/ugc/user/feedback

  api

  None
• https://stage.services.mastercard.com/dm/ugc/user/comment

  api

  None
• https://stage.services.mastercard.com/dm/ugc/moderator/comment

  api

  None
• https://stage.services.mastercard.com/dm/ugc/moderator/comment/pending

  api

  None
• Mastercard Receipt Management iOS Application

  ios

  None
• Mastercard Receipt Management Android Application

  android

  None

Target Scope Domains

• stage.services.mastercard.com

• Download wordlist

Last Finished Scan: