Target Policy

https://hackerone.com/oppo_bbp?type=team

---

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• LockScreenMagazine

  ---

  It's an inner application of OPPO mobile.

  OTHER

  critical
• https://find.yun.oppo.com/

  URL

  critical
• https://support.oppo.com/cn/

  URL

  critical
• Reno9Pro5G

  HARDWARE

  critical
• Reno8Pro5G

  HARDWARE

  critical
• Reno12Pro

  HARDWARE

  critical
• *.oppomobile.com

  WILDCARD

  critical
• com.coloros.video

  GOOGLE_PLAY_APP_ID

  critical
• com.coloros.assistantscreen

  OTHER_APK

  critical
• com.oppo.usercenter

  GOOGLE_PLAY_APP_ID

  critical
• https://cloud.heytap.com/

  URL

  critical
• *.myoas.net

  WILDCARD

  critical
• *.oppo.com

  WILDCARD

  critical
• http://heytapmobi.com

  URL

  critical
• com.oppo.quicksearchbox

  GOOGLE_PLAY_APP_ID

  critical
• com.heytap.market

  GOOGLE_PLAY_APP_ID

  critical
• A96

  HARDWARE

  critical
• K10

  HARDWARE

  critical
• com.heytap.xgame

  GOOGLE_PLAY_APP_ID

  critical
• https://sbox.myoas.com

  URL

  critical
• com.opos.ads

  GOOGLE_PLAY_APP_ID

  critical
• *.nearme.com.cn

  WILDCARD

  critical
• https://ifind.heytapmobi.com

  URL

  critical
• opposhop.cn

  URL

  critical
• OPPO+

  ---

  It's an inner application of OPPO mobile.

  OTHER

  critical
• K105G

  HARDWARE

  critical
• QuickApps

  ---

  It's an inner application of OPPO mobile.

  OTHER

  critical
• A16k

  HARDWARE

  critical
• https://www.oppo.com/in/

  URL

  critical
• K9Pro

  HARDWARE

  critical
• https://spgw-pay.finzfin.com

  URL

  critical
• com.oplus.themestore

  GOOGLE_PLAY_APP_ID

  critical
• https://www.opposhop.cn/m/

  URL

  critical
• com.heytap.music

  OTHER_APK

  critical
• A76

  HARDWARE

  critical
• ColorOS

  ---

  It's an inner application of OPPO mobile.

  OTHER

  critical
• https://career.oppo.com/

  URL

  critical
• F 21 Pro

  HARDWARE

  critical
• com.oppo.cloud

  GOOGLE_PLAY_APP_ID

  critical
• com.oplus.account

  GOOGLE_PLAY_APP_ID

  critical
• *.wanyol.com

  WILDCARD

  critical
• *.myoas.com

  WILDCARD

  critical
• community.coloros.com

  URL

  critical
• com.coloros.browser

  GOOGLE_PLAY_APP_ID

  critical
• https://hd.opposhop.cn

  URL

  critical
• K9

  HARDWARE

  critical
• com.heytap.themestore

  GOOGLE_PLAY_APP_ID

  critical
• https://chat.oppo.com/

  URL

  critical
• com.oppo.market

  GOOGLE_PLAY_APP_ID

  critical
• http://coloros.com

  URL

  critical
• com.oppo.encryption

  GOOGLE_PLAY_APP_ID

  critical
• com.oppo.speechassist

  GOOGLE_PLAY_APP_ID

  critical
• Test environment

  OTHER

  critical
• https://www.oppo.com/my/store

  URL

  critical
• https://www.oppo.com/th/store

  URL

  critical
• https://www.oppo.com/th

  URL

  critical
• https://www.oppo.com/id/store

  URL

  critical
• com.heytap.store

  GOOGLE_PLAY_APP_ID

  critical
• com.heytap.mall

  GOOGLE_PLAY_APP_ID

  critical
• https://developers.oppomobile.com

  URL

  critical
• com.heytap.browser

  GOOGLE_PLAY_APP_ID

  critical
• https://e.heytap.com/

  URL

  critical
• Reno 9 5G

  HARDWARE

  critical
• https://mtp.myoas.com

  URL

  critical
• https://open.oppomobile.com

  URL

  critical
• Reno11Pro5G

  HARDWARE

  critical
• Reno12

  HARDWARE

  critical
• Reno9Pro+5G

  HARDWARE

  critical
• com.nearme.browser

  GOOGLE_PLAY_APP_ID

  critical
• com.nearme.themespace

  GOOGLE_PLAY_APP_ID

  critical
• FindX7

  HARDWARE

  critical
• FindX7Ultra

  HARDWARE

  critical
• Porsche-B

  HARDWARE

  critical
• https://e.oppomobile.com

  URL

  critical
• com.heytap.cloud

  GOOGLE_PLAY_APP_ID

  critical
• https://nativepay.keke.cn

  URL

  critical
• Reno105G

  HARDWARE

  critical
• Reno10Pro+5G

  HARDWARE

  critical
• com.heytap.health.international

  GOOGLE_PLAY_APP_ID

  critical
• com.oplus.member

  GOOGLE_PLAY_APP_ID

  critical
• https://ifind.oppomobile.com

  URL

  critical
• com.coloros.securepay

  GOOGLE_PLAY_APP_ID

  critical
• com.coloros.video

  OTHER_APK

  critical
• com.coloros.pictorial

  OTHER_APK

  critical
• *.coloros.com

  WILDCARD

  critical
• com.fintech.life

  GOOGLE_PLAY_APP_ID

  critical
• com.oplus.vip

  GOOGLE_PLAY_APP_ID

  critical
• myoppo.com

  ---

  *.myoppo.com

  URL

  critical
• finzjr.com

  URL

  critical
• finzfin.com

  URL

  critical
• nearme.com.cn

  URL

  critical
• com.coloros.speechassist

  GOOGLE_PLAY_APP_ID

  critical
• https://www.opposhop.cn/

  URL

  critical
• com.oplus.games

  OTHER_APK

  critical
• Reno10Pro5G

  HARDWARE

  critical
• Reno115G

  HARDWARE

  critical
• https://cloud.oppo.com/

  URL

  critical
• http://oppofind.com

  URL

  critical
• *.myoppo.com

  WILDCARD

  critical
• http://engine.heytap.com

  URL

  critical
• com.coloros.encryption

  GOOGLE_PLAY_APP_ID

  critical
• http://heytap.com

  URL

  critical
• com.nearme.themestore

  GOOGLE_PLAY_APP_ID

  critical
• FindN3Flip

  HARDWARE

  critical
• FindX6

  HARDWARE

  critical
• FindX6Pro

  HARDWARE

  critical
• FindN2

  HARDWARE

  critical
• FindN2Flip

  HARDWARE

  critical
• K9s

  HARDWARE

  critical
• com.heytap.pictorial

  OTHER_APK

  critical
• FindN3

  HARDWARE

  critical

Target Scope Domains

• career.oppo.com
• chat.oppo.com
• cloud.heytap.com
• cloud.oppo.com
• coloros.com
• community.coloros.com
• developers.oppomobile.com
• e.heytap.com
• e.oppomobile.com
• engine.heytap.com
• find.yun.oppo.com
• finzfin.com
• finzjr.com
• hd.opposhop.cn
• heytap.com
• heytapmobi.com
• ifind.heytapmobi.com
• ifind.oppomobile.com
• mtp.myoas.com
• myoas.com
• myoas.net
• myoppo.com
• nativepay.keke.cn
• nearme.com.cn
• open.oppomobile.com
• oppo.com
• oppofind.com
• oppomobile.com
• opposhop.cn
• sbox.myoas.com
• spgw-pay.finzfin.com
• support.oppo.com
• wanyol.com
• www.oppo.com
• www.opposhop.cn

• Download wordlist

---

Last Finished Scan:

---