PentestingHere
Log in Join

Kohl's

Kohl's on Bugcrowd · Bugcrowd Active

Official page

Scope

At a glance

  • Maximum payout: $4,500
  • Public disclosure: Allowed
  • Managed by the platform: Yes
  • Safe harbour: Partial

In scope

  • Kohl’s entire public digital footprint that is not Out-Of-Scope(See list below)
  • https://www.kohls.com
  • https://www.kohls.com/feature/app.jsp

Out of scope

  • apply.kohls.com
  • *kohls.com/kohlscredit/prequal
  • *kohlsecommerce.com/kohlscredit/prequal
  • corporate.kohls.com
  • productchampions.kohls.com
  • link-preprod.kohls.com
  • developer.kohls.com
  • lclive.kohls.com
  • author-mykohls.kohls.com
  • mykohls-origin.kohls.com
  • origin-stage65-corporate.kohls.com
  • origin-stage65-mykohls.kohls.com
  • author-stage65-mykohls.kohls.com
  • stage65-corporate.kohls.com
  • stage65-mykohls.kohls.com
  • author-qa65-mykohls.kohls.com
  • mykohls.kohls.com
  • any domain with archaius.json endoint is out of scope
  • *kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooter
  • *kohls.com/checkout/prequal_inquiry.jsp#/preQualEligible
  • *kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooter
  • *kohlsecommerce.com/checkout/prequal_inquiry.jsp#/preQualEligible
  • vp-*.kohls.com
  • *qa*.kohls.com
  • wfh*.kohls.com
  • kconnect.kohls.com
  • connection.kohls.com
  • kohlsmerch.kohls.com/
  • http://www.b2b.kohls.com

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback