RECON MASTER CONTEST 2022

Why should I participate?

Our goal is to strengthen the infosec community by building a more accurate and curated list of domain and subdomain names. With the great success of the Recon Master Contest 2021, we want to carry on this community effort and we’re counting on your enumerations to continue helping everyone access the best domain data.

How are scores calculated?

Once you send your Amass enumeration results our system will award points based on how many accurate and new findings your subdomain/domain enumerations have contributed. The points you receive will be posted on our leaderboard.

Why isn’t my name appearing on the leaderboard?

Participants will not appear on the leaderboard until after 100 accepted submissions. You can see the number of results submitted by you on the contest account console page.

What do I have to lose?

Nothing, but you can win some nice prizes.

What is in scope to be counted?

We consider a hostname valid if your hostname is not in our database yet and resolves to an IPv4 IP address (either directly with an A record or through a CNAME chain). Wildcards are not applicable. Dynamic hostnames are out of scope, but DynDNS (hostname.dyndnsprovider.com) is in scope. It is also out of scope to submit automatically generated hostnames (e.g. subdomains used for user-tracking) and hostnames created to be submitted to this contest. Provider-generated hostnames (e.g. dynamic-198-051-100-004.xx.xx.pool.example.org or xx2-233-252-248-247.compute-1.example.com) are not permitted and will not be counted toward valid submissions. Processing your submission usually takes up to 2 hours, in some rare cases it can take up to 48 hours. You can check the status of your submissions here.

What happens if multiple people submit the same hostname at a similar time?

The submissions are processed in batches. If two users submit the same hostnames close together, the hostname is assigned randomly to one of those users.

Can I use an application other than Amass?

Yes. You can also submit hostnames using our API Endpoint.

I hit the rate limit, can you please increase the limit?

Please try to send your submissions in batches no larger than 100MB.

Is there a daily quota for submissions?

We have a submissions limit of up to 3GB/day per user.

Do I need to behave?

Yes please. You may be disqualified from the contest if you send too many unresolvable hostnames. You may also be disqualified if we detect that you submit what looks like self-created hostnames. Also, please only share hostnames with us that you are allowed to under any existing agreements. Breaking this rule might lead to disqualification.

Do you have any suggestions or comments?

We are on Twitter and LinkedIn - you can also reach us by joining our Slack.

What is the legal fineprint?

TL;DR The contest takes place between August 29th, 2022 at 7 am EDT and ends on October 31st 2022 at 6:00 pm EDT. You can win by submitting the most new hostnames that we're not tracking and accept during that period.

Read More

1. Eligibility: the SecurityTrails Recon Master Contest is open to legal residents of any countries not on the United State’s OFAC list. Entrants must be 18 years of age as of their date of entry in this promotion in order to qualify. This contest is subject to federal, state, and local laws and regulations and void where prohibited by law. SecurityTrails employees, its subsidiaries, affiliates, suppliers, partners, advertising and promotion agencies, and directors (collectively the “Employees”), as well as members of an Employees' immediate family and/or those living in the same household of Employees, are ineligible to participate in the SecurityTrails Recon Master Contest.

2. Sponsorship: The sponsor is SecurityTrails (“Sponsor”), located in Orlando, FL. Sponsor will conduct the contest substantially as described in these Official Rules.

3. Agreement to Rules: By entering this contest, the Entrant (“You”) agrees to abide by the Sponsor's Official Rules and decisions, which are fully and unconditionally binding in all respects. The Sponsor reserves the right to refuse, withdraw, or disqualify any entry at any time at the Sponsor’s sole discretion. By entering this contest the You represents and warrants that You are eligible to participate based on eligibility requirements explained in the Official Rules. You also agree to accept the decisions of the Sponsor as final and binding as it relates to the content of this SecurityTrails Recon Master Contest.

4. SecurityTrails Recon Master Contest Entry Period: This promotion begins on August 29th 2022 at 7 am EDT and ends on October 31st 2022 at 6:00 pm EDT (“Entry Period”). To be eligible for the contest, entries must be received within the specified Entry Period.

5. How to Enter: Eligible entrants can enter the SecurityTrails Recon Master Contest by submitting hostnames through the Submit Hostnames API endpoint (https://docs.securitytrails.com/reference/submit-hostnames). As a participant, your entry must fully meet all contest requirements, as specified in the Official Rules, in order to be eligible to win a prize. Incomplete entries or those that do not adhere to the Official Rules or specifications will be disqualified at the Sponsor's sole discretion.

6. Prizes: The Winner(s) of the SecurityTrails Recon Master Contest (the “Winner”) will receive the following prizes as summarized below: 1st - Place $5000 Cash, Swag Pack + ASI Access for 1 year + 5000 monthly API credits. 2nd - Place $2500 Cash, Swag Pack + 2500 monthly API credits. 3rd Place - $1000 Cash, Swag Pack + 1000 monthly API credits. 4-10th Place - Swag pack, SurfaceBrowser Access for 1 year. The actual/appraised prize value may differ at the time the prize is awarded. The prize(s) shall be determined solely by the Sponsor. There shall be no cash or other prize substitution permitted except at the Sponsor’s discretion. The prize is non-transferable. The Winner, upon acceptance of the prize, is solely responsible for all expenses related to the prize, including without limitation any and all local, state, and federal taxes. The Winner shall not transfer assignment of the prize to others nor shall the Winner request the cash equivalent or prize substitution. By accepting the prize, the selected Winner grants permission for the Sponsor to use the Winner’s likeness, entry, and name for purposes of advertising and trade without further compensation unless prohibited by law.

7. Odds: The total number of eligible entries received determines the odds of winning.

8. Selection and Notification of Winner: The Winner will be selected based on the number of successful new hostname submissions under the supervision of the Sponsor. The Sponsor will notify the Winner(s) by email within five days following Winner selection. The Sponsor is not responsible for, nor shall have any liability for Winner’s failure to receive notices due to email security settings that may cause notifications to be marked as spam or junk email. The Sponsor shall not be liable for the Winner’s provision of incorrect or otherwise non-functioning contact information. If the Winner 1) fails to claim the prize within 90 days from the time the award notification was sent, 2) is found ineligible, or 3) does not complete and return an executed declaration and release within the specified timeframe, the prize may be forfeited and an alternate Winner may be selected. Receipt of the prize (offered in the SecurityTrails Recon Master Contest) by the Winner is upon the condition of compliance with any and all federal, state, and local laws and regulations. IF THE WINNER VIOLATES ANY OF THESE OFFICIAL RULES, THE WINNER (AT THE SPONSOR’S SOLE DISCRETION) WILL BE DISQUALIFIED, AND ALL PRIVILEGES AS A WINNER WILL BE IMMEDIATELY TERMINATED.

9. Rights Granted by You: By submitting an entry API into this contest, you understand and agree that the Sponsor, any individual acting on the Sponsor’s behalf, and the licensees' successors, and assigns of the Sponsor shall where permitted by law, have the right to print, publish, broadcast, distribute and use in any media known now or hereafter developed, in perpetuity, worldwide, and without limitation, your submission, name, photo, portrait, voice, likeness, image, statements about the SecurityTrails Recon Master Contest, and your biographical information for news, publicity, advertising, promotional purposes, trade, information, and public relations without any further notice, review, consent, compensation, or remuneration.

10. Terms & Conditions: In its sole discretion, the Sponsor reserves the right to modify, suspend, cancel, or terminate the SecurityTrails Recon Master Contest should a non-authorized human intervention, a bug or virus, fraud, or other causes beyond the Sponsor’s control, impact or corrupt the security, fairness, proper conduct, or administration of the SecurityTrails Recon Master Contest. The Sponsor, in the event of any of the above issues, may determine the Winner based on all eligible entries received prior to and/or after (if appropriate) the action taken by the Sponsor. Individuals who tamper with or attempt to tamper with the operation or entry process of the contest or website or violate these Terms & Conditions will be disqualified by the Sponsor in its sole discretion. In its sole discretion, the Sponsor has the right to maintain the integrity of the SecurityTrails Recon Master Contest, to void votes for any reason, including, but not limited to: [identify any disallowed entry methods that will result in votes/entries being voided; examples: multiple entries from the same user; multiple entries from the same computer beyond the number allowed by the contest rules; or the use of bots, macros, scripts, or other technical means for entering.] Attempts by any entrant to deliberately damage any website or undermine the legitimate operation of the SecurityTrails Recon Master Contest may be a violation of criminal and civil laws. If any such attempt is made, the Sponsor reserves the right to seek damages to the fullest extent permitted by law.

11. Limitation of Liability: Your entry into this contest constitutes Your agreement to release and hold harmless the Sponsor and its subsidiaries, representatives, affiliates, partners, advertising and promotion agencies, successors, agents, assigns, directors, employees, and officers against and from any and all claims, liability, illness, injury, death, litigation, loss, or damages that may occur, directly or indirectly from participation in the contest and/or the 1) Winner accepting, possessing, using, or misusing of any awarded prize or any portion thereof; 2) any type of technical failure; 3) the unavailability or inaccessibility of any transmissions, phone, or Internet service; 4) unauthorized intervention in any part of the entry process or the Promotion; 5) electronic error or human error in the Promotion administration or the processing of entries.

12. Disputes: THIS CONTEST IS GOVERNED BY THE LAWS OF THE UNITED STATES AND THE STATE OF FLORIDA, WITHOUT RESPECT TO CONFLICT OF LAW DOCTRINES. The Entrant agrees, as a condition of participating in this promotion, that if any disputes cannot be resolved between the Entrant and the Sponsor, and if causes of action arise out of or are connected with this contest, they shall be individually resolved exclusively before a court located in the state of California, without resorting to any form of class action. Under no circumstances in any such dispute shall the participant be permitted to obtain awards for, and hereby waives all rights to, punitive, incidental, or consequential damages, including reasonable attorney’s fees, other than participant’s actual out-of-pocket expenses (i.e. costs associated with entering this contest). The participant waives all rights to have damages multiplied or increased.

13. Winners List: You may obtain a copy of the Winner’s name(s) or a copy of these Official Rules,
    https://securitytrails.com/corp/recon-master-contest-2022.