Bug bounty program · HackerOne
Most upvoted reports61
- #3637898ValidOS Command Injection in `aws-cdk-lib` NodejsFunction via Unsanitized `OsCommand` Helper (Supply Chain RCE)AWS VDP · Command and Code Injection · 2026 · High–111votes
- #3205667ValidXSS on Amazon Aquisition: elementalAWS VDP · Cross-site Scripting · 2025 · High–83votes
- #3022516ValidNon-Production API Endpoints for the Forecast Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationAWS VDP · Other weaknesses · 2025 · Medium–75votes
- #3426839ValidUnlimited Reuse of Coupon Code Allows Free Shipping on All Orders on ██████████AWS VDP · Input Validation and Logic · 2026 · Low–69votes
- #3780277ValidNon-Production API Endpoints for the Amazon S3 Tables Service Fails to Log to CloudTrail Resulting in Silent Permission EnumerationAWS VDP · Other weaknesses · 2026 · Medium–69votes
- #2894222ValidA potential risk in the aws-lambda-ecs-run-task which can be used to privilege escalation.AWS VDP · Access Control · 2024 · Medium–68votes
- #2731133ValidExternal service interaction (HTTP)AWS VDP · Server-Side Request Forgery · 2024 · High–62votes
- #3287396ValidAWS | Self Registration Internal LibreChat : Access to internal/proprietary LLMsAWS VDP · Authentication · 2025 · Low–61votes
- #3577145ValidQuickSight Authorization Bypass: Chat Agents Accessible Despite Custom Permissions DenialAWS VDP · No weakness recorded · 2026 · None–59votes
- #3014785Valid(Part 2) Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission EnumerationAWS VDP · Other weaknesses · 2025 · Medium–56votes
Subdomains3,036
3,035 covered by the program's own scope · 0 first seen this week
Name suggestsAnything
3,036 names
| Name | Scope | First seen |
|---|---|---|
| aws.amazon.com | In scope | 2026-11-14 |
| 45.76.174.135.aws.amazon.com | In scope | 2026-11-14 |
| aatp-console.aws.amazon.comadmin | In scope | 2026-11-14 |
| accounts.aws.amazon.com | In scope | 2026-11-14 |
| acm-console-preview.aws.amazon.comadmin, staging | In scope | 2026-11-14 |
| acm-pca-beta.aws.amazon.comstaging | In scope | 2026-11-14 |
| acm-pca-gamma.aws.amazon.com | In scope | 2026-11-14 |
| adfs.aws.amazon.comauth | In scope | 2026-11-14 |
| auth.cloudshell.af-south-1.aws.amazon.comauth | In scope | 2026-11-14 |
| euc-sso-sm.af-south-1.aws.amazon.comauth | In scope | 2026-11-14 |
| workspaces.euc-sso.af-south-1.aws.amazon.comauth | In scope | 2026-11-14 |
| warpspeed.af-south-1.aws.amazon.com | In scope | 2026-11-14 |
| agora.aws.amazon.com | In scope | 2026-11-14 |
| aiexplorer.aws.amazon.com | In scope | 2026-11-14 |
| aiq.aws.amazon.com | In scope | 2026-11-14 |
| alas.aws.amazon.com | In scope | 2026-11-14 |
| beta-explore.alas.aws.amazon.comstaging | In scope | 2026-11-14 |
| explore.alas.aws.amazon.com | In scope | 2026-11-14 |
| gamma-explore.alas.aws.amazon.com | In scope | 2026-11-14 |
| alpha-aws-docs.aws.amazon.comstaging | In scope | 2026-11-14 |
| jellyfish.alpha.aws.amazon.comstaging | In scope | 2026-11-14 |
| amp.aws.amazon.com | In scope | 2026-11-14 |
| aws-iot-console-onebox.ap-east-1.aws.amazon.comadmin | In scope | 2026-11-14 |
| auth.cloudshell.ap-east-1.aws.amazon.comauth | In scope | 2026-11-14 |
| warpspeed.ap-east-1.aws.amazon.com | In scope | 2026-11-14 |
| ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| acm-pca.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| appstream2.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| 1ba7c946cfe3fcb121e72b49e64c5c44d26441092fde7a4c95d61641.appstream2.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| 2b0ec58bce77ccc7635918a593975e22a50883310bf4dc292b5e96a4.appstream2.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| 2f81e6776284509a90d215eac738aaac0b789503aae10dfda8da0616.appstream2.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| 4c18fab32ffef0ee9008007c47a165737df5bc9f47fc5f2240353750.appstream2.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| 53e7a9b11d7e8a12dce4316c792179934d65660bff875887f53b1a6f.appstream2.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| 5bc64a1593e67bc08be226c63abf0c4b7d28cadd8beae45583dd07c9.appstream2.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| 8b4ba2cccf343ebf15464e23ae9c9332d8cc2d9a613cab92d9cf7fd8.appstream2.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| 8f8a0d9c5efeed944229924e686a99edd084b58fb6975b59e28c087c.appstream2.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| a0f964b4494a439ef30d94710ad6242cd0263c0b31199d1d7ce02221.appstream2.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| d5034e0382868e382a0a92708187bca57ef7ed5c7bb2ed703d79f5e9.appstream2.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| wildcard.appstream2.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| aws-iot-console-onebox.ap-northeast-1.aws.amazon.comadmin | In scope | 2026-11-14 |
| auth.cloudshell.ap-northeast-1.aws.amazon.comauth | In scope | 2026-11-14 |
| appstream2.euc-sso.ap-northeast-1.aws.amazon.comauth | In scope | 2026-11-14 |
| workspaces.euc-sso.ap-northeast-1.aws.amazon.comauth | In scope | 2026-11-14 |
| photon-console-beta.ap-northeast-1.aws.amazon.comadmin, staging | In scope | 2026-11-14 |
| salsa-preview-console.ap-northeast-1.aws.amazon.comadmin, staging | In scope | 2026-11-14 |
| saltlakeci-console.ap-northeast-1.aws.amazon.comadmin | In scope | 2026-11-14 |
| auth.scallop.ap-northeast-1.aws.amazon.comauth | In scope | 2026-11-14 |
| warpspeed.ap-northeast-1.aws.amazon.com | In scope | 2026-11-14 |
| ap-northeast-2.aws.amazon.com | In scope | 2026-11-14 |
| acm-pca.ap-northeast-2.aws.amazon.com | In scope | 2026-11-14 |
| appstream2.ap-northeast-2.aws.amazon.com | In scope | 2026-11-14 |
| wildcard.appstream2.ap-northeast-2.aws.amazon.com | In scope | 2026-11-14 |
| aws-iot-console-onebox.ap-northeast-2.aws.amazon.comadmin | In scope | 2026-11-14 |
| auth.cloudshell.ap-northeast-2.aws.amazon.comauth | In scope | 2026-11-14 |
| appstream2.euc-sso.ap-northeast-2.aws.amazon.comauth | In scope | 2026-11-14 |
| workspaces.euc-sso.ap-northeast-2.aws.amazon.comauth | In scope | 2026-11-14 |
| warpspeed.ap-northeast-2.aws.amazon.com | In scope | 2026-11-14 |
| acm-pca-gamma.ap-northeast-3.aws.amazon.com | In scope | 2026-11-14 |
| appstream2.ap-northeast-3.aws.amazon.com | In scope | 2026-11-14 |
| auth.cloudshell.ap-northeast-3.aws.amazon.comauth | In scope | 2026-11-14 |
| appstream2.euc-sso.ap-northeast-3.aws.amazon.comauth | In scope | 2026-11-14 |
| workspaces.euc-sso.ap-northeast-3.aws.amazon.comauth | In scope | 2026-11-14 |
| warpspeed.ap-northeast-3.aws.amazon.com | In scope | 2026-11-14 |
| acm-pca.ap-south-1.aws.amazon.com | In scope | 2026-11-14 |
| appstream2.ap-south-1.aws.amazon.com | In scope | 2026-11-14 |
| wildcard.appstream2.ap-south-1.aws.amazon.com | In scope | 2026-11-14 |
| aws-iot-console-onebox.ap-south-1.aws.amazon.comadmin | In scope | 2026-11-14 |
| auth.cloudshell.ap-south-1.aws.amazon.comauth | In scope | 2026-11-14 |
| appstream2.euc-sso.ap-south-1.aws.amazon.comauth | In scope | 2026-11-14 |
| workspaces.euc-sso.ap-south-1.aws.amazon.comauth | In scope | 2026-11-14 |
| warpspeed.ap-south-1.aws.amazon.com | In scope | 2026-11-14 |
| auth.cloudshell.ap-south-2.aws.amazon.comauth | In scope | 2026-11-14 |
| ap-southeast-1.aws.amazon.com | In scope | 2026-11-14 |
| acm-pca.ap-southeast-1.aws.amazon.com | In scope | 2026-11-14 |
| appstream2.ap-southeast-1.aws.amazon.com | In scope | 2026-11-14 |
| wildcard.appstream2.ap-southeast-1.aws.amazon.com | In scope | 2026-11-14 |
| aws-iot-console-onebox.ap-southeast-1.aws.amazon.comadmin | In scope | 2026-11-14 |
| auth.cloudshell.ap-southeast-1.aws.amazon.comauth | In scope | 2026-11-14 |
| appstream2.euc-sso.ap-southeast-1.aws.amazon.comauth | In scope | 2026-11-14 |
| workspaces.euc-sso.ap-southeast-1.aws.amazon.comauth | In scope | 2026-11-14 |
| auth.scallop.ap-southeast-1.aws.amazon.comauth | In scope | 2026-11-14 |
| warpspeed.ap-southeast-1.aws.amazon.com | In scope | 2026-11-14 |
| ap-southeast-2.aws.amazon.com | In scope | 2026-11-14 |
| acm-pca.ap-southeast-2.aws.amazon.com | In scope | 2026-11-14 |
| appstream2.ap-southeast-2.aws.amazon.com | In scope | 2026-11-14 |
| wildcard.appstream2.ap-southeast-2.aws.amazon.com | In scope | 2026-11-14 |
| aws-iot-console-onebox.ap-southeast-2.aws.amazon.comadmin | In scope | 2026-11-14 |
| auth.cloudshell.ap-southeast-2.aws.amazon.comauth | In scope | 2026-11-14 |
| appstream2.euc-sso.ap-southeast-2.aws.amazon.comauth | In scope | 2026-11-14 |
| workspaces.euc-sso.ap-southeast-2.aws.amazon.comauth | In scope | 2026-11-14 |
| jellyfish.privatebeta.ap-southeast-2.aws.amazon.com | In scope | 2026-11-14 |
| warpspeed.ap-southeast-2.aws.amazon.com | In scope | 2026-11-14 |
| auth.cloudshell.ap-southeast-3.aws.amazon.comauth | In scope | 2026-11-14 |
| warpspeed.ap-southeast-3.aws.amazon.com | In scope | 2026-11-14 |
| auth.cloudshell.ap-southeast-4.aws.amazon.comauth | In scope | 2026-11-14 |
| appstream2.ap-southeast-5.aws.amazon.com | In scope | 2026-11-14 |
| auth.cloudshell.ap-southeast-5.aws.amazon.comauth | In scope | 2026-11-14 |
| appstream2.euc-sso.ap-southeast-5.aws.amazon.comauth | In scope | 2026-11-14 |
| workspaces.euc-sso.ap-southeast-5.aws.amazon.comauth | In scope | 2026-11-14 |
| auth.cloudshell.ap-southeast-7.aws.amazon.comauth | In scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.