Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on Github#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.com#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
0.github.comNot in the scope2026-11-14
000.github.comNot in the scope2026-11-14
00010011.github.comNot in the scope2026-11-14
001.github.comNot in the scope2026-11-14
001b0z.github.comNot in the scope2026-11-14
001z.github.comNot in the scope2026-11-14
002.github.comNot in the scope2026-11-14
003.github.comNot in the scope2026-11-14
004.github.comNot in the scope2026-11-14
005.github.comNot in the scope2026-11-14
006.github.comNot in the scope2026-11-14
007.github.comNot in the scope2026-11-14
007txprotoz.github.comNot in the scope2026-11-14
008.github.comNot in the scope2026-11-14
009.github.comNot in the scope2026-11-14
01.github.comNot in the scope2026-11-14
010.github.comNot in the scope2026-11-14
0101.github.comNot in the scope2026-11-14
011.github.comNot in the scope2026-11-14
012.github.comNot in the scope2026-11-14
013.github.comNot in the scope2026-11-14
014.github.comNot in the scope2026-11-14
015.github.comNot in the scope2026-11-14
016.github.comNot in the scope2026-11-14
017.github.comNot in the scope2026-11-14
018.github.comNot in the scope2026-11-14
019.github.comNot in the scope2026-11-14
01org.github.comNot in the scope2026-11-14
01x.github.comNot in the scope2026-11-14
02.github.comNot in the scope2026-11-14
020.github.comNot in the scope2026-11-14
023apiazureeacostprotoz.github.comNot in the scope2026-11-14
026apipricingdetailsprotoz.github.comNot in the scope2026-11-14
02f977d8.github.comNot in the scope2026-11-14
02jandal.github.comNot in the scope2026-11-14
03.github.comNot in the scope2026-11-14
037.github.comNot in the scope2026-11-14
0416.github.comNot in the scope2026-11-14
dsu45.04215.github.comNot in the scope2026-11-14
04th0809.github.comNot in the scope2026-11-14
0532.github.comNot in the scope2026-11-14
06wj.github.comNot in the scope2026-11-14
080.github.comNot in the scope2026-11-14
mail.080.github.commailNot in the scope2026-11-14
0aapi.github.comNot in the scope2026-11-14
0b10011.github.comNot in the scope2026-11-14
0chunhui.github.comNot in the scope2026-11-14
i69uj.0ek2s.github.comNot in the scope2026-11-14
v2.13.0eloper.github.comNot in the scope2026-11-14
v2.14.0eloper.github.comNot in the scope2026-11-14
om93y.0fi06.github.comNot in the scope2026-11-14
3fg0k.0i1zy.github.comNot in the scope2026-11-14
0ip.github.comNot in the scope2026-11-14
43i97.0ipgq.github.comNot in the scope2026-11-14
yciys.0mouz.github.comNot in the scope2026-11-14
0nko.github.comNot in the scope2026-11-14
0x000000.github.comNot in the scope2026-11-14
0x00rick.github.comNot in the scope2026-11-14
0x0800.github.comNot in the scope2026-11-14
0x0c.github.comNot in the scope2026-11-14
0x111.github.comNot in the scope2026-11-14
0x19.github.comNot in the scope2026-11-14
0xabad1dea.github.comNot in the scope2026-11-14
0xas.github.comNot in the scope2026-11-14
0xax.github.comNot in the scope2026-11-14
0xba1a.github.comNot in the scope2026-11-14
0xcaff.github.comNot in the scope2026-11-14
0xdata.github.comNot in the scope2026-11-14
0xf8c3b00k.github.comNot in the scope2026-11-14
0xlen.github.comNot in the scope2026-11-14
0xor1.github.comNot in the scope2026-11-14
0xsneak.github.comNot in the scope2026-11-14
0xsyspwn.github.comNot in the scope2026-11-14
0year.github.comNot in the scope2026-11-14
0ztype.github.comNot in the scope2026-11-14
1.github.comNot in the scope2026-11-14
1-antivirus.github.comNot in the scope2026-11-14
1-covid19.github.comNot in the scope2026-11-14
1-www.github.comNot in the scope2026-11-14
antivirus.1.github.comNot in the scope2026-11-14
berb-antivirus.1.github.comNot in the scope2026-11-14
covid19.1.github.comNot in the scope2026-11-14
virus.1.github.comNot in the scope2026-11-14
www.1.github.comNot in the scope2026-11-14
10.github.comNot in the scope2026-11-14
10-covid19.github.comNot in the scope2026-11-14
antivirus.10.github.comNot in the scope2026-11-14
covid19.10.github.comNot in the scope2026-11-14
git.10.github.comgitNot in the scope2026-11-14
sigmavirus24.10.github.comNot in the scope2026-11-14
virus.10.github.comNot in the scope2026-11-14
www.10.github.comNot in the scope2026-11-14
100.github.comNot in the scope2026-11-14
1000.github.comNot in the scope2026-11-14
10000-hours.github.comNot in the scope2026-11-14
1000bit.github.comNot in the scope2026-11-14
100200dxq.github.comNot in the scope2026-11-14
100shapes.github.comNot in the scope2026-11-14
101.github.comNot in the scope2026-11-14
1023675894.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in