Skip to content
Connect AISign inSign up free

Bug bounty program

EV

Equifax-vdp

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Root:github.com
Scope
Name suggests
First seen
Text fileClear filters55,670 names
Subdomains of Equifax-vdp
NameScopeFirst seen
d1b.github.comNot in the scope2026-11-14
d1b1.github.comNot in the scope2026-11-14
d1plo1d.github.comNot in the scope2026-11-14
d2.github.comNot in the scope2026-11-14
d21.github.comNot in the scope2026-11-14
d22.github.comNot in the scope2026-11-14
d27.github.comNot in the scope2026-11-14
d28.github.comNot in the scope2026-11-14
d3.github.comNot in the scope2026-11-14
d31.github.comNot in the scope2026-11-14
d32.github.comNot in the scope2026-11-14
d33tah.github.comNot in the scope2026-11-14
d34.github.comNot in the scope2026-11-14
d36.github.comNot in the scope2026-11-14
d36sigmavirus.github.comNot in the scope2026-11-14
d37.github.comNot in the scope2026-11-14
d3kod.github.comNot in the scope2026-11-14
d4.github.comNot in the scope2026-11-14
d4l3k.github.comNot in the scope2026-11-14
d5.github.comNot in the scope2026-11-14
d6.github.comNot in the scope2026-11-14
d7.github.comNot in the scope2026-11-14
d8.github.comNot in the scope2026-11-14
d9.github.comNot in the scope2026-11-14
da.github.comNot in the scope2026-11-14
da1.github.comNot in the scope2026-11-14
da17.github.comNot in the scope2026-11-14
da2.github.comNot in the scope2026-11-14
da99.github.comNot in the scope2026-11-14
daa.github.comNot in the scope2026-11-14
daaain.github.comNot in the scope2026-11-14
daagaak.github.comNot in the scope2026-11-14
daaku.github.comNot in the scope2026-11-14
daawesomep.github.comNot in the scope2026-11-14
daball.github.comNot in the scope2026-11-14
dabio.github.comNot in the scope2026-11-14
dabutcher.github.comNot in the scope2026-11-14
dac.github.comNot in the scope2026-11-14
dachengxi.github.comNot in the scope2026-11-14
dachie.github.comNot in the scope2026-11-14
dacopan.github.comNot in the scope2026-11-14
dacresni.github.comNot in the scope2026-11-14
dactiv.github.comNot in the scope2026-11-14
dada.github.comNot in the scope2026-11-14
daddye.github.comNot in the scope2026-11-14
dadeba.github.comNot in the scope2026-11-14
dadler.github.comNot in the scope2026-11-14
dadleyy.github.comNot in the scope2026-11-14
dado21780.github.comNot in the scope2026-11-14
dadoonet.github.comNot in the scope2026-11-14
heimdall.dadrus.github.comNot in the scope2026-11-14
rulesets.heimdall.dadrus.github.comNot in the scope2026-11-14
validation-webhook.heimdall.dadrus.github.comNot in the scope2026-11-14
daedalus.github.comNot in the scope2026-11-14
daegalus.github.comNot in the scope2026-11-14
daegu-agent-crew.github.comNot in the scope2026-11-14
daeken.github.comNot in the scope2026-11-14
daemon.github.comNot in the scope2026-11-14
daemonza.github.comNot in the scope2026-11-14
daenyth.github.comNot in the scope2026-11-14
daesin.github.comNot in the scope2026-11-14
daesu.github.comNot in the scope2026-11-14
daeventi.github.comNot in the scope2026-11-14
daewon.github.comNot in the scope2026-11-14
dafa.github.comNot in the scope2026-11-14
daffl.github.comNot in the scope2026-11-14
daffy.github.comNot in the scope2026-11-14
dafrancis.github.comNot in the scope2026-11-14
dag.github.comNot in the scope2026-11-14
dagent.github.comNot in the scope2026-11-14
dagster-io.github.comNot in the scope2026-11-14
daha.github.comNot in the scope2026-11-14
dahammer.github.comNot in the scope2026-11-14
dahdhpcf.github.comNot in the scope2026-11-14
dahlia.github.comNot in the scope2026-11-14
dai-shi.github.comNot in the scope2026-11-14
daic-h.github.comNot in the scope2026-11-14
daichongbetsigmavirus24.github.comNot in the scope2026-11-14
daid.github.comNot in the scope2026-11-14
daideiaaluz.github.comNot in the scope2026-11-14
daigofuji.github.comNot in the scope2026-11-14
daiki41ti.github.comNot in the scope2026-11-14
daily.github.comNot in the scope2026-11-14
dailycavalier.github.comNot in the scope2026-11-14
dailyemerald.github.comNot in the scope2026-11-14
dailyemerald-sigmavirus24.github.comNot in the scope2026-11-14
dailymotion.github.comNot in the scope2026-11-14
daimatz.github.comNot in the scope2026-11-14
dain.github.comNot in the scope2026-11-14
daison12006013.github.comNot in the scope2026-11-14
daisuke.github.comNot in the scope2026-11-14
daisy.github.comNot in the scope2026-11-14
daisy-consortium.github.comNot in the scope2026-11-14
daizoru.github.comNot in the scope2026-11-14
dajulia3.github.comNot in the scope2026-11-14
dakar.github.comNot in the scope2026-11-14
dakk.github.comNot in the scope2026-11-14
dakksigmavirus.github.comNot in the scope2026-11-14
dakl.github.comNot in the scope2026-11-14
dakodun.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated