Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
danielhaynes.github.comNot in the scope2026-11-14
danielhaynessigmavirus.github.comNot in the scope2026-11-14
danielheckrath.github.comNot in the scope2026-11-14
danielhunt.github.comNot in the scope2026-11-14
danieljomphe.github.comNot in the scope2026-11-14
danieljwood.github.comNot in the scope2026-11-14
danielkharis.github.comNot in the scope2026-11-14
danielkummer.github.comNot in the scope2026-11-14
daniellecon.github.comNot in the scope2026-11-14
daniellop1.github.comNot in the scope2026-11-14
danielmendel.github.comNot in the scope2026-11-14
danielmoniz.github.comNot in the scope2026-11-14
danielmota.github.comNot in the scope2026-11-14
danielna.github.comNot in the scope2026-11-14
danielnuriyev.github.comNot in the scope2026-11-14
danielpronych.github.comNot in the scope2026-11-14
danielrapp.github.comNot in the scope2026-11-14
danielrbradley.github.comNot in the scope2026-11-14
danielribeiro.github.comNot in the scope2026-11-14
danielruss.github.comNot in the scope2026-11-14
danielsaidi.github.comNot in the scope2026-11-14
danielsamuels.github.comNot in the scope2026-11-14
danielsan.github.comNot in the scope2026-11-14
danielscai.github.comNot in the scope2026-11-14
danielsigmaviruss.github.comNot in the scope2026-11-14
danielsim.github.comNot in the scope2026-11-14
danielspicar.github.comNot in the scope2026-11-14
danielsz.github.comNot in the scope2026-11-14
danieltott.github.comNot in the scope2026-11-14
danielwarna.github.comNot in the scope2026-11-14
danielwestendorf.github.comNot in the scope2026-11-14
daniilr.github.comNot in the scope2026-11-14
danilat.github.comNot in the scope2026-11-14
danilofreire.github.comNot in the scope2026-11-14
danilopopeye.github.comNot in the scope2026-11-14
danilosandoval-root.github.comNot in the scope2026-11-14
danishkhan.github.comNot in the scope2026-11-14
dankelley.github.comNot in the scope2026-11-14
danknox.github.comNot in the scope2026-11-14
dankogai.github.comNot in the scope2026-11-14
dankoi.github.comNot in the scope2026-11-14
danleech.github.comNot in the scope2026-11-14
danlentz.github.comNot in the scope2026-11-14
danluchi.github.comNot in the scope2026-11-14
danmarner.github.comNot in the scope2026-11-14
danmayer.github.comNot in the scope2026-11-14
danmbox.github.comNot in the scope2026-11-14
danmunn.github.comNot in the scope2026-11-14
dann.github.comNot in the scope2026-11-14
danneh.github.comNot in the scope2026-11-14
dannguyen.github.comNot in the scope2026-11-14
dannvix.github.comNot in the scope2026-11-14
danny.github.comNot in the scope2026-11-14
dannyben.github.comNot in the scope2026-11-14
dannysu.github.comNot in the scope2026-11-14
dannytatom.github.comNot in the scope2026-11-14
dannyx0.github.comNot in the scope2026-11-14
danomanion.github.comNot in the scope2026-11-14
danptu.github.comNot in the scope2026-11-14
danryan.github.comNot in the scope2026-11-14
danschmidt.github.comNot in the scope2026-11-14
danshearmur.github.comNot in the scope2026-11-14
dansilivestru.github.comNot in the scope2026-11-14
dansimpson.github.comNot in the scope2026-11-14
dansitu.github.comNot in the scope2026-11-14
dansituvirus.github.comNot in the scope2026-11-14
danski.github.comNot in the scope2026-11-14
dante.github.comNot in the scope2026-11-14
dantesun.github.comNot in the scope2026-11-14
danube.github.comNot in the scope2026-11-14
danvratil.github.comNot in the scope2026-11-14
danwlsn.github.comNot in the scope2026-11-14
danwoods.github.comNot in the scope2026-11-14
dany.github.comNot in the scope2026-11-14
danzel.github.comNot in the scope2026-11-14
dao-ipci.github.comNot in the scope2026-11-14
dao-university.github.comNot in the scope2026-11-14
daoudclarke.github.comNot in the scope2026-11-14
dap-darkness.github.comNot in the scope2026-11-14
daphne.github.comNot in the scope2026-11-14
daphnesigmavirus.github.comNot in the scope2026-11-14
daplie.github.comNot in the scope2026-11-14
dappnode.github.comNot in the scope2026-11-14
dapson.github.comNot in the scope2026-11-14
daqe.github.comNot in the scope2026-11-14
daqhris.github.comNot in the scope2026-11-14
daqi.github.comNot in the scope2026-11-14
dar.github.comNot in the scope2026-11-14
daranhep.github.comNot in the scope2026-11-14
darashi.github.comNot in the scope2026-11-14
darchrow-mu.github.comNot in the scope2026-11-14
darcmattr.github.comNot in the scope2026-11-14
darconeous.github.comNot in the scope2026-11-14
darenmccomb.github.comNot in the scope2026-11-14
darep.github.comNot in the scope2026-11-14
dariasc.github.comNot in the scope2026-11-14
darickdang.github.comNot in the scope2026-11-14
dariocavada.github.comNot in the scope2026-11-14
dariocravero.github.comNot in the scope2026-11-14
darius.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.