Skip to content
Connect AISign inSign up free

Bug bounty program

EV

Equifax-vdp

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Root:github.com
Scope
Name suggests
First seen
Text fileClear filters55,670 names
Subdomains of Equifax-vdp
NameScopeFirst seen
davidgma.github.comNot in the scope2026-11-14
davidgomes.github.comNot in the scope2026-11-14
davidgovea.github.comNot in the scope2026-11-14
davidgraeff.github.comNot in the scope2026-11-14
davidguttman.github.comNot in the scope2026-11-14
davidhrbac.github.comNot in the scope2026-11-14
davidjairala.github.comNot in the scope2026-11-14
davidk.github.comNot in the scope2026-11-14
davidkaneda.github.comNot in the scope2026-11-14
davidkeen.github.comNot in the scope2026-11-14
davidlpower.github.comNot in the scope2026-11-14
davidmasp.github.comNot in the scope2026-11-14
davidmz.github.comNot in the scope2026-11-14
davidnmbond.github.comNot in the scope2026-11-14
davidolesch.github.comNot in the scope2026-11-14
davidolesch-sigmavirus.github.comNot in the scope2026-11-14
davidonium.github.comNot in the scope2026-11-14
davidpaniz.github.comNot in the scope2026-11-14
davidpett.github.comNot in the scope2026-11-14
davidqin.github.comNot in the scope2026-11-14
davidquantum.github.comNot in the scope2026-11-14
davidrekow.github.comNot in the scope2026-11-14
davidreuss.github.comNot in the scope2026-11-14
davidsantiago.github.comNot in the scope2026-11-14
davidschreiber.github.comNot in the scope2026-11-14
davidshariff.github.comNot in the scope2026-11-14
davidshimjs.github.comNot in the scope2026-11-14
davidsivocha.github.comNot in the scope2026-11-14
davidsouther.github.comNot in the scope2026-11-14
davidssev.github.comNot in the scope2026-11-14
davidstutz.github.comNot in the scope2026-11-14
davidsulc.github.comNot in the scope2026-11-14
davidszotten.github.comNot in the scope2026-11-14
davidwaterston.github.comNot in the scope2026-11-14
davidwhogg.github.comNot in the scope2026-11-14
davidwinter.github.comNot in the scope2026-11-14
davidwparker.github.comNot in the scope2026-11-14
davidzhaozhao.github.comNot in the scope2026-11-14
daviferreira.github.comNot in the scope2026-11-14
davinci.github.comNot in the scope2026-11-14
davis.github.comNot in the scope2026-11-14
daviscabral.github.comNot in the scope2026-11-14
davist11.github.comNot in the scope2026-11-14
davkal.github.comNot in the scope2026-11-14
davmlaw.github.comNot in the scope2026-11-14
davojta.github.comNot in the scope2026-11-14
davont.github.comNot in the scope2026-11-14
davorg.github.comNot in the scope2026-11-14
davoudtaghawinejad.github.comNot in the scope2026-11-14
davps.github.comNot in the scope2026-11-14
davsket.github.comNot in the scope2026-11-14
davvil.github.comNot in the scope2026-11-14
davybrion.github.comNot in the scope2026-11-14
dawee.github.comNot in the scope2026-11-14
dawehner.github.comNot in the scope2026-11-14
dawkocik.github.comNot in the scope2026-11-14
dawn.github.comNot in the scope2026-11-14
dawnerd.github.comNot in the scope2026-11-14
dawnlion0305.github.comNot in the scope2026-11-14
dawnofmusic.github.comNot in the scope2026-11-14
day.github.comNot in the scope2026-11-14
sluice.day253.github.comNot in the scope2026-11-14
autoscaler.sluice.day253.github.comNot in the scope2026-11-14
sluice-operator.sluice.day253.github.comNot in the scope2026-11-14
sluiceclusters.sluice.day253.github.comNot in the scope2026-11-14
tenants.sluice.day253.github.comNot in the scope2026-11-14
dayaramani.github.comNot in the scope2026-11-14
daybyday.github.comNot in the scope2026-11-14
dayeol.github.comNot in the scope2026-11-14
daylerees.github.comNot in the scope2026-11-14
daysoul-sigmavirus.github.comNot in the scope2026-11-14
daysv.github.comNot in the scope2026-11-14
dayton-dynamic.github.comNot in the scope2026-11-14
daytona.github.comNot in the scope2026-11-14
daytonn.github.comNot in the scope2026-11-14
daz.github.comNot in the scope2026-11-14
dazatovarj.github.comNot in the scope2026-11-14
dazeus.github.comNot in the scope2026-11-14
dazraf.github.comNot in the scope2026-11-14
dazuma.github.comNot in the scope2026-11-14
db.github.comdataNot in the scope2026-11-14
www.db.github.comdataNot in the scope2026-11-14
db0.github.comNot in the scope2026-11-14
db01.github.comNot in the scope2026-11-14
db02.github.comNot in the scope2026-11-14
db1.github.comNot in the scope2026-11-14
db2.github.comNot in the scope2026-11-14
db3.github.comNot in the scope2026-11-14
db4.github.comNot in the scope2026-11-14
db4-sigmavirus.github.comNot in the scope2026-11-14
db5.github.comNot in the scope2026-11-14
db6.github.comNot in the scope2026-11-14
db8.github.comNot in the scope2026-11-14
db9.github.comNot in the scope2026-11-14
dba.github.comNot in the scope2026-11-14
dbacon.github.comNot in the scope2026-11-14
dbadmin.github.comNot in the scope2026-11-14
dbarbalato.github.comNot in the scope2026-11-14
dbase.github.comNot in the scope2026-11-14
dbaupp.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated