Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
devstructure.github.comNot in the scope2026-11-14
devsundar.github.comNot in the scope2026-11-14
devtellect.github.comNot in the scope2026-11-14
devtest.github.comNot in the scope2026-11-14
devth.github.comNot in the scope2026-11-14
devthenet.github.comNot in the scope2026-11-14
devton.github.comNot in the scope2026-11-14
devtoo.github.comNot in the scope2026-11-14
devtools-html.github.comNot in the scope2026-11-14
devtyr.github.comNot in the scope2026-11-14
devwaseem.github.comNot in the scope2026-11-14
devwww.github.comNot in the scope2026-11-14
devxive.github.comNot in the scope2026-11-14
devyn.github.comNot in the scope2026-11-14
deways.github.comNot in the scope2026-11-14
dewski.github.comNot in the scope2026-11-14
dex.github.comNot in the scope2026-11-14
dexter.github.comNot in the scope2026-11-14
dexterfgo.github.comNot in the scope2026-11-14
dexteryy.github.comNot in the scope2026-11-14
deyuhua.github.comNot in the scope2026-11-14
df.github.comNot in the scope2026-11-14
df1.github.comNot in the scope2026-11-14
df892bb6.github.comNot in the scope2026-11-14
dfadler.github.comNot in the scope2026-11-14
dfan14051.github.comNot in the scope2026-11-14
dfandrich.github.comNot in the scope2026-11-14
dfcb.github.comNot in the scope2026-11-14
dfdlschemas.github.comNot in the scope2026-11-14
dfedde.github.comNot in the scope2026-11-14
dfellis.github.comNot in the scope2026-11-14
dffm.github.comNot in the scope2026-11-14
dfleischhacker.github.comNot in the scope2026-11-14
dfm.github.comNot in the scope2026-11-14
dfmonaco.github.comNot in the scope2026-11-14
dfp.github.comNot in the scope2026-11-14
dfrayssignes.github.comNot in the scope2026-11-14
dfreerksen.github.comNot in the scope2026-11-14
dfrnswrth.github.comNot in the scope2026-11-14
3hns2.dfsth.github.comNot in the scope2026-11-14
dg.github.comNot in the scope2026-11-14
dgageot.github.comNot in the scope2026-11-14
dgar.github.comNot in the scope2026-11-14
3t5lu.dgbdt.github.comNot in the scope2026-11-14
dgf.github.comNot in the scope2026-11-14
dgiim.github.comNot in the scope2026-11-14
dglazkov.github.comNot in the scope2026-11-14
dglazkovids.github.comNot in the scope2026-11-14
dgleich.github.comNot in the scope2026-11-14
dglittle.github.comNot in the scope2026-11-14
dgooox.github.comNot in the scope2026-11-14
dgotink.github.comNot in the scope2026-11-14
dgouldin.github.comNot in the scope2026-11-14
dgraham.github.comNot in the scope2026-11-14
dgreen99.github.comNot in the scope2026-11-14
dgreenheck.github.comNot in the scope2026-11-14
dgreenru.github.comNot in the scope2026-11-14
dgrtwo.github.comNot in the scope2026-11-14
dgrumm.github.comNot in the scope2026-11-14
dgvncsz0f.github.comNot in the scope2026-11-14
dgzens.github.comNot in the scope2026-11-14
dh.github.comNot in the scope2026-11-14
dhabersack.github.comNot in the scope2026-11-14
dhager.github.comNot in the scope2026-11-14
dhague.github.comNot in the scope2026-11-14
dhalperi.github.comNot in the scope2026-11-14
dhamidi.github.comNot in the scope2026-11-14
dhandeo.github.comNot in the scope2026-11-14
dhanji.github.comNot in the scope2026-11-14
dharakk.github.comNot in the scope2026-11-14
dhardy.github.comNot in the scope2026-11-14
dharfr.github.comNot in the scope2026-11-14
dharma.github.comNot in the scope2026-11-14
dharmafly.github.comNot in the scope2026-11-14
dharwood.github.comNot in the scope2026-11-14
dhbw-horb.github.comNot in the scope2026-11-14
dhcole.github.comNot in the scope2026-11-14
dhconnelly.github.comNot in the scope2026-11-14
dhcp1.github.comNot in the scope2026-11-14
dhcp2.github.comNot in the scope2026-11-14
dhemery.github.comNot in the scope2026-11-14
dhenliang.github.comNot in the scope2026-11-14
dherman.github.comNot in the scope2026-11-14
dhess.github.comNot in the scope2026-11-14
dhgamache.github.comNot in the scope2026-11-14
dhhqhj.github.comNot in the scope2026-11-14
dhiraa.github.comNot in the scope2026-11-14
dhivyat.github.comNot in the scope2026-11-14
dhl.github.comNot in the scope2026-11-14
dhlab-epfl.github.comNot in the scope2026-11-14
dhlavaty.github.comNot in the scope2026-11-14
dhmunro.github.comNot in the scope2026-11-14
dhodgkin.github.comNot in the scope2026-11-14
dhollman.github.comNot in the scope2026-11-14
dholloran.github.comNot in the scope2026-11-14
dholloran-virus.github.comNot in the scope2026-11-14
dholm.github.comNot in the scope2026-11-14
dhotson.github.comNot in the scope2026-11-14
dhou.github.comNot in the scope2026-11-14
dhrp.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.