Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
digitsecurity.github.comNot in the scope2026-11-14
dignati.github.comNot in the scope2026-11-14
dila813.github.comNot in the scope2026-11-14
dilborg.github.comNot in the scope2026-11-14
dill.github.comNot in the scope2026-11-14
dillon-sellars.github.comNot in the scope2026-11-14
dima.github.comNot in the scope2026-11-14
dima767.github.comNot in the scope2026-11-14
dimalev.github.comNot in the scope2026-11-14
dimanech.github.comNot in the scope2026-11-14
dimelo.github.comNot in the scope2026-11-14
dimensia.github.comNot in the scope2026-11-14
dimichspb.github.comNot in the scope2026-11-14
dimik.github.comNot in the scope2026-11-14
dimitar-asenov.github.comNot in the scope2026-11-14
dimitarchristoff.github.comNot in the scope2026-11-14
dimitrisjim.github.comNot in the scope2026-11-14
dimitrismistriotis.github.comNot in the scope2026-11-14
dimitry.github.comNot in the scope2026-11-14
dimme.github.comNot in the scope2026-11-14
dimous.github.comNot in the scope2026-11-14
dimroc.github.comNot in the scope2026-11-14
dimtemp.github.comNot in the scope2026-11-14
dinduks.github.comNot in the scope2026-11-14
dineshkummarc.github.comNot in the scope2026-11-14
ding.github.comNot in the scope2026-11-14
dingbat.github.comNot in the scope2026-11-14
dingdong.github.comNot in the scope2026-11-14
dingk-r.github.comNot in the scope2026-11-14
dingmaotu.github.comNot in the scope2026-11-14
dingo.github.comNot in the scope2026-11-14
dingorio.github.comNot in the scope2026-11-14
dinhnguyen.github.comNot in the scope2026-11-14
dinkel.github.comNot in the scope2026-11-14
dino.github.comNot in the scope2026-11-14
dinoboff.github.comNot in the scope2026-11-14
dinomite.github.comNot in the scope2026-11-14
dinopetrone.github.comNot in the scope2026-11-14
dinosaur.github.comNot in the scope2026-11-14
dio.github.comNot in the scope2026-11-14
diogo149.github.comNot in the scope2026-11-14
diogob.github.comNot in the scope2026-11-14
diogogmt.github.comNot in the scope2026-11-14
diogomafra.github.comNot in the scope2026-11-14
dioh.github.comNot in the scope2026-11-14
dione.github.comNot in the scope2026-11-14
dionysos.github.comNot in the scope2026-11-14
dionysus.github.comNot in the scope2026-11-14
dippa.github.comNot in the scope2026-11-14
dipsy.github.comNot in the scope2026-11-14
dipu-bd.github.comNot in the scope2026-11-14
dir.github.comNot in the scope2026-11-14
www.dir.github.comNot in the scope2026-11-14
dira.github.comNot in the scope2026-11-14
dirac.github.comNot in the scope2026-11-14
dircircuit.github.comNot in the scope2026-11-14
direct.github.comNot in the scope2026-11-14
direct-api.github.comapiNot in the scope2026-11-14
direct-fuel-injection.github.comNot in the scope2026-11-14
direct-to-api.github.comapiNot in the scope2026-11-14
direct-to-encapsulated-https-api.github.comapiNot in the scope2026-11-14
direct-to-encapsulated-ssh-ssh.github.comNot in the scope2026-11-14
director.github.comNot in the scope2026-11-14
autoconfig.director.github.comNot in the scope2026-11-14
autodiscover.director.github.commailNot in the scope2026-11-14
webdisk.director.github.comNot in the scope2026-11-14
directories.github.comNot in the scope2026-11-14
directorio.github.comNot in the scope2026-11-14
www.directorio.github.comNot in the scope2026-11-14
directory.github.comNot in the scope2026-11-14
autoconfig.directory.github.comNot in the scope2026-11-14
autodiscover.directory.github.commailNot in the scope2026-11-14
webdisk.directory.github.comNot in the scope2026-11-14
www.directory.github.comNot in the scope2026-11-14
directoutput.github.comNot in the scope2026-11-14
diretto.github.comNot in the scope2026-11-14
dirkaholic.github.comNot in the scope2026-11-14
dirkbajdas.github.comNot in the scope2026-11-14
dirkcuys.github.comNot in the scope2026-11-14
dirkk0.github.comNot in the scope2026-11-14
dirkx.github.comNot in the scope2026-11-14
dirtyequi.github.comNot in the scope2026-11-14
dirtysalt.github.comNot in the scope2026-11-14
dis.github.comNot in the scope2026-11-14
disabled.github.comNot in the scope2026-11-14
disburden.github.comNot in the scope2026-11-14
disclojure.github.comNot in the scope2026-11-14
disco.github.comNot in the scope2026-11-14
discord.github.comNot in the scope2026-11-14
discount.github.comNot in the scope2026-11-14
discountfinder.github.comNot in the scope2026-11-14
discover.github.comNot in the scope2026-11-14
discovere.github.comNot in the scope2026-11-14
discovery.github.comNot in the scope2026-11-14
www.discovery.github.comNot in the scope2026-11-14
discretelogics.github.comNot in the scope2026-11-14
discus.github.comNot in the scope2026-11-14
discuss.github.comNot in the scope2026-11-14
discussion.github.comNot in the scope2026-11-14
discussions.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.