Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
dkuntz2.github.comNot in the scope2026-11-14
dl.github.comNot in the scope2026-11-14
www.dl.github.comNot in the scope2026-11-14
dl1.github.comNot in the scope2026-11-14
dl2.github.comNot in the scope2026-11-14
dl3.github.comNot in the scope2026-11-14
dl5.github.comNot in the scope2026-11-14
dlamacchia.github.comNot in the scope2026-11-14
dlamotte.github.comNot in the scope2026-11-14
dlc.github.comNot in the scope2026-11-14
dle.github.comNot in the scope2026-11-14
dleatherman.github.comNot in the scope2026-11-14
dlecan.github.comNot in the scope2026-11-14
dled.github.comNot in the scope2026-11-14
dleyzzex.github.comNot in the scope2026-11-14
dli.github.comNot in the scope2026-11-14
dlindahl.github.comNot in the scope2026-11-14
dlinsin.github.comNot in the scope2026-11-14
dlinzer.github.comNot in the scope2026-11-14
dljoseph1.github.comNot in the scope2026-11-14
dln.github.comNot in the scope2026-11-14
dlo.github.comNot in the scope2026-11-14
dlo83.github.comNot in the scope2026-11-14
dlom.github.comNot in the scope2026-11-14
dlorch.github.comNot in the scope2026-11-14
dlove24.github.comNot in the scope2026-11-14
dlrifkin.github.comNot in the scope2026-11-14
dls.github.comNot in the scope2026-11-14
dlw.github.comNot in the scope2026-11-14
dm3.github.comNot in the scope2026-11-14
dma.github.comNot in the scope2026-11-14
dmakarov.github.comNot in the scope2026-11-14
dmangame.github.comNot in the scope2026-11-14
dmaphy.github.comNot in the scope2026-11-14
dmarc.github.comNot in the scope2026-11-14
dmarcos.github.comNot in the scope2026-11-14
dmarcotte.github.comNot in the scope2026-11-14
dmathieu.github.comNot in the scope2026-11-14
dmauro.github.comNot in the scope2026-11-14
dmbuce.github.comNot in the scope2026-11-14
dmc.github.comNot in the scope2026-11-14
dmca.github.comNot in the scope2026-11-14
dmchk.github.comNot in the scope2026-11-14
dmdeller.github.comNot in the scope2026-11-14
dme.github.comNot in the scope2026-11-14
dmedia-g.github.comNot in the scope2026-11-14
dmedvinsky.github.comNot in the scope2026-11-14
dmelichar.github.comNot in the scope2026-11-14
dmeliza.github.comNot in the scope2026-11-14
dmerand.github.comNot in the scope2026-11-14
dmfrancisco.github.comNot in the scope2026-11-14
dmg.github.comNot in the scope2026-11-14
dmgrstuff.github.comNot in the scope2026-11-14
dmiller44.github.comNot in the scope2026-11-14
dmine.github.comNot in the scope2026-11-14
dmison.github.comNot in the scope2026-11-14
dmitryleskov.github.comNot in the scope2026-11-14
dmitrym0.github.comNot in the scope2026-11-14
dmitryphilimonov.github.comNot in the scope2026-11-14
dmitryskiba.github.comNot in the scope2026-11-14
dmitrysoshnikov.github.comNot in the scope2026-11-14
dmitryvk.github.comNot in the scope2026-11-14
dmitrz.github.comNot in the scope2026-11-14
dmkanter.github.comNot in the scope2026-11-14
dmm.github.comNot in the scope2026-11-14
dmmalam.github.comNot in the scope2026-11-14
dmnelson.github.comNot in the scope2026-11-14
dmohl.github.comNot in the scope2026-11-14
dmolina.github.comNot in the scope2026-11-14
dmorlan.github.comNot in the scope2026-11-14
dmorse.github.comNot in the scope2026-11-14
dmose.github.comNot in the scope2026-11-14
dmotz.github.comNot in the scope2026-11-14
dmoulton.github.comNot in the scope2026-11-14
dmpayton.github.comNot in the scope2026-11-14
dmpelt.github.comNot in the scope2026-11-14
dmpi.github.comNot in the scope2026-11-14
dmrschmidt.github.comNot in the scope2026-11-14
dmrzh.github.comNot in the scope2026-11-14
dms.github.comNot in the scope2026-11-14
www.dms.github.comNot in the scope2026-11-14
dms1.github.comNot in the scope2026-11-14
dmsl.github.comNot in the scope2026-11-14
dmt.github.comNot in the scope2026-11-14
dmx.github.comNot in the scope2026-11-14
dmytro.github.comNot in the scope2026-11-14
dmz.github.comNot in the scope2026-11-14
dn.github.comNot in the scope2026-11-14
dn2.github.comNot in the scope2026-11-14
dna.github.comNot in the scope2026-11-14
dnasko.github.comNot in the scope2026-11-14
dnauck.github.comNot in the scope2026-11-14
dnc.github.comNot in the scope2026-11-14
dneg.github.comNot in the scope2026-11-14
dneto.github.comNot in the scope2026-11-14
dnewcome.github.comNot in the scope2026-11-14
dni.github.comNot in the scope2026-11-14
dnishimura.github.comNot in the scope2026-11-14
dnkqp.github.comNot in the scope2026-11-14
dnm.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.