Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
documentos.github.comNot in the scope2026-11-14
documents.github.comNot in the scope2026-11-14
docwhat.github.comNot in the scope2026-11-14
dod.github.comNot in the scope2026-11-14
dodge.github.comNot in the scope2026-11-14
dodgeball.github.comNot in the scope2026-11-14
dodger487.github.comNot in the scope2026-11-14
dodo.github.comNot in the scope2026-11-14
dodog.github.comNot in the scope2026-11-14
dodola.github.comNot in the scope2026-11-14
dodowoo.github.comNot in the scope2026-11-14
john.doe.github.comNot in the scope2026-11-14
doerte.github.comNot in the scope2026-11-14
does-not-exist.github.comNot in the scope2026-11-14
doesterr.github.comNot in the scope2026-11-14
dof.github.comNot in the scope2026-11-14
doffm.github.comNot in the scope2026-11-14
dofus.github.comNot in the scope2026-11-14
dog.github.comNot in the scope2026-11-14
dogancelik.github.comNot in the scope2026-11-14
dogazei.github.comNot in the scope2026-11-14
dogbeide.github.comNot in the scope2026-11-14
dogbert.github.comNot in the scope2026-11-14
dogebarapp.github.comNot in the scope2026-11-14
dogfeet.github.comNot in the scope2026-11-14
dogfood-dev.github.comdevNot in the scope2026-11-14
doggy.github.comNot in the scope2026-11-14
dogma.github.comNot in the scope2026-11-14
dogs.github.comNot in the scope2026-11-14
dohahn.github.comNot in the scope2026-11-14
dohmboyog.github.comNot in the scope2026-11-14
dohzya.github.comNot in the scope2026-11-14
doi.github.comNot in the scope2026-11-14
doist.github.comNot in the scope2026-11-14
doit.github.comNot in the scope2026-11-14
dojo.github.comNot in the scope2026-11-14
dojoteef.github.comNot in the scope2026-11-14
dok88.github.comNot in the scope2026-11-14
dokipen.github.comNot in the scope2026-11-14
doku.github.comNot in the scope2026-11-14
dokuryoku.github.comNot in the scope2026-11-14
dolbyio.github.comNot in the scope2026-11-14
dolce.github.comNot in the scope2026-11-14
dolfdijkstra.github.comNot in the scope2026-11-14
dolfin.github.comNot in the scope2026-11-14
dolin.github.comNot in the scope2026-11-14
doll.github.comNot in the scope2026-11-14
dollars.github.comNot in the scope2026-11-14
dolls.github.comNot in the scope2026-11-14
dolly.github.comNot in the scope2026-11-14
dolores.github.comNot in the scope2026-11-14
dolphin.github.comNot in the scope2026-11-14
dom.github.comNot in the scope2026-11-14
www.dom.github.comNot in the scope2026-11-14
dom4j.github.comNot in the scope2026-11-14
domain.github.comNot in the scope2026-11-14
deep.sub.domain.github.comNot in the scope2026-11-14
some.sub.domain.github.comNot in the scope2026-11-14
www.domain.github.comNot in the scope2026-11-14
domain2.github.comNot in the scope2026-11-14
domain3.github.comNot in the scope2026-11-14
domain51.github.comNot in the scope2026-11-14
domaincontrol.github.comNot in the scope2026-11-14
domaincontrolpanel.github.comNot in the scope2026-11-14
domaincp.github.comNot in the scope2026-11-14
domaindnszones.github.comNot in the scope2026-11-14
domainkey.github.comNot in the scope2026-11-14
domains.github.comNot in the scope2026-11-14
lots.of.domains.github.comNot in the scope2026-11-14
www.domains.github.comNot in the scope2026-11-14
domasx2.github.comNot in the scope2026-11-14
domchristie.github.comNot in the scope2026-11-14
domenic.github.comNot in the scope2026-11-14
domenika.github.comNot in the scope2026-11-14
domi.github.comNot in the scope2026-11-14
domination.github.comNot in the scope2026-11-14
domini.github.comNot in the scope2026-11-14
dominicbarnes.github.comNot in the scope2026-11-14
dominictarr.github.comNot in the scope2026-11-14
dominiek.github.comNot in the scope2026-11-14
dominiks.github.comNot in the scope2026-11-14
dominio.github.comNot in the scope2026-11-14
dominios.github.comNot in the scope2026-11-14
domino.github.comNot in the scope2026-11-14
dominus.github.comNot in the scope2026-11-14
domix.github.comNot in the scope2026-11-14
domma.github.comNot in the scope2026-11-14
dommmel.github.comNot in the scope2026-11-14
domness.github.comNot in the scope2026-11-14
domnikl.github.comNot in the scope2026-11-14
domoritz.github.comNot in the scope2026-11-14
dompdf.github.comNot in the scope2026-11-14
dompuiu.github.comNot in the scope2026-11-14
domreg.github.comNot in the scope2026-11-14
domsmasher.github.comNot in the scope2026-11-14
domwom.github.comNot in the scope2026-11-14
don.github.comNot in the scope2026-11-14
don6hao.github.comNot in the scope2026-11-14
donald.github.comNot in the scope2026-11-14
donald-john.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.