Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
dougburke.github.comNot in the scope2026-11-14
dougdroper.github.comNot in the scope2026-11-14
dougfales.github.comNot in the scope2026-11-14
dougireton.github.comNot in the scope2026-11-14
dougkeen.github.comNot in the scope2026-11-14
douglarek.github.comNot in the scope2026-11-14
douglas.github.comNot in the scope2026-11-14
douglasaguiar.github.comNot in the scope2026-11-14
douglasallen.github.comNot in the scope2026-11-14
douglasjarquin.github.comNot in the scope2026-11-14
douglasmeyer.github.comNot in the scope2026-11-14
dougm.github.comNot in the scope2026-11-14
dougnukem.github.comNot in the scope2026-11-14
dougochris.github.comNot in the scope2026-11-14
dougp.github.comNot in the scope2026-11-14
dougsko.github.comNot in the scope2026-11-14
dougwong.github.comNot in the scope2026-11-14
doula.github.comNot in the scope2026-11-14
dove.github.comNot in the scope2026-11-14
dovyski.github.comNot in the scope2026-11-14
down.github.comNot in the scope2026-11-14
download.github.comNot in the scope2026-11-14
autoconfig.download.github.comNot in the scope2026-11-14
autodiscover.download.github.commailNot in the scope2026-11-14
webdisk.download.github.comNot in the scope2026-11-14
www.download.github.comNot in the scope2026-11-14
download1.github.comNot in the scope2026-11-14
download2.github.comNot in the scope2026-11-14
download3.github.comNot in the scope2026-11-14
download4.github.comNot in the scope2026-11-14
downloaddigitalcodecs.github.comNot in the scope2026-11-14
downloaddigitaldm.github.comNot in the scope2026-11-14
downloaddigitaldownloads.github.comNot in the scope2026-11-14
downloaddigitalmanager.github.comNot in the scope2026-11-14
downloader.github.comNot in the scope2026-11-14
downloadhdcodecs.github.comNot in the scope2026-11-14
downloadmediacodecs.github.comNot in the scope2026-11-14
downloadmediadm.github.comNot in the scope2026-11-14
downloadmediadownloads.github.comNot in the scope2026-11-14
downloadmediamanager.github.comNot in the scope2026-11-14
downloadprocodecs.github.comNot in the scope2026-11-14
downloadprodm.github.comNot in the scope2026-11-14
downloadprodownloads.github.comNot in the scope2026-11-14
downloadpromanager.github.comNot in the scope2026-11-14
downloads.github.comNot in the scope2026-11-14
www.downloads.github.comNot in the scope2026-11-14
downpoured.github.comNot in the scope2026-11-14
downtown.github.comNot in the scope2026-11-14
dowobeha.github.comNot in the scope2026-11-14
doxcs.github.comNot in the scope2026-11-14
doyunglee.github.comNot in the scope2026-11-14
doz.github.comNot in the scope2026-11-14
dozen.github.comNot in the scope2026-11-14
jaxb.vo.core.dozermapper.github.comNot in the scope2026-11-14
dp.github.comNot in the scope2026-11-14
www.dp.github.comNot in the scope2026-11-14
dp19.github.comNot in the scope2026-11-14
dp90219.github.comNot in the scope2026-11-14
dpaleino.github.comNot in the scope2026-11-14
dpaluy.github.comNot in the scope2026-11-14
dpan.github.comNot in the scope2026-11-14
dpatru.github.comNot in the scope2026-11-14
dpatti.github.comNot in the scope2026-11-14
dpb587.github.comNot in the scope2026-11-14
dpeek.github.comNot in the scope2026-11-14
dperetti.github.comNot in the scope2026-11-14
dperit.github.comNot in the scope2026-11-14
dperny.github.comNot in the scope2026-11-14
dperrymorrow.github.comNot in the scope2026-11-14
dphaener.github.comNot in the scope2026-11-14
dpick.github.comNot in the scope2026-11-14
dpickett.github.comNot in the scope2026-11-14
dpiers.github.comNot in the scope2026-11-14
dplueger.github.comNot in the scope2026-11-14
dpmcnevin.github.comNot in the scope2026-11-14
dpnishant.github.comNot in the scope2026-11-14
dpo.github.comNot in the scope2026-11-14
dpolyakov.github.comNot in the scope2026-11-14
dppascual.github.comNot in the scope2026-11-14
dpr00f.github.comNot in the scope2026-11-14
dprada.github.comNot in the scope2026-11-14
dprhensimmta.github.comNot in the scope2026-11-14
dpritchett.github.comNot in the scope2026-11-14
dps.github.comNot in the scope2026-11-14
dpt.github.comNot in the scope2026-11-14
dpx-infinity.github.comNot in the scope2026-11-14
dpyryesk.github.comNot in the scope2026-11-14
dq.github.comNot in the scope2026-11-14
nbikh.dqeev.github.comNot in the scope2026-11-14
dr.github.comNot in the scope2026-11-14
dr-ace.github.comNot in the scope2026-11-14
dr-cdfg.github.comNot in the scope2026-11-14
dr-www.github.comNot in the scope2026-11-14
www.dr.github.comNot in the scope2026-11-14
drac.github.comNot in the scope2026-11-14
draco.github.comNot in the scope2026-11-14
dracula.github.comNot in the scope2026-11-14
dracz.github.comNot in the scope2026-11-14
draeton.github.comNot in the scope2026-11-14
draft.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.