Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
dro14.github.comNot in the scope2026-11-14
drogo.github.comNot in the scope2026-11-14
droid242.github.comNot in the scope2026-11-14
droidlabs.github.comNot in the scope2026-11-14
droneru.github.comNot in the scope2026-11-14
droolsjbpm.github.comNot in the scope2026-11-14
droot.github.comNot in the scope2026-11-14
drop.github.comNot in the scope2026-11-14
drop-covid19.github.comNot in the scope2026-11-14
antivirus.drop.github.comNot in the scope2026-11-14
covid19.drop.github.comNot in the scope2026-11-14
sigmavirus24.drop.github.comNot in the scope2026-11-14
dropbox.github.comNot in the scope2026-11-14
dropcovid19.github.comNot in the scope2026-11-14
dropecho.github.comNot in the scope2026-11-14
dropwizard-hikaricp.github.comNot in the scope2026-11-14
drorm.github.comNot in the scope2026-11-14
drotiro.github.comNot in the scope2026-11-14
drozzy.github.comNot in the scope2026-11-14
drp.github.comNot in the scope2026-11-14
drpheltright.github.comNot in the scope2026-11-14
drphilmarshall.github.comNot in the scope2026-11-14
drr00t.github.comNot in the scope2026-11-14
drsemann.github.comNot in the scope2026-11-14
drsimonmiles.github.comNot in the scope2026-11-14
drslump.github.comNot in the scope2026-11-14
drsm79.github.comNot in the scope2026-11-14
drsnjm.github.comNot in the scope2026-11-14
drtychai.github.comNot in the scope2026-11-14
dru.github.comNot in the scope2026-11-14
drublic.github.comNot in the scope2026-11-14
drufat.github.comNot in the scope2026-11-14
druide.github.comNot in the scope2026-11-14
drulm.github.comNot in the scope2026-11-14
drumandbass.github.comNot in the scope2026-11-14
crunchy-userinit.drummyfloyd.github.comNot in the scope2026-11-14
drupal.github.comNot in the scope2026-11-14
www.drupal.github.comNot in the scope2026-11-14
drupal7.github.comNot in the scope2026-11-14
drupalista-br.github.comNot in the scope2026-11-14
drupaltest.github.comNot in the scope2026-11-14
drupblue.github.comNot in the scope2026-11-14
drusk.github.comNot in the scope2026-11-14
drvic10k.github.comNot in the scope2026-11-14
drvidhya.github.comNot in the scope2026-11-14
drvinceknight.github.comNot in the scope2026-11-14
admin.drvinceknight.github.comadminNot in the scope2026-11-14
autoconfig.drvinceknight.github.comNot in the scope2026-11-14
autodiscover.drvinceknight.github.commailNot in the scope2026-11-14
beta.drvinceknight.github.comstagingNot in the scope2026-11-14
blog.drvinceknight.github.comNot in the scope2026-11-14
cp.drvinceknight.github.comNot in the scope2026-11-14
cpanel.drvinceknight.github.comadminNot in the scope2026-11-14
cpanel-sigmavirus.drvinceknight.github.comadminNot in the scope2026-11-14
demo.drvinceknight.github.comtestNot in the scope2026-11-14
dev.drvinceknight.github.comdevNot in the scope2026-11-14
dns1.drvinceknight.github.comNot in the scope2026-11-14
dns2.drvinceknight.github.comNot in the scope2026-11-14
forum.drvinceknight.github.comNot in the scope2026-11-14
ftp.drvinceknight.github.comdataNot in the scope2026-11-14
imap.drvinceknight.github.commailNot in the scope2026-11-14
img.drvinceknight.github.comNot in the scope2026-11-14
lists.drvinceknight.github.comNot in the scope2026-11-14
localhost.drvinceknight.github.comdevNot in the scope2026-11-14
m.drvinceknight.github.comNot in the scope2026-11-14
mail.drvinceknight.github.commailNot in the scope2026-11-14
mail2.drvinceknight.github.commailNot in the scope2026-11-14
mobile.drvinceknight.github.comNot in the scope2026-11-14
mx.drvinceknight.github.commailNot in the scope2026-11-14
mysql.drvinceknight.github.comdataNot in the scope2026-11-14
new.drvinceknight.github.comNot in the scope2026-11-14
news.drvinceknight.github.comNot in the scope2026-11-14
ns.drvinceknight.github.comNot in the scope2026-11-14
ns1.drvinceknight.github.comNot in the scope2026-11-14
ns2.drvinceknight.github.comNot in the scope2026-11-14
ns3.drvinceknight.github.comNot in the scope2026-11-14
ns4.drvinceknight.github.comNot in the scope2026-11-14
old.drvinceknight.github.comlegacyNot in the scope2026-11-14
pop.drvinceknight.github.comNot in the scope2026-11-14
pop3.drvinceknight.github.commailNot in the scope2026-11-14
portal.drvinceknight.github.comNot in the scope2026-11-14
secure.drvinceknight.github.comNot in the scope2026-11-14
server.drvinceknight.github.comNot in the scope2026-11-14
shop.drvinceknight.github.comNot in the scope2026-11-14
smtp.drvinceknight.github.commailNot in the scope2026-11-14
static.drvinceknight.github.comNot in the scope2026-11-14
support.drvinceknight.github.comNot in the scope2026-11-14
test.drvinceknight.github.comtestNot in the scope2026-11-14
vpn.drvinceknight.github.comvpnNot in the scope2026-11-14
web.drvinceknight.github.comNot in the scope2026-11-14
webdisk.drvinceknight.github.comNot in the scope2026-11-14
webmail.drvinceknight.github.commailNot in the scope2026-11-14
whm.drvinceknight.github.comNot in the scope2026-11-14
wiki.drvinceknight.github.comtoolsNot in the scope2026-11-14
www.drvinceknight.github.comNot in the scope2026-11-14
www1.drvinceknight.github.comNot in the scope2026-11-14
www2.drvinceknight.github.comNot in the scope2026-11-14
drweb.github.comNot in the scope2026-11-14
dryan.github.comNot in the scope2026-11-14
dryman.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.