Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
dwhittle.github.comNot in the scope2026-11-14
dwhjames.github.comNot in the scope2026-11-14
dwhuang.github.comNot in the scope2026-11-14
dwieeb.github.comNot in the scope2026-11-14
dwilliamson.github.comNot in the scope2026-11-14
dwillis.github.comNot in the scope2026-11-14
dwins.github.comNot in the scope2026-11-14
dwiorigin.github.comNot in the scope2026-11-14
dwnoble.github.comNot in the scope2026-11-14
dworigin.github.comNot in the scope2026-11-14
0wkn8.dwtu2.github.comNot in the scope2026-11-14
dwursteisen.github.comNot in the scope2026-11-14
dx.github.comNot in the scope2026-11-14
dxdelta.github.comNot in the scope2026-11-14
a7w7e.dxloa.github.comNot in the scope2026-11-14
dy.github.comNot in the scope2026-11-14
dyamah.github.comNot in the scope2026-11-14
dyang.github.comNot in the scope2026-11-14
dyashkir.github.comNot in the scope2026-11-14
dyci.github.comNot in the scope2026-11-14
dyknow.github.comNot in the scope2026-11-14
dylan.github.comNot in the scope2026-11-14
dylandrop.github.comNot in the scope2026-11-14
dylanfm.github.comNot in the scope2026-11-14
dylanfprice.github.comNot in the scope2026-11-14
dylannnn.github.comNot in the scope2026-11-14
dylants.github.comNot in the scope2026-11-14
dylanvivi.github.comNot in the scope2026-11-14
dylemma.github.comNot in the scope2026-11-14
dyljqq.github.comNot in the scope2026-11-14
dylnuge.github.comNot in the scope2026-11-14
dylon.github.comNot in the scope2026-11-14
dymaxionkim.github.comNot in the scope2026-11-14
dymdmy2120.github.comNot in the scope2026-11-14
dymk.github.comNot in the scope2026-11-14
dyn.github.comNot in the scope2026-11-14
oxst4.dyn8w.github.comNot in the scope2026-11-14
dynamic.github.comNot in the scope2026-11-14
dynamicguy.github.comNot in the scope2026-11-14
dynamics.github.comNot in the scope2026-11-14
dynamis.github.comNot in the scope2026-11-14
dyninc.github.comNot in the scope2026-11-14
dynlang-hhu.github.comNot in the scope2026-11-14
dynmeth.github.comNot in the scope2026-11-14
dyreriket.github.comNot in the scope2026-11-14
dys.github.comNot in the scope2026-11-14
dyscrete.github.comNot in the scope2026-11-14
dysinger.github.comNot in the scope2026-11-14
dysoco.github.comNot in the scope2026-11-14
subdomain.dytchem.github.comNot in the scope2026-11-14
dyve.github.comNot in the scope2026-11-14
dz.github.comNot in the scope2026-11-14
www.dz.github.comNot in the scope2026-11-14
dzaric.github.comNot in the scope2026-11-14
dzejkej.github.comNot in the scope2026-11-14
dzenana-trenutak.github.comNot in the scope2026-11-14
dzenanr.github.comNot in the scope2026-11-14
dzfl.github.comNot in the scope2026-11-14
dzhurley.github.comNot in the scope2026-11-14
dzmpr.github.comNot in the scope2026-11-14
dzone.github.comNot in the scope2026-11-14
dzucconi.github.comNot in the scope2026-11-14
dzwarg.github.comNot in the scope2026-11-14
dzwicker.github.comNot in the scope2026-11-14
e.github.comNot in the scope2026-11-14
e-cloud.github.comNot in the scope2026-11-14
e-commerce.github.comNot in the scope2026-11-14
e-jigsaw.github.comNot in the scope2026-11-14
e-learning.github.comNot in the scope2026-11-14
www.e-learning.github.comNot in the scope2026-11-14
e-mail.github.commailNot in the scope2026-11-14
e-mailky.github.comNot in the scope2026-11-14
e-noise.github.comNot in the scope2026-11-14
e-p-i.github.comNot in the scope2026-11-14
e-podpis.github.comNot in the scope2026-11-14
img.e.github.comNot in the scope2026-11-14
a.ns.e.github.comNot in the scope2026-11-14
b.ns.e.github.comNot in the scope2026-11-14
c.ns.e.github.comNot in the scope2026-11-14
d.ns.e.github.comNot in the scope2026-11-14
e.ns.e.github.comNot in the scope2026-11-14
f.ns.e.github.comNot in the scope2026-11-14
www.e.github.comNot in the scope2026-11-14
e1.github.comNot in the scope2026-11-14
e10.github.comNot in the scope2026-11-14
e2.github.comNot in the scope2026-11-14
e3.github.comNot in the scope2026-11-14
e4.github.comNot in the scope2026-11-14
e46951b86.github.comNot in the scope2026-11-14
e4922586.github.comNot in the scope2026-11-14
e5.github.comNot in the scope2026-11-14
e6.github.comNot in the scope2026-11-14
e758cdc1.github.comNot in the scope2026-11-14
e8a63eb77b.github.comNot in the scope2026-11-14
e9t.github.comNot in the scope2026-11-14
ea.github.comNot in the scope2026-11-14
www.ea.github.comNot in the scope2026-11-14
ea7son.github.comNot in the scope2026-11-14
eac.github.comNot in the scope2026-11-14
eaceaser.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.