Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
remote.education.github.comvpnNot in the scope2026-11-14
retail.education.github.comNot in the scope2026-11-14
root.education.github.comNot in the scope2026-11-14
rx.education.github.comNot in the scope2026-11-14
searchportal.education.github.comNot in the scope2026-11-14
secure.education.github.comNot in the scope2026-11-14
server.education.github.comNot in the scope2026-11-14
server1.education.github.comNot in the scope2026-11-14
servers.education.github.comNot in the scope2026-11-14
signin.education.github.comauthNot in the scope2026-11-14
sip.education.github.comNot in the scope2026-11-14
sitecore.education.github.comNot in the scope2026-11-14
smtp.education.github.commailNot in the scope2026-11-14
spf.education.github.comNot in the scope2026-11-14
sql.education.github.comNot in the scope2026-11-14
ssl.education.github.comNot in the scope2026-11-14
stage.education.github.comstagingNot in the scope2026-11-14
staging.education.github.comstagingNot in the scope2026-11-14
static.education.github.comNot in the scope2026-11-14
store.education.github.comNot in the scope2026-11-14
storybook.education.github.comNot in the scope2026-11-14
support.education.github.comNot in the scope2026-11-14
test.education.github.comtestNot in the scope2026-11-14
tls.education.github.comNot in the scope2026-11-14
tools.education.github.comNot in the scope2026-11-14
tx.education.github.comNot in the scope2026-11-14
uk.education.github.comNot in the scope2026-11-14
upload.education.github.comdataNot in the scope2026-11-14
us-east-1.education.github.comNot in the scope2026-11-14
vault.education.github.comtoolsNot in the scope2026-11-14
vendor-api.education.github.comapiNot in the scope2026-11-14
vendors.education.github.comNot in the scope2026-11-14
video.education.github.comNot in the scope2026-11-14
view.education.github.comNot in the scope2026-11-14
voice.education.github.comNot in the scope2026-11-14
wap.education.github.comNot in the scope2026-11-14
web.education.github.comNot in the scope2026-11-14
webmail.education.github.commailNot in the scope2026-11-14
wfm-service.education.github.comNot in the scope2026-11-14
whm.education.github.comNot in the scope2026-11-14
whois.education.github.comNot in the scope2026-11-14
wiki.education.github.comtoolsNot in the scope2026-11-14
wordpress.education.github.comNot in the scope2026-11-14
wp.education.github.comNot in the scope2026-11-14
ww1.education.github.comNot in the scope2026-11-14
www.education.github.comNot in the scope2026-11-14
www2.education.github.comNot in the scope2026-11-14
edudemy.github.comNot in the scope2026-11-14
edulify.github.comNot in the scope2026-11-14
eduroam.github.comNot in the scope2026-11-14
eduzappa18.github.comNot in the scope2026-11-14
edvakf.github.comNot in the scope2026-11-14
edward.github.comNot in the scope2026-11-14
edwardhotchkiss.github.comNot in the scope2026-11-14
edwardoriordan.github.comNot in the scope2026-11-14
edwardtoday.github.comNot in the scope2026-11-14
edwin.github.comNot in the scope2026-11-14
edydkim.github.comNot in the scope2026-11-14
edymerchk.github.comNot in the scope2026-11-14
ee.github.comNot in the scope2026-11-14
www.ee.github.comNot in the scope2026-11-14
jdxu7.ee087.github.comNot in the scope2026-11-14
eea.github.comNot in the scope2026-11-14
eece.github.comNot in the scope2026-11-14
eed3si9n.github.comNot in the scope2026-11-14
eedesignhouse.github.comNot in the scope2026-11-14
eedition.github.comNot in the scope2026-11-14
eedri.github.comNot in the scope2026-11-14
eee.github.comNot in the scope2026-11-14
eee-c.github.comNot in the scope2026-11-14
eeejay.github.comNot in the scope2026-11-14
eeeps.github.comNot in the scope2026-11-14
eegg.github.comNot in the scope2026-11-14
eemi2010.github.comNot in the scope2026-11-14
eerwitt.github.comNot in the scope2026-11-14
eethann.github.comNot in the scope2026-11-14
grg3o.eetz5.github.comNot in the scope2026-11-14
eevee.github.comNot in the scope2026-11-14
eewang.github.comNot in the scope2026-11-14
eexpress.github.comNot in the scope2026-11-14
ef.github.comNot in the scope2026-11-14
ef4.github.comNot in the scope2026-11-14
efalcao.github.comNot in the scope2026-11-14
efeamadasun.github.comNot in the scope2026-11-14
efekarakus.github.comNot in the scope2026-11-14
efficiency20.github.comNot in the scope2026-11-14
effygao.github.comNot in the scope2026-11-14
efleming969.github.comNot in the scope2026-11-14
eforce.github.comNot in the scope2026-11-14
eform.github.comNot in the scope2026-11-14
eforms.github.comNot in the scope2026-11-14
efrainvalentin.github.comNot in the scope2026-11-14
efreak.github.comNot in the scope2026-11-14
efrenfuentes.github.comNot in the scope2026-11-14
efsavage.github.comNot in the scope2026-11-14
efullea.github.comNot in the scope2026-11-14
efung.github.comNot in the scope2026-11-14
efz1602.github.comNot in the scope2026-11-14
eg.github.comNot in the scope2026-11-14
egaldames.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.