Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.com#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
aleator.github.comNot in the scope2026-11-14
alebellu.github.comNot in the scope2026-11-14
alecbenzer.github.comNot in the scope2026-11-14
alecgorge.github.comNot in the scope2026-11-14
alecharp.github.comNot in the scope2026-11-14
alecklandgraf.github.comNot in the scope2026-11-14
alecthegeek.github.comNot in the scope2026-11-14
alecto3-d.github.comNot in the scope2026-11-14
alectroemel.github.comNot in the scope2026-11-14
aledbf.github.comNot in the scope2026-11-14
aleen42.github.comNot in the scope2026-11-14
alef.github.comNot in the scope2026-11-14
alefeuvre.github.comNot in the scope2026-11-14
aleho.github.comNot in the scope2026-11-14
alejandrobll.github.comNot in the scope2026-11-14
alejandrogomez.github.comNot in the scope2026-11-14
alejandromg.github.comNot in the scope2026-11-14
alejio.github.comNot in the scope2026-11-14
alekstorm.github.comNot in the scope2026-11-14
alem0lars.github.comNot in the scope2026-11-14
sofia-project-website.alenacci.github.comNot in the scope2026-11-14
aleontsev.github.comNot in the scope2026-11-14
aleph.github.comNot in the scope2026-11-14
alert.github.comNot in the scope2026-11-14
alerts.github.comNot in the scope2026-11-14
alertus.github.comNot in the scope2026-11-14
alesguzik.github.comNot in the scope2026-11-14
alesjiranek.github.comNot in the scope2026-11-14
alessandroasac.github.comNot in the scope2026-11-14
aleste.github.comNot in the scope2026-11-14
aleung.github.comNot in the scope2026-11-14
alevy.github.comNot in the scope2026-11-14
alex.github.comNot in the scope2026-11-14
alex-d.github.comNot in the scope2026-11-14
alex-roc.github.comNot in the scope2026-11-14
alex-seville.github.comNot in the scope2026-11-14
alex-sherwin.github.comNot in the scope2026-11-14
www.alex.github.comNot in the scope2026-11-14
alex1990.github.comNot in the scope2026-11-14
alexa.github.comNot in the scope2026-11-14
alexabak.github.comNot in the scope2026-11-14
alexanbj.github.comNot in the scope2026-11-14
alexander.github.comNot in the scope2026-11-14
alexander-heimbuch.github.comNot in the scope2026-11-14
alexander-yakushev.github.comNot in the scope2026-11-14
alexanderbrevig.github.comNot in the scope2026-11-14
alexanderfabisch.github.comNot in the scope2026-11-14
alexanderflatscher.github.comNot in the scope2026-11-14
alexanderjarvis.github.comNot in the scope2026-11-14
alexandermaly.github.comNot in the scope2026-11-14
alexandermichels.github.comNot in the scope2026-11-14
alexandermlharris.github.comNot in the scope2026-11-14
alexanderpavlenko.github.comNot in the scope2026-11-14
alexanderrich.github.comNot in the scope2026-11-14
alexandra.github.comNot in the scope2026-11-14
alexandre.github.comNot in the scope2026-11-14
alexandrescieux.github.comNot in the scope2026-11-14
alexandria.github.comNot in the scope2026-11-14
alexanmtz.github.comNot in the scope2026-11-14
alexbain.github.comNot in the scope2026-11-14
alexbard.github.comNot in the scope2026-11-14
alexbarinov.github.comNot in the scope2026-11-14
alexbevi.github.comNot in the scope2026-11-14
alexbihary.github.comNot in the scope2026-11-14
alexbilbie.github.comNot in the scope2026-11-14
alexbio.github.comNot in the scope2026-11-14
alexbw.github.comNot in the scope2026-11-14
alexcambose.github.comNot in the scope2026-11-14
alexcash.github.comNot in the scope2026-11-14
alexch.github.comNot in the scope2026-11-14
alexchamberlain.github.comNot in the scope2026-11-14
alexchicn.github.comNot in the scope2026-11-14
alexcican.github.comNot in the scope2026-11-14
alexck.github.comNot in the scope2026-11-14
alexcoplan.github.comNot in the scope2026-11-14
alexcuesta.github.comNot in the scope2026-11-14
alexdantas.github.comNot in the scope2026-11-14
alexdesignworks.github.comNot in the scope2026-11-14
alexdioso.github.comNot in the scope2026-11-14
alexdominte.github.comNot in the scope2026-11-14
alexduloz.github.comNot in the scope2026-11-14
alexdunphy.github.comNot in the scope2026-11-14
alexec.github.comNot in the scope2026-11-14
alexek1987.github.comNot in the scope2026-11-14
alexeypetrushin.github.comNot in the scope2026-11-14
alexeypro.github.comNot in the scope2026-11-14
alexeyqu.github.comNot in the scope2026-11-14
alexeyshockov.github.comNot in the scope2026-11-14
alexfernandez.github.comNot in the scope2026-11-14
alexferreira.github.comNot in the scope2026-11-14
alexforrow.github.comNot in the scope2026-11-14
alexg.github.comNot in the scope2026-11-14
alexgibson.github.comNot in the scope2026-11-14
alexgodin.github.comNot in the scope2026-11-14
alexgreenbar.github.comNot in the scope2026-11-14
alexhayes.github.comNot in the scope2026-11-14
alexhenning.github.comNot in the scope2026-11-14
alexholehouse.github.comNot in the scope2026-11-14
alexholehuse.github.comNot in the scope2026-11-14
alexholmes.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in