Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.com#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
andeek.github.comNot in the scope2026-11-14
andern.github.comNot in the scope2026-11-14
anderrv.github.comNot in the scope2026-11-14
anders.github.comNot in the scope2026-11-14
andersdjohnson.github.comNot in the scope2026-11-14
andersevenrud.github.comNot in the scope2026-11-14
andersjanmyr.github.comNot in the scope2026-11-14
andersjel.github.comNot in the scope2026-11-14
anderslemke.github.comNot in the scope2026-11-14
andersmalmgren.github.comNot in the scope2026-11-14
anderson.github.comNot in the scope2026-11-14
anderson916.github.comNot in the scope2026-11-14
www.andersonbittencourt.github.comNot in the scope2026-11-14
anderspk.github.comNot in the scope2026-11-14
anderssv.github.comNot in the scope2026-11-14
andi.github.comNot in the scope2026-11-14
andi-g.github.comNot in the scope2026-11-14
andi1984.github.comNot in the scope2026-11-14
andig.github.comNot in the scope2026-11-14
andirkh.github.comNot in the scope2026-11-14
andismith.github.comNot in the scope2026-11-14
andisthejackass.github.comNot in the scope2026-11-14
andjosh.github.comNot in the scope2026-11-14
andlabs-git.github.comgitNot in the scope2026-11-14
andland.github.comNot in the scope2026-11-14
andlaz.github.comNot in the scope2026-11-14
ando19721226.github.comNot in the scope2026-11-14
andorra.github.comNot in the scope2026-11-14
andotorg.github.comNot in the scope2026-11-14
andr-04.github.comNot in the scope2026-11-14
andras-tim.github.comNot in the scope2026-11-14
andre.github.comNot in the scope2026-11-14
andre-d.github.comNot in the scope2026-11-14
andrea.github.comNot in the scope2026-11-14
andreabiggi.github.comNot in the scope2026-11-14
andreacensi.github.comNot in the scope2026-11-14
andreafortuna.github.comNot in the scope2026-11-14
andreantunes.github.comNot in the scope2026-11-14
andreapellegrino.github.comNot in the scope2026-11-14
andreareginato.github.comNot in the scope2026-11-14
andreas.github.comNot in the scope2026-11-14
andreas-h.github.comNot in the scope2026-11-14
andreas-kupries.github.comNot in the scope2026-11-14
andreas-marschke.github.comNot in the scope2026-11-14
andreasaronsson.github.comNot in the scope2026-11-14
andreasbovens.github.comNot in the scope2026-11-14
andreasgal.github.comNot in the scope2026-11-14
andreasklinger.github.comNot in the scope2026-11-14
andreaslof.github.comNot in the scope2026-11-14
andreasmadsen.github.comNot in the scope2026-11-14
andreasom.github.comNot in the scope2026-11-14
andreasprlic.github.comNot in the scope2026-11-14
andreasronge.github.comNot in the scope2026-11-14
andreausu.github.comNot in the scope2026-11-14
andreavaghi.github.comNot in the scope2026-11-14
andreev-artem.github.comNot in the scope2026-11-14
andrefs.github.comNot in the scope2026-11-14
andrei.github.comNot in the scope2026-11-14
andreia.github.comNot in the scope2026-11-14
andreieftimie.github.comNot in the scope2026-11-14
andreinaromero.github.comNot in the scope2026-11-14
andreineculau.github.comNot in the scope2026-11-14
andreio.github.comNot in the scope2026-11-14
andreisavu.github.comNot in the scope2026-11-14
andrejv.github.comNot in the scope2026-11-14
andrelouiscaron.github.comNot in the scope2026-11-14
andremartingo.github.comNot in the scope2026-11-14
andren25.github.comNot in the scope2026-11-14
andrena.github.comNot in the scope2026-11-14
andrerod.github.comNot in the scope2026-11-14
andreroehrig.github.comNot in the scope2026-11-14
andres.github.comNot in the scope2026-11-14
andresaquino.github.comNot in the scope2026-11-14
andresmoschini.github.comNot in the scope2026-11-14
andresn.github.comNot in the scope2026-11-14
andresrc.github.comNot in the scope2026-11-14
andresromero.github.comNot in the scope2026-11-14
andrevenancio.github.comNot in the scope2026-11-14
andrew.github.comNot in the scope2026-11-14
andrew-d.github.comNot in the scope2026-11-14
andrew-ironforge.github.comNot in the scope2026-11-14
andrew-t-moore.github.comNot in the scope2026-11-14
andrewalker.github.comNot in the scope2026-11-14
andrewasquith.github.comNot in the scope2026-11-14
andrewberls.github.comNot in the scope2026-11-14
andrewbunday.github.comNot in the scope2026-11-14
andrewcallahan.github.comNot in the scope2026-11-14
andrewfhart.github.comNot in the scope2026-11-14
andrewgarn.github.comNot in the scope2026-11-14
andrewgleave.github.comNot in the scope2026-11-14
andrewhavens.github.comNot in the scope2026-11-14
andrewkarasek.github.comNot in the scope2026-11-14
andrewleclair.github.comNot in the scope2026-11-14
andrewmcdonough.github.comNot in the scope2026-11-14
andrewn.github.comNot in the scope2026-11-14
andrewnelder.github.comNot in the scope2026-11-14
andrewneo.github.comNot in the scope2026-11-14
andrewpbrett.github.comNot in the scope2026-11-14
andrewphoy.github.comNot in the scope2026-11-14
andrewplummer.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.