Skip to content
Connect AISign inSign up free

Bug bounty program

EV

Equifax-vdp

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.com#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Root:github.com
Scope
Name suggests
First seen
Text fileClear filters55,670 names
Subdomains of Equifax-vdp
NameScopeFirst seen
root.api.github.comapiNot in the scope2026-11-14
repos.test.credentials.app.scopes.api.github.comapi, git, testNot in the scope2026-11-14
searchportal.api.github.comapiNot in the scope2026-11-14
searchportal-qa.api.github.comapi, testNot in the scope2026-11-14
secure.api.github.comapiNot in the scope2026-11-14
servers.api.github.comapiNot in the scope2026-11-14
sigmavirus24.api.github.comapiNot in the scope2026-11-14
signin.api.github.comapi, authNot in the scope2026-11-14
signup.api.github.comapiNot in the scope2026-11-14
sip.api.github.comapiNot in the scope2026-11-14
sitecore.api.github.comapiNot in the scope2026-11-14
spf.api.github.comapiNot in the scope2026-11-14
sql.api.github.comapiNot in the scope2026-11-14
sslvpn.api.github.comapi, vpnNot in the scope2026-11-14
sso.api.github.comapi, authNot in the scope2026-11-14
stage.api.github.comapi, stagingNot in the scope2026-11-14
staging.api.github.comapi, stagingNot in the scope2026-11-14
static.api.github.comapiNot in the scope2026-11-14
stats.api.github.comapiNot in the scope2026-11-14
store.api.github.comapiNot in the scope2026-11-14
sub.api.github.comapiNot in the scope2026-11-14
support.api.github.comapiNot in the scope2026-11-14
tcp.api.github.comapiNot in the scope2026-11-14
test.api.github.comapi, testNot in the scope2026-11-14
tls.api.github.comapiNot in the scope2026-11-14
tools.api.github.comapiNot in the scope2026-11-14
tx.api.github.comapiNot in the scope2026-11-14
uk.api.github.comapiNot in the scope2026-11-14
upload.api.github.comapi, dataNot in the scope2026-11-14
uploads.api.github.comapi, dataNot in the scope2026-11-14
us-east-1.api.github.comapiNot in the scope2026-11-14
useast.api.github.comapiNot in the scope2026-11-14
x.users.api.github.comapiNot in the scope2026-11-14
v1.api.github.comapiNot in the scope2026-11-14
v3.api.github.comapiNot in the scope2026-11-14
v4.api.github.comapiNot in the scope2026-11-14
vault.api.github.comapi, toolsNot in the scope2026-11-14
vendor.api.github.comapiNot in the scope2026-11-14
vendors.api.github.comapiNot in the scope2026-11-14
video.api.github.comapiNot in the scope2026-11-14
videos.api.github.comapiNot in the scope2026-11-14
view.api.github.comapiNot in the scope2026-11-14
virus.api.github.comapiNot in the scope2026-11-14
virusscan.api.github.comapiNot in the scope2026-11-14
vpn.api.github.comapi, vpnNot in the scope2026-11-14
web.api.github.comapiNot in the scope2026-11-14
webhook.api.github.comapiNot in the scope2026-11-14
wfm-service.api.github.comapiNot in the scope2026-11-14
whm.api.github.comapiNot in the scope2026-11-14
wiki.api.github.comapi, toolsNot in the scope2026-11-14
wordpress.api.github.comapiNot in the scope2026-11-14
ww1.api.github.comapiNot in the scope2026-11-14
www.api.github.comapiNot in the scope2026-11-14
www1.api.github.comapiNot in the scope2026-11-14
www2.api.github.comapiNot in the scope2026-11-14
x.api.github.comapiNot in the scope2026-11-14
xxx.api.github.comapiNot in the scope2026-11-14
api0.github.comapiNot in the scope2026-11-14
api1.github.comapiNot in the scope2026-11-14
api1-antivirus.github.comapiNot in the scope2026-11-14
api1-covid19.github.comapiNot in the scope2026-11-14
api1-virus.github.comapiNot in the scope2026-11-14
antivirus.api1.github.comapiNot in the scope2026-11-14
covid19.api1.github.comapiNot in the scope2026-11-14
api11.github.comapiNot in the scope2026-11-14
api12.github.comapiNot in the scope2026-11-14
api15.github.comapiNot in the scope2026-11-14
api1sigmavirus24.github.comapiNot in the scope2026-11-14
api2.github.comapiNot in the scope2026-11-14
api260.github.comapiNot in the scope2026-11-14
api3.github.comapiNot in the scope2026-11-14
api5.github.comapiNot in the scope2026-11-14
api6.github.comapiNot in the scope2026-11-14
api66.github.comapiNot in the scope2026-11-14
api7.github.comapiNot in the scope2026-11-14
api8.github.comapiNot in the scope2026-11-14
api96794.github.comapiNot in the scope2026-11-14
apiaryio.github.comNot in the scope2026-11-14
apibootstraper.github.comNot in the scope2026-11-14
apic.github.comNot in the scope2026-11-14
apicovid19.github.comNot in the scope2026-11-14
apidev.github.comNot in the scope2026-11-14
apido.github.comNot in the scope2026-11-14
apify.github.comNot in the scope2026-11-14
apigee.github.comNot in the scope2026-11-14
apigrove.github.comNot in the scope2026-11-14
apim-haufe-io.github.comNot in the scope2026-11-14
x1c.protobuf.apiobservermetricsb0z.github.comNot in the scope2026-11-14
apirogov.github.comNot in the scope2026-11-14
apis.github.comapiNot in the scope2026-11-14
apitest.github.comNot in the scope2026-11-14
apitrace.github.comNot in the scope2026-11-14
apk.github.comNot in the scope2026-11-14
apl.github.comNot in the scope2026-11-14
apla.github.comNot in the scope2026-11-14
aplicaciones.github.comNot in the scope2026-11-14
aplicativos.github.comNot in the scope2026-11-14
aplikasi.github.comNot in the scope2026-11-14
aplnosun.github.comNot in the scope2026-11-14
aplpy.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated