Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.com#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
aplus.github.comNot in the scope2026-11-14
apmg.github.comNot in the scope2026-11-14
apnerve.github.comNot in the scope2026-11-14
apollo.github.comNot in the scope2026-11-14
apollo-antivirus.github.comNot in the scope2026-11-14
apollo-berb-antivirus.github.comNot in the scope2026-11-14
apollo-covid19.github.comNot in the scope2026-11-14
covid19.apollo.github.comNot in the scope2026-11-14
virus.apollo.github.comNot in the scope2026-11-14
apollo2.github.comNot in the scope2026-11-14
apollolux.github.comNot in the scope2026-11-14
apollon.github.comNot in the scope2026-11-14
apolo.github.comNot in the scope2026-11-14
apolukhin.github.comNot in the scope2026-11-14
apolzon.github.comNot in the scope2026-11-14
aponxi.github.comNot in the scope2026-11-14
apoorvparijat.github.comNot in the scope2026-11-14
apopo.github.comNot in the scope2026-11-14
aporat.github.comNot in the scope2026-11-14
apovtx.github.comNot in the scope2026-11-14
apoz.github.comNot in the scope2026-11-14
app.github.comNot in the scope2026-11-14
appdeployments.app.github.comNot in the scope2026-11-14
autoconfig.app.github.comNot in the scope2026-11-14
autodiscover.app.github.commailNot in the scope2026-11-14
caches.app.github.comNot in the scope2026-11-14
deploy.app.github.comNot in the scope2026-11-14
operations.app.github.comNot in the scope2026-11-14
requirements.app.github.comNot in the scope2026-11-14
webapps.app.github.comNot in the scope2026-11-14
webdisk.app.github.comNot in the scope2026-11-14
www.app.github.comNot in the scope2026-11-14
app1.github.comNot in the scope2026-11-14
app2.github.comNot in the scope2026-11-14
app3.github.comNot in the scope2026-11-14
app4.github.comNot in the scope2026-11-14
app5.github.comNot in the scope2026-11-14
app6.github.comNot in the scope2026-11-14
app7.github.comNot in the scope2026-11-14
app8.github.comNot in the scope2026-11-14
app9.github.comNot in the scope2026-11-14
appacitive.github.comNot in the scope2026-11-14
appccelerate.github.comNot in the scope2026-11-14
appcgi.github.comNot in the scope2026-11-14
appdev.github.comNot in the scope2026-11-14
appearin.github.comNot in the scope2026-11-14
appel.github.comNot in the scope2026-11-14
appendto.github.comNot in the scope2026-11-14
appfirst.github.comNot in the scope2026-11-14
appglu.github.comNot in the scope2026-11-14
appharbor.github.comNot in the scope2026-11-14
appi.github.comNot in the scope2026-11-14
appianjobs.github.comNot in the scope2026-11-14
applause.github.comNot in the scope2026-11-14
apple.github.comNot in the scope2026-11-14
verify.apple.github.comNot in the scope2026-11-14
www.apple.github.comNot in the scope2026-11-14
appleboy.github.comNot in the scope2026-11-14
appleparan.github.comNot in the scope2026-11-14
appli.github.comNot in the scope2026-11-14
applicat.github.comNot in the scope2026-11-14
application.github.comNot in the scope2026-11-14
applications.github.comNot in the scope2026-11-14
appliedis.github.comNot in the scope2026-11-14
apply.github.comNot in the scope2026-11-14
approval.github.comNot in the scope2026-11-14
approx.github.comNot in the scope2026-11-14
apps.github.comNot in the scope2026-11-14
webdisk.apps.github.comNot in the scope2026-11-14
www.apps.github.comNot in the scope2026-11-14
apps1.github.comNot in the scope2026-11-14
apps2.github.comNot in the scope2026-11-14
apps3.github.comNot in the scope2026-11-14
appsbakery.github.comNot in the scope2026-11-14
appspotr.github.comNot in the scope2026-11-14
appstack.github.comNot in the scope2026-11-14
appstore.github.comNot in the scope2026-11-14
apptest.github.comNot in the scope2026-11-14
appverse.github.comNot in the scope2026-11-14
appvery.github.comNot in the scope2026-11-14
apres.github.comNot in the scope2026-11-14
aprescott.github.comNot in the scope2026-11-14
aprettycoolprogram.github.comNot in the scope2026-11-14
apribadi.github.comNot in the scope2026-11-14
apricot.github.comNot in the scope2026-11-14
april.github.comNot in the scope2026-11-14
april-virus.github.comNot in the scope2026-11-14
antivirus.april.github.comNot in the scope2026-11-14
covid19.april.github.comNot in the scope2026-11-14
sigmavirus24.april.github.comNot in the scope2026-11-14
aprilandjan.github.comNot in the scope2026-11-14
aprilcovid19.github.comNot in the scope2026-11-14
aprisostg.github.comNot in the scope2026-11-14
aproxy.github.comNot in the scope2026-11-14
aps.github.comNot in the scope2026-11-14
apt.github.comNot in the scope2026-11-14
apt-mirror.github.comNot in the scope2026-11-14
apteka.github.comNot in the scope2026-11-14
aptiva.github.comNot in the scope2026-11-14
aptonic.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.