Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.com#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
bendersigmavirus24.github.comNot in the scope2026-11-14
bendoh.github.comNot in the scope2026-11-14
bendtherules.github.comNot in the scope2026-11-14
bendyworks.github.comNot in the scope2026-11-14
benedikt.github.comNot in the scope2026-11-14
benefits.github.comNot in the scope2026-11-14
benekastah.github.comNot in the scope2026-11-14
benestar.github.comNot in the scope2026-11-14
benetech.github.comNot in the scope2026-11-14
beneverard.github.comNot in the scope2026-11-14
benfoxall.github.comNot in the scope2026-11-14
bengl.github.comNot in the scope2026-11-14
bengler.github.comNot in the scope2026-11-14
bengourley.github.comNot in the scope2026-11-14
bengtan.github.comNot in the scope2026-11-14
benhamill.github.comNot in the scope2026-11-14
benhamner.github.comNot in the scope2026-11-14
benhiller.github.comNot in the scope2026-11-14
benhirsch24.github.comNot in the scope2026-11-14
benhowell.github.comNot in the scope2026-11-14
benhoyt.github.comNot in the scope2026-11-14
benichu.github.comNot in the scope2026-11-14
benilovj.github.comNot in the scope2026-11-14
benja-m-1.github.comNot in the scope2026-11-14
benjamin.github.comNot in the scope2026-11-14
benjamine.github.comNot in the scope2026-11-14
benjaminnarin.github.comNot in the scope2026-11-14
benjaminoakes.github.comNot in the scope2026-11-14
benjaminplee.github.comNot in the scope2026-11-14
benjaminwootton.github.comNot in the scope2026-11-14
benjaminws.github.comNot in the scope2026-11-14
benjibow.github.comNot in the scope2026-11-14
benjifischman.github.comNot in the scope2026-11-14
benjoeclark.github.comNot in the scope2026-11-14
benjreinhart.github.comNot in the scope2026-11-14
benkiefer.github.comNot in the scope2026-11-14
benlangfeld.github.comNot in the scope2026-11-14
benlenarts.github.comNot in the scope2026-11-14
benley.github.comNot in the scope2026-11-14
benlightning.github.comNot in the scope2026-11-14
benmatselby.github.comNot in the scope2026-11-14
benmmurphy.github.comNot in the scope2026-11-14
bennadel.github.comNot in the scope2026-11-14
bennage.github.comNot in the scope2026-11-14
bennedich.github.comNot in the scope2026-11-14
bennettsmith.github.comNot in the scope2026-11-14
benny.github.comNot in the scope2026-11-14
bennylin.github.comNot in the scope2026-11-14
bennylinsigmavirus24.github.comNot in the scope2026-11-14
bennyschudel.github.comNot in the scope2026-11-14
benofsky.github.comNot in the scope2026-11-14
benoitc.github.comNot in the scope2026-11-14
benoyv.github.comNot in the scope2026-11-14
benpickles.github.comNot in the scope2026-11-14
benrhughes.github.comNot in the scope2026-11-14
benrito.github.comNot in the scope2026-11-14
benrussell.github.comNot in the scope2026-11-14
benschwarz.github.comNot in the scope2026-11-14
bensheldon.github.comNot in the scope2026-11-14
bensie.github.comNot in the scope2026-11-14
bensmithett.github.comNot in the scope2026-11-14
bensonhuang.github.comNot in the scope2026-11-14
benstein.github.comNot in the scope2026-11-14
benthomasson.github.comNot in the scope2026-11-14
bentlegen.github.comNot in the scope2026-11-14
bentokun.github.comNot in the scope2026-11-14
bentomas.github.comNot in the scope2026-11-14
benvanik.github.comNot in the scope2026-11-14
benvie.github.comNot in the scope2026-11-14
benvinegar.github.comNot in the scope2026-11-14
benweet.github.comNot in the scope2026-11-14
benwei.github.comNot in the scope2026-11-14
benweissmann.github.comNot in the scope2026-11-14
beny.github.comNot in the scope2026-11-14
benz.github.comNot in the scope2026-11-14
benz303.github.comNot in the scope2026-11-14
sigmavirus.benz303.github.comNot in the scope2026-11-14
community.sigmavirus.benz303.github.comNot in the scope2026-11-14
benzap.github.comNot in the scope2026-11-14
benzguo.github.comNot in the scope2026-11-14
benzmarkus.github.comNot in the scope2026-11-14
benzonico.github.comNot in the scope2026-11-14
beon.github.comNot in the scope2026-11-14
beoran.github.comNot in the scope2026-11-14
beppu.github.comNot in the scope2026-11-14
berb.github.comNot in the scope2026-11-14
berb-antivirus-1.github.comNot in the scope2026-11-14
berb-antivirus-14.github.comNot in the scope2026-11-14
berb-antivirus-4.github.comNot in the scope2026-11-14
berb-antivirus-5.github.comNot in the scope2026-11-14
berb-antivirus-8.github.comNot in the scope2026-11-14
berb-antivirus-admin1.github.comadminNot in the scope2026-11-14
berb-antivirus-analytics.github.comNot in the scope2026-11-14
berb-antivirus-apollo.github.comNot in the scope2026-11-14
berb-antivirus-backend.github.comNot in the scope2026-11-14
berb-antivirus-beta.github.comstagingNot in the scope2026-11-14
2.berb-antivirus.github.comNot in the scope2026-11-14
backend.berb-antivirus.github.comNot in the scope2026-11-14
berb-antivirusadmin1.github.comNot in the scope2026-11-14
berbaquero.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.