Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.com#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
berdario.github.comNot in the scope2026-11-14
berekuk.github.comNot in the scope2026-11-14
bergie.github.comNot in the scope2026-11-14
bergquist.github.comNot in the scope2026-11-14
beritra.github.comNot in the scope2026-11-14
berkerpeksag.github.comNot in the scope2026-11-14
berkes.github.comNot in the scope2026-11-14
berklee.github.comNot in the scope2026-11-14
berkus.github.comNot in the scope2026-11-14
berlin.github.comNot in the scope2026-11-14
berlinbrown.github.comNot in the scope2026-11-14
berlingeekettes.github.comNot in the scope2026-11-14
berlinonline.github.comNot in the scope2026-11-14
berlinphp.github.comNot in the scope2026-11-14
bermi.github.comNot in the scope2026-11-14
bermudezca.github.comNot in the scope2026-11-14
bernardoantunes.github.comNot in the scope2026-11-14
bernerdschaefer.github.comNot in the scope2026-11-14
bernii.github.comNot in the scope2026-11-14
berny.github.comNot in the scope2026-11-14
berreman4x4.github.comNot in the scope2026-11-14
berrorspbz.github.comNot in the scope2026-11-14
berry.github.comNot in the scope2026-11-14
berryp.github.comNot in the scope2026-11-14
bert.github.comNot in the scope2026-11-14
bertfrees.github.comNot in the scope2026-11-14
bertgamotacorp.github.comNot in the scope2026-11-14
bertomartin.github.comNot in the scope2026-11-14
bertramdev.github.comNot in the scope2026-11-14
berty38.github.comNot in the scope2026-11-14
bertzzie.github.comNot in the scope2026-11-14
beryl.github.comNot in the scope2026-11-14
beryllium.github.comNot in the scope2026-11-14
bes.github.comNot in the scope2026-11-14
bescala.github.comNot in the scope2026-11-14
beschulz.github.comNot in the scope2026-11-14
besfro.github.comNot in the scope2026-11-14
bespokepost.github.comNot in the scope2026-11-14
best.github.comNot in the scope2026-11-14
www.best.github.comNot in the scope2026-11-14
bestcar.github.comNot in the scope2026-11-14
bestcodecs.github.comNot in the scope2026-11-14
bestdeal.github.comNot in the scope2026-11-14
bestdigitalcodecs.github.comNot in the scope2026-11-14
bestelios.github.comNot in the scope2026-11-14
besteric.github.comNot in the scope2026-11-14
bestform.github.comNot in the scope2026-11-14
bestfreecodecs.github.comNot in the scope2026-11-14
bestiejs.github.comNot in the scope2026-11-14
bestlivecodecs.github.comNot in the scope2026-11-14
bestmediacodecs.github.comNot in the scope2026-11-14
bestmediafile.github.comNot in the scope2026-11-14
bestmediafileinc.github.comNot in the scope2026-11-14
bestmediafiles.github.comNot in the scope2026-11-14
bestmediafilesinc.github.comNot in the scope2026-11-14
bestnewcodecs.github.comNot in the scope2026-11-14
bestseller.github.comNot in the scope2026-11-14
bestthiscodecs.github.comNot in the scope2026-11-14
bestway.github.comNot in the scope2026-11-14
bestwillcui.github.comNot in the scope2026-11-14
bet.github.comNot in the scope2026-11-14
bet365zaixianyule-sigmavirus.github.comNot in the scope2026-11-14
bet365zuikuaiwangzhisigmavirus.github.comNot in the scope2026-11-14
beta.github.comstagingNot in the scope2026-11-14
beta-antivirus.github.comstagingNot in the scope2026-11-14
antivirus.beta.github.comstagingNot in the scope2026-11-14
api-v3.beta.github.comapi, stagingNot in the scope2026-11-14
autoconfig.beta.github.comstagingNot in the scope2026-11-14
autodiscover.beta.github.commail, stagingNot in the scope2026-11-14
covid19.beta.github.comstagingNot in the scope2026-11-14
m.beta.github.comstagingNot in the scope2026-11-14
virus.beta.github.comstagingNot in the scope2026-11-14
webdisk.beta.github.comstagingNot in the scope2026-11-14
www.beta.github.comstagingNot in the scope2026-11-14
beta1.github.comstagingNot in the scope2026-11-14
beta2.github.comstagingNot in the scope2026-11-14
beta3.github.comstagingNot in the scope2026-11-14
beta4.github.comstagingNot in the scope2026-11-14
betaa.github.comNot in the scope2026-11-14
betablog.github.comNot in the scope2026-11-14
betac.github.comNot in the scope2026-11-14
betainabox.github.comNot in the scope2026-11-14
betajaen.github.comNot in the scope2026-11-14
betamaxteam.github.comNot in the scope2026-11-14
betanalpha.github.comNot in the scope2026-11-14
betarelease.github.comNot in the scope2026-11-14
betav2.github.comNot in the scope2026-11-14
betawaffle.github.comNot in the scope2026-11-14
betbaijialekaihu-antivirus.github.comNot in the scope2026-11-14
beth.github.comNot in the scope2026-11-14
beth-yang.github.comNot in the scope2026-11-14
betravis.github.comNot in the scope2026-11-14
betravis-sigmavirus.github.comNot in the scope2026-11-14
betsmartmedia.github.comNot in the scope2026-11-14
better-history.github.comNot in the scope2026-11-14
betterelephant.github.comNot in the scope2026-11-14
betterelephantantivirus.github.comNot in the scope2026-11-14
bettse.github.comNot in the scope2026-11-14
betty.github.comNot in the scope2026-11-14
bevry.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.