Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.com#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
www.biotech.github.comNot in the scope2026-11-14
bioversity.github.comNot in the scope2026-11-14
biovisualize.github.comNot in the scope2026-11-14
bip.github.comNot in the scope2026-11-14
www.bip.github.comNot in the scope2026-11-14
biqnupuk.github.comNot in the scope2026-11-14
birds.github.comNot in the scope2026-11-14
birdseyesoftware.github.comNot in the scope2026-11-14
birenderjit.github.comNot in the scope2026-11-14
birgitengelmann.github.comNot in the scope2026-11-14
birmingham.github.comNot in the scope2026-11-14
birryree.github.comNot in the scope2026-11-14
birthday.github.comNot in the scope2026-11-14
bis.github.comNot in the scope2026-11-14
bismarck.github.comNot in the scope2026-11-14
bison.github.comNot in the scope2026-11-14
bit.github.comNot in the scope2026-11-14
bit-by-bit.github.comNot in the scope2026-11-14
bit-by-bit-antivirus.github.comNot in the scope2026-11-14
bit-by-bit-sigmavirus24.github.comNot in the scope2026-11-14
bit-c.github.comNot in the scope2026-11-14
bit101.github.comNot in the scope2026-11-14
bit3725.github.comNot in the scope2026-11-14
bitantiviruss.github.comNot in the scope2026-11-14
bitbaydev.github.comNot in the scope2026-11-14
bitboxer.github.comNot in the scope2026-11-14
bitcare.github.comNot in the scope2026-11-14
bitcoin-labs.github.comNot in the scope2026-11-14
bitcoinaustria.github.comNot in the scope2026-11-14
bitcoinjs.github.comNot in the scope2026-11-14
bitdewy.github.comNot in the scope2026-11-14
bitfyre.github.comNot in the scope2026-11-14
bitgandtter.github.comNot in the scope2026-11-14
bitglory.github.comNot in the scope2026-11-14
bithigher.github.comNot in the scope2026-11-14
bitly.github.comNot in the scope2026-11-14
bitlyscience.github.comNot in the scope2026-11-14
bitops.github.comNot in the scope2026-11-14
bitopsantivirus.github.comNot in the scope2026-11-14
bitovi.github.comNot in the scope2026-11-14
bitpiedotcom.github.comNot in the scope2026-11-14
bitpshr.github.comNot in the scope2026-11-14
bitrix.github.comNot in the scope2026-11-14
bitrot.github.comNot in the scope2026-11-14
bitrut.github.comNot in the scope2026-11-14
bits.github.comNot in the scope2026-11-14
bitstars.github.comNot in the scope2026-11-14
bitstrings.github.comNot in the scope2026-11-14
cert-manager-webhook-inwx.bitte-ein-bit.github.comadminNot in the scope2026-11-14
bittersweetryan.github.comNot in the scope2026-11-14
bittorrent.github.comNot in the scope2026-11-14
bittorrenttorque.github.comNot in the scope2026-11-14
bitvote.github.comNot in the scope2026-11-14
bitwalker.github.comNot in the scope2026-11-14
bitwiseshiftleft.github.comNot in the scope2026-11-14
biuro.github.comNot in the scope2026-11-14
bixo.github.comNot in the scope2026-11-14
biyou.github.comNot in the scope2026-11-14
biyumeng.github.comNot in the scope2026-11-14
biz.github.comNot in the scope2026-11-14
www.biz.github.comNot in the scope2026-11-14
biznes.github.comNot in the scope2026-11-14
www.biznes.github.comNot in the scope2026-11-14
bizo.github.comNot in the scope2026-11-14
bizxdev.github.comNot in the scope2026-11-14
bizzylizzybooks.github.comNot in the scope2026-11-14
bj.github.comNot in the scope2026-11-14
bjarneh.github.comNot in the scope2026-11-14
bjartek.github.comNot in the scope2026-11-14
bjason.github.comNot in the scope2026-11-14
bjeanes.github.comNot in the scope2026-11-14
bjodah.github.comNot in the scope2026-11-14
bjori.github.comNot in the scope2026-11-14
bjorn.github.comNot in the scope2026-11-14
bjornarneson.github.comNot in the scope2026-11-14
bjorngylling.github.comNot in the scope2026-11-14
bjornharrtell.github.comNot in the scope2026-11-14
bjornstar.github.comNot in the scope2026-11-14
bjorskog.github.comNot in the scope2026-11-14
bjorsq.github.comNot in the scope2026-11-14
bjreath.github.comNot in the scope2026-11-14
bjtitus.github.comNot in the scope2026-11-14
bjtlyc.github.comNot in the scope2026-11-14
transport.cxf.rsimulator.bjuvensjo.github.comNot in the scope2026-11-14
example.transport.cxf.rsimulator.bjuvensjo.github.comNot in the scope2026-11-14
bjzhang.github.comNot in the scope2026-11-14
bk.github.comNot in the scope2026-11-14
bk01.github.comNot in the scope2026-11-14
bk1.github.comNot in the scope2026-11-14
bk2.github.comNot in the scope2026-11-14
bk3.github.comNot in the scope2026-11-14
bkase.github.comNot in the scope2026-11-14
bkayser.github.comNot in the scope2026-11-14
bkayser-antivirus.github.comNot in the scope2026-11-14
bkendall.github.comNot in the scope2026-11-14
bkerley.github.comNot in the scope2026-11-14
bketelsen.github.comNot in the scope2026-11-14
bkether.github.comNot in the scope2026-11-14
bkhatr.github.comNot in the scope2026-11-14
bkidney.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.