Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.com#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
bkirkby.github.comNot in the scope2026-11-14
bkkyddfr.github.comNot in the scope2026-11-14
bklippstein.github.comNot in the scope2026-11-14
bkm.github.comNot in the scope2026-11-14
bkong08.github.comNot in the scope2026-11-14
bkonkle.github.comNot in the scope2026-11-14
bkp.github.comNot in the scope2026-11-14
bkrsta.github.comNot in the scope2026-11-14
bks.github.comNot in the scope2026-11-14
bktmkd.github.comNot in the scope2026-11-14
bkvirendra.github.comNot in the scope2026-11-14
bkw.github.comNot in the scope2026-11-14
bl.github.comNot in the scope2026-11-14
bl4k.github.comNot in the scope2026-11-14
bla.github.comNot in the scope2026-11-14
blabla.github.comNot in the scope2026-11-14
blabluble.github.comNot in the scope2026-11-14
black.github.comNot in the scope2026-11-14
www.black.github.comNot in the scope2026-11-14
blackandwhite.github.comNot in the scope2026-11-14
blackberry.github.comNot in the scope2026-11-14
blackberry-community.github.comNot in the scope2026-11-14
blackberry-communitysigmavirus24.github.comNot in the scope2026-11-14
blackberry-webworks.github.comNot in the scope2026-11-14
www.blackberry.github.comNot in the scope2026-11-14
blackbird.github.comNot in the scope2026-11-14
blackboard.github.comNot in the scope2026-11-14
blackbox.github.comNot in the scope2026-11-14
blackcat.github.comNot in the scope2026-11-14
blackcats4567.github.comNot in the scope2026-11-14
blackchip-org.github.comNot in the scope2026-11-14
blackchip-orgsigmavirus.github.comNot in the scope2026-11-14
blackhole.github.comNot in the scope2026-11-14
blackholesigmavirus24.github.comNot in the scope2026-11-14
blackjack.github.comNot in the scope2026-11-14
blackjid.github.comNot in the scope2026-11-14
blackjk3.github.comNot in the scope2026-11-14
blacklabel.github.comNot in the scope2026-11-14
blacklist.github.comNot in the scope2026-11-14
blacklodgestudios.github.comNot in the scope2026-11-14
blackmajic.github.comNot in the scope2026-11-14
blackpearl.github.comNot in the scope2026-11-14
blackscorp.github.comNot in the scope2026-11-14
blacksun.github.comNot in the scope2026-11-14
blacktiph.github.comNot in the scope2026-11-14
blackwhale.github.comNot in the scope2026-11-14
blackwinter.github.comNot in the scope2026-11-14
blackwinter-attic.github.comNot in the scope2026-11-14
blacky.github.comNot in the scope2026-11-14
blade.github.comNot in the scope2026-11-14
blade1.github.comNot in the scope2026-11-14
blade10.github.comNot in the scope2026-11-14
blade11.github.comNot in the scope2026-11-14
blade13.github.comNot in the scope2026-11-14
blade2.github.comNot in the scope2026-11-14
blade3.github.comNot in the scope2026-11-14
blade4.github.comNot in the scope2026-11-14
blade5.github.comNot in the scope2026-11-14
blade6.github.comNot in the scope2026-11-14
blade7.github.comNot in the scope2026-11-14
blade7-antivirus.github.comNot in the scope2026-11-14
blade8.github.comNot in the scope2026-11-14
blade9.github.comNot in the scope2026-11-14
blah.github.comNot in the scope2026-11-14
blaine.github.comNot in the scope2026-11-14
blaiprat.github.comNot in the scope2026-11-14
blairbonnett.github.comNot in the scope2026-11-14
blairc.github.comNot in the scope2026-11-14
blairmacintyre.github.comNot in the scope2026-11-14
blaix.github.comNot in the scope2026-11-14
blake.github.comNot in the scope2026-11-14
blake-education.github.comNot in the scope2026-11-14
blake8086.github.comNot in the scope2026-11-14
blakeshall.github.comNot in the scope2026-11-14
www.blakeshall.github.comNot in the scope2026-11-14
blakesmith.github.comNot in the scope2026-11-14
blakevanlan.github.comNot in the scope2026-11-14
blambeau.github.comNot in the scope2026-11-14
blancas.github.comNot in the scope2026-11-14
blanco.github.comNot in the scope2026-11-14
blancovi.github.comNot in the scope2026-11-14
blancovpn.github.comNot in the scope2026-11-14
blankego.github.comNot in the scope2026-11-14
blankor.github.comNot in the scope2026-11-14
blanq.github.comNot in the scope2026-11-14
blaskovic.github.comNot in the scope2026-11-14
blaskyy.github.comNot in the scope2026-11-14
blast.github.comNot in the scope2026-11-14
blastbootb0z.github.comNot in the scope2026-11-14
blaster.github.comNot in the scope2026-11-14
blastmann.github.comNot in the scope2026-11-14
blat.github.comNot in the scope2026-11-14
blattlhof.github.comNot in the scope2026-11-14
blatyo.github.comNot in the scope2026-11-14
blatyo-antivirus.github.comNot in the scope2026-11-14
blaujames.github.comNot in the scope2026-11-14
blaxter.github.comNot in the scope2026-11-14
blaze.github.comNot in the scope2026-11-14
blazeeboy.github.comNot in the scope2026-11-14
blazegraph.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.