Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on Github#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.com#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
virus.4.github.comNot in the scope2026-11-14
www.4.github.comNot in the scope2026-11-14
40.github.comNot in the scope2026-11-14
4031651.github.comNot in the scope2026-11-14
404.github.comNot in the scope2026-11-14
404bdcfc.github.comNot in the scope2026-11-14
40ants.github.comNot in the scope2026-11-14
41.github.comNot in the scope2026-11-14
42.github.comNot in the scope2026-11-14
mbtth.42f06.github.comNot in the scope2026-11-14
42learner.github.comNot in the scope2026-11-14
42qu.github.comNot in the scope2026-11-14
42thcoder.github.comNot in the scope2026-11-14
43.github.comNot in the scope2026-11-14
43081j.github.comNot in the scope2026-11-14
4383.github.comNot in the scope2026-11-14
44.github.comNot in the scope2026-11-14
443.github.comNot in the scope2026-11-14
jasonmp85.443.github.comNot in the scope2026-11-14
45.github.comNot in the scope2026-11-14
123.456.github.comNot in the scope2026-11-14
46.github.comNot in the scope2026-11-14
47.github.comNot in the scope2026-11-14
0.47b0z.github.comNot in the scope2026-11-14
vv7o5.47eia.github.comNot in the scope2026-11-14
48.github.comNot in the scope2026-11-14
48hourapps.github.comNot in the scope2026-11-14
49.github.comNot in the scope2026-11-14
49mapi.github.comNot in the scope2026-11-14
49mpi.github.comNot in the scope2026-11-14
u6me8.4bjqm.github.comNot in the scope2026-11-14
4dispel.github.comNot in the scope2026-11-14
4drops.github.comNot in the scope2026-11-14
4f5a4869.github.comNot in the scope2026-11-14
ttdma.4fxc6.github.comNot in the scope2026-11-14
a7p8g.4g4q7.github.comNot in the scope2026-11-14
4gray.github.comNot in the scope2026-11-14
4ian.github.comNot in the scope2026-11-14
4impact.github.comNot in the scope2026-11-14
4ndr0666.github.comNot in the scope2026-11-14
4oxmile.github.comNot in the scope2026-11-14
4pcbr.github.comNot in the scope2026-11-14
4poc.github.comNot in the scope2026-11-14
y79jx.4rfty.github.comNot in the scope2026-11-14
4rknova.github.comNot in the scope2026-11-14
npj82.4sers.github.comNot in the scope2026-11-14
4simple.github.comNot in the scope2026-11-14
cufa4.4v8jx.github.comNot in the scope2026-11-14
4vanger.github.comNot in the scope2026-11-14
4webcre8r.github.comNot in the scope2026-11-14
4what.github.comNot in the scope2026-11-14
5.github.comNot in the scope2026-11-14
antivirus.5.github.comNot in the scope2026-11-14
covid19.5.github.comNot in the scope2026-11-14
sigmavirus24.5.github.comNot in the scope2026-11-14
virus.5.github.comNot in the scope2026-11-14
www.5.github.comNot in the scope2026-11-14
50.github.comNot in the scope2026-11-14
500px.github.comNot in the scope2026-11-14
50cubes.github.comNot in the scope2026-11-14
51.github.comNot in the scope2026-11-14
51isoft.github.comNot in the scope2026-11-14
51offer.github.comNot in the scope2026-11-14
51snippets.github.comNot in the scope2026-11-14
52.github.comNot in the scope2026-11-14
5278.github.comNot in the scope2026-11-14
mail.5278.github.commailNot in the scope2026-11-14
52north.github.comNot in the scope2026-11-14
zhanghaiyan4.52psyger.github.comNot in the scope2026-11-14
53.github.comNot in the scope2026-11-14
5310.github.comNot in the scope2026-11-14
5374hashimoto.github.comNot in the scope2026-11-14
54.github.comNot in the scope2026-11-14
55.github.comNot in the scope2026-11-14
5509.github.comNot in the scope2026-11-14
56.github.comNot in the scope2026-11-14
56kcloud.github.comNot in the scope2026-11-14
57.github.comNot in the scope2026-11-14
58.github.comNot in the scope2026-11-14
58db792c.github.comNot in the scope2026-11-14
59.github.comNot in the scope2026-11-14
n6qum.59yyj.github.comNot in the scope2026-11-14
5covid19.github.comNot in the scope2026-11-14
0coxi.5fadt.github.comNot in the scope2026-11-14
5fpro.github.comNot in the scope2026-11-14
5l-hermes01.github.comNot in the scope2026-11-14
5minds.github.comNot in the scope2026-11-14
5p2p.github.comNot in the scope2026-11-14
2r3r9.5pkw2.github.comNot in the scope2026-11-14
ci0wu.5uul0.github.comNot in the scope2026-11-14
phork.5w0g5.github.comNot in the scope2026-11-14
bwequ.5y5d0.github.comNot in the scope2026-11-14
6.github.comNot in the scope2026-11-14
6-covid19.github.comNot in the scope2026-11-14
ghes-3.6-diff-to-api.github.comapiNot in the scope2026-11-14
types-openapi-ghes-3.6-diff-to-api.github.comapiNot in the scope2026-11-14
6-virus.github.comNot in the scope2026-11-14
covid19.6.github.comNot in the scope2026-11-14
sigmavirus24.6.github.comNot in the scope2026-11-14
virus.6.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in