Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.com#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
breccan.github.comNot in the scope2026-11-14
brecke.github.comNot in the scope2026-11-14
breckinloggins.github.comNot in the scope2026-11-14
breethomas.github.comNot in the scope2026-11-14
breeze.github.comNot in the scope2026-11-14
breezestars.github.comNot in the scope2026-11-14
breezy.github.comNot in the scope2026-11-14
bref.github.comNot in the scope2026-11-14
breily.github.comNot in the scope2026-11-14
brejep.github.comNot in the scope2026-11-14
bremensa.github.comNot in the scope2026-11-14
brendan.github.comNot in the scope2026-11-14
brendanballon.github.comNot in the scope2026-11-14
brendaneich.github.comNot in the scope2026-11-14
brendanhay.github.comNot in the scope2026-11-14
brendanjerwin.github.comNot in the scope2026-11-14
brendanlim.github.comNot in the scope2026-11-14
brendongouveia.github.comNot in the scope2026-11-14
brendonh.github.comNot in the scope2026-11-14
brennana.github.comNot in the scope2026-11-14
brennandunn.github.comNot in the scope2026-11-14
brennanmke.github.comNot in the scope2026-11-14
brentertz.github.comNot in the scope2026-11-14
brentirwin.github.comNot in the scope2026-11-14
brentmc79.github.comNot in the scope2026-11-14
brentp.github.comNot in the scope2026-11-14
brentvatne.github.comNot in the scope2026-11-14
brentw.github.comNot in the scope2026-11-14
brest.github.comNot in the scope2026-11-14
bretkikehara.github.comNot in the scope2026-11-14
bretonics.github.comNot in the scope2026-11-14
brett.github.comNot in the scope2026-11-14
brettchalupa.github.comNot in the scope2026-11-14
brettcvz.github.comNot in the scope2026-11-14
brettdanger.github.comNot in the scope2026-11-14
brettg.github.comNot in the scope2026-11-14
bretthardin.github.comNot in the scope2026-11-14
brettohland.github.comNot in the scope2026-11-14
brettstimmerman.github.comNot in the scope2026-11-14
brettstimmmerman.github.comNot in the scope2026-11-14
brettswift.github.comNot in the scope2026-11-14
brettviren.github.comNot in the scope2026-11-14
breunigs.github.comNot in the scope2026-11-14
brew.github.comNot in the scope2026-11-14
brewdawg.github.comNot in the scope2026-11-14
brewerhimself.github.comNot in the scope2026-11-14
brewlabs.github.comNot in the scope2026-11-14
brewpony.github.comNot in the scope2026-11-14
brewster.github.comNot in the scope2026-11-14
breyed.github.comNot in the scope2026-11-14
brheath.github.comNot in the scope2026-11-14
brian.github.comNot in the scope2026-11-14
brianaguirre.github.comNot in the scope2026-11-14
brianarn.github.comNot in the scope2026-11-14
brianbunker.github.comNot in the scope2026-11-14
brianc.github.comNot in the scope2026-11-14
briancain.github.comNot in the scope2026-11-14
brianchirls.github.comNot in the scope2026-11-14
briancoyner.github.comNot in the scope2026-11-14
briancseymour.github.comNot in the scope2026-11-14
briandaviddavidson.github.comNot in the scope2026-11-14
briandoll.github.comNot in the scope2026-11-14
briandorsey.github.comNot in the scope2026-11-14
briandunnington.github.comNot in the scope2026-11-14
briangraves.github.comNot in the scope2026-11-14
brianhaveri.github.comNot in the scope2026-11-14
brianhsu.github.comNot in the scope2026-11-14
brianjlandau.github.comNot in the scope2026-11-14
brianjo.github.comNot in the scope2026-11-14
brianking.github.comNot in the scope2026-11-14
brianleroux.github.comNot in the scope2026-11-14
brianly.github.comNot in the scope2026-11-14
brianm.github.comNot in the scope2026-11-14
brianmaierjr.github.comNot in the scope2026-11-14
brianmhunt.github.comNot in the scope2026-11-14
brianmingus.github.comNot in the scope2026-11-14
brianpcoffey.github.comNot in the scope2026-11-14
brianpeiris.github.comNot in the scope2026-11-14
brianray.github.comNot in the scope2026-11-14
brianru.github.comNot in the scope2026-11-14
brianshumate.github.comNot in the scope2026-11-14
briansoule.github.comNot in the scope2026-11-14
briantemple.github.comNot in the scope2026-11-14
briantimm.github.comNot in the scope2026-11-14
brianto.github.comNot in the scope2026-11-14
briantoth.github.comNot in the scope2026-11-14
brianwigfield.github.comNot in the scope2026-11-14
briatte.github.comNot in the scope2026-11-14
bricabraque.github.comNot in the scope2026-11-14
bricef.github.comNot in the scope2026-11-14
bricemason.github.comNot in the scope2026-11-14
bricke.github.comNot in the scope2026-11-14
brickhu.github.comNot in the scope2026-11-14
brickviking.github.comNot in the scope2026-11-14
bricooke.github.comNot in the scope2026-11-14
bridadan.github.comNot in the scope2026-11-14
bridge.github.comNot in the scope2026-11-14
www.bridge.github.comNot in the scope2026-11-14
brief.github.comNot in the scope2026-11-14
bright.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.