Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.com#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
www.6.github.comNot in the scope2026-11-14
60.github.comNot in the scope2026-11-14
qn0a5.6064q.github.comNot in the scope2026-11-14
61.github.comNot in the scope2026-11-14
zfavg.61ibi.github.comNot in the scope2026-11-14
62.github.comNot in the scope2026-11-14
6220119.github.comNot in the scope2026-11-14
62374f9123aed1.github.comNot in the scope2026-11-14
63.github.comNot in the scope2026-11-14
0xsym.634w8.github.comNot in the scope2026-11-14
64.github.comNot in the scope2026-11-14
64notes.github.comNot in the scope2026-11-14
65.github.comNot in the scope2026-11-14
65-team.github.comNot in the scope2026-11-14
66.github.comNot in the scope2026-11-14
666.github.comNot in the scope2026-11-14
666av.github.comNot in the scope2026-11-14
mail.666av.github.commailNot in the scope2026-11-14
67.github.comNot in the scope2026-11-14
68.github.comNot in the scope2026-11-14
68245408.github.comNot in the scope2026-11-14
69.github.comNot in the scope2026-11-14
fz2ns.6ac95.github.comNot in the scope2026-11-14
6berb-antivirus.github.comNot in the scope2026-11-14
dq33i.6buqm.github.comNot in the scope2026-11-14
6chen.github.comNot in the scope2026-11-14
6pac.github.comNot in the scope2026-11-14
t2vmz.6rlw0.github.comNot in the scope2026-11-14
7sq3o.6t6xw.github.comNot in the scope2026-11-14
r0alp.6w2gy.github.comNot in the scope2026-11-14
3.0.6wet-boew.github.comNot in the scope2026-11-14
6wings.github.comNot in the scope2026-11-14
7.github.comNot in the scope2026-11-14
7-covid19.github.comNot in the scope2026-11-14
covid19.7.github.comNot in the scope2026-11-14
sigmavirus24.7.github.comNot in the scope2026-11-14
virus.7.github.comNot in the scope2026-11-14
www.7.github.comNot in the scope2026-11-14
70.github.comNot in the scope2026-11-14
71.github.comNot in the scope2026-11-14
71104.github.comNot in the scope2026-11-14
mhljs.71f62.github.comNot in the scope2026-11-14
72.github.comNot in the scope2026-11-14
afp1g.72j1j.github.comNot in the scope2026-11-14
72lions.github.comNot in the scope2026-11-14
crh3e.72zpa.github.comNot in the scope2026-11-14
73.github.comNot in the scope2026-11-14
73rhodes.github.comNot in the scope2026-11-14
74.github.comNot in the scope2026-11-14
149.28.12.74.github.comNot in the scope2026-11-14
740lee.github.comNot in the scope2026-11-14
75.github.comNot in the scope2026-11-14
76.github.comNot in the scope2026-11-14
77.github.comNot in the scope2026-11-14
777.github.comNot in the scope2026-11-14
77b0221c.github.comNot in the scope2026-11-14
77p2p.github.comNot in the scope2026-11-14
mail.77p2p.github.commailNot in the scope2026-11-14
e6b0w.77yoe.github.comNot in the scope2026-11-14
79.github.comNot in the scope2026-11-14
7b07d249.github.comNot in the scope2026-11-14
7b5a.github.comNot in the scope2026-11-14
7bp.github.comNot in the scope2026-11-14
7digital.github.comNot in the scope2026-11-14
7even.github.comNot in the scope2026-11-14
xqmaz.7h31d.github.comNot in the scope2026-11-14
7h3ram.github.comNot in the scope2026-11-14
wi93y.7hnqt.github.comNot in the scope2026-11-14
7imix.github.comNot in the scope2026-11-14
7ingwang.github.comNot in the scope2026-11-14
mke0y.7kh3h.github.comNot in the scope2026-11-14
7lemon.github.comNot in the scope2026-11-14
hoy8c.7msgi.github.comNot in the scope2026-11-14
7sharp9.github.comNot in the scope2026-11-14
sketches.7sharp9.github.comNot in the scope2026-11-14
7sigmavirus24.github.comNot in the scope2026-11-14
7to.github.comNot in the scope2026-11-14
8.github.comNot in the scope2026-11-14
8-covid19.github.comNot in the scope2026-11-14
antivirus.8.github.comNot in the scope2026-11-14
berb-antivirus.8.github.comNot in the scope2026-11-14
covid19.8.github.comNot in the scope2026-11-14
80.github.comNot in the scope2026-11-14
81.github.comNot in the scope2026-11-14
7bwel.83kyz.github.comNot in the scope2026-11-14
8591.github.comNot in the scope2026-11-14
mail.8591.github.commailNot in the scope2026-11-14
85cc.github.comNot in the scope2026-11-14
mail.85cc.github.commailNot in the scope2026-11-14
85st.github.comNot in the scope2026-11-14
mail.85st.github.commailNot in the scope2026-11-14
85x14.github.comNot in the scope2026-11-14
86.github.comNot in the scope2026-11-14
z3vnj.86028.github.comNot in the scope2026-11-14
87.github.comNot in the scope2026-11-14
88.github.comNot in the scope2026-11-14
88b7eae1.github.comNot in the scope2026-11-14
88cfb01c.github.comNot in the scope2026-11-14
8aoxz.88s1l.github.comNot in the scope2026-11-14
89.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in