Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
charlieroberts.github.comNot in the scope2026-11-14
charlieshao5189.github.comNot in the scope2026-11-14
charliesigmavirus.github.comNot in the scope2026-11-14
charliesome.github.comNot in the scope2026-11-14
charlietanksley.github.comNot in the scope2026-11-14
charlotte.github.comNot in the scope2026-11-14
charlotte-ruby.github.comNot in the scope2026-11-14
charlycoste.github.comNot in the scope2026-11-14
charm.github.comNot in the scope2026-11-14
charmed.github.comNot in the scope2026-11-14
charmeleon.github.comNot in the scope2026-11-14
charmyin.github.comNot in the scope2026-11-14
charnugagoo.github.comNot in the scope2026-11-14
charon.github.comNot in the scope2026-11-14
charstarstars.github.comNot in the scope2026-11-14
chartbeat.github.comNot in the scope2026-11-14
charts.github.comNot in the scope2026-11-14
charuru.github.comNot in the scope2026-11-14
charzendat.github.comNot in the scope2026-11-14
chase.github.comNot in the scope2026-11-14
chase-seibert.github.comNot in the scope2026-11-14
chase4926.github.comNot in the scope2026-11-14
www.chaseleffers.github.comNot in the scope2026-11-14
chassidysimonin.github.comNot in the scope2026-11-14
chastell.github.comNot in the scope2026-11-14
chat.github.comNot in the scope2026-11-14
chat-charisma.github.comNot in the scope2026-11-14
autoconfig.chat.github.comNot in the scope2026-11-14
autodiscover.chat.github.commailNot in the scope2026-11-14
webdisk.chat.github.comNot in the scope2026-11-14
www.chat.github.comNot in the scope2026-11-14
chat1.github.comNot in the scope2026-11-14
chat2.github.comNot in the scope2026-11-14
chat4.github.comNot in the scope2026-11-14
chatbox.github.comNot in the scope2026-11-14
chateautech.github.comNot in the scope2026-11-14
chatgris.github.comNot in the scope2026-11-14
chathub.github.comNot in the scope2026-11-14
chathuras.github.comNot in the scope2026-11-14
chatswood.github.comNot in the scope2026-11-14
chatter.github.comNot in the scope2026-11-14
chattered.github.comNot in the scope2026-11-14
chatting.github.comNot in the scope2026-11-14
chaubeau.github.comNot in the scope2026-11-14
chazmcgarvey.github.comNot in the scope2026-11-14
chbrown.github.comNot in the scope2026-11-14
chchch.github.comNot in the scope2026-11-14
chchwy.github.comNot in the scope2026-11-14
chchyu.github.comNot in the scope2026-11-14
chdoig.github.comNot in the scope2026-11-14
che.github.comNot in the scope2026-11-14
www.che.github.comNot in the scope2026-11-14
cheap.github.comNot in the scope2026-11-14
cheboksary.github.comNot in the scope2026-11-14
checcoli.github.comNot in the scope2026-11-14
check.github.comNot in the scope2026-11-14
check-for-api.github.comapiNot in the scope2026-11-14
checkmate.github.comNot in the scope2026-11-14
checkout.github.comNot in the scope2026-11-14
checkpoint.github.comNot in the scope2026-11-14
checkpoint-sigmavirus.github.comNot in the scope2026-11-14
checkpointantivirus.github.comNot in the scope2026-11-14
checkraiser.github.comNot in the scope2026-11-14
checkrelay.github.comNot in the scope2026-11-14
checksrv.github.comNot in the scope2026-11-14
cheeaun.github.comNot in the scope2026-11-14
cheef.github.comNot in the scope2026-11-14
cheekit.github.comNot in the scope2026-11-14
cheene.github.comNot in the scope2026-11-14
cheeplusplus.github.comNot in the scope2026-11-14
cheerful.github.comNot in the scope2026-11-14
cheers.github.comNot in the scope2026-11-14
cheese.github.comNot in the scope2026-11-14
cheetah.github.comNot in the scope2026-11-14
cheeyeo.github.comNot in the scope2026-11-14
chef.github.comNot in the scope2026-11-14
chef-community.github.comNot in the scope2026-11-14
chef-virus.github.comNot in the scope2026-11-14
covid19.chef.github.comNot in the scope2026-11-14
virus.chef.github.comNot in the scope2026-11-14
www.chef.github.comNot in the scope2026-11-14
chefcovid19.github.comNot in the scope2026-11-14
chege99.github.comNot in the scope2026-11-14
cheggeng.github.comNot in the scope2026-11-14
chel.github.comNot in the scope2026-11-14
chelm.github.comNot in the scope2026-11-14
chelsea.github.comNot in the scope2026-11-14
chelyabinsk.github.comNot in the scope2026-11-14
www.chelyabinsk.github.comNot in the scope2026-11-14
chem.github.comNot in the scope2026-11-14
www.chem.github.comNot in the scope2026-11-14
chemination.github.comNot in the scope2026-11-14
chemist.github.comNot in the scope2026-11-14
chemistry.github.comNot in the scope2026-11-14
chemlab.github.comNot in the scope2026-11-14
chen.github.comNot in the scope2026-11-14
chen0040.github.comNot in the scope2026-11-14
chenbojian.github.comNot in the scope2026-11-14
chencan.github.comNot in the scope2026-11-14
chence.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.