Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
chingc.github.comNot in the scope2026-11-14
chinhodado.github.comNot in the scope2026-11-14
chinmaygarde.github.comNot in the scope2026-11-14
chinmaylokesh.github.comNot in the scope2026-11-14
chino.github.comNot in the scope2026-11-14
chinstorff.github.comNot in the scope2026-11-14
chinux23.github.comNot in the scope2026-11-14
chip.github.comNot in the scope2026-11-14
chip-rosenthal.github.comNot in the scope2026-11-14
chipbell4.github.comNot in the scope2026-11-14
chipchilders.github.comNot in the scope2026-11-14
chipersoft.github.comNot in the scope2026-11-14
chipmunk-rb.github.comNot in the scope2026-11-14
chipx86.github.comNot in the scope2026-11-14
chirags.github.comNot in the scope2026-11-14
chirayu.github.comNot in the scope2026-11-14
chirp.github.comNot in the scope2026-11-14
chirpradio.github.comNot in the scope2026-11-14
chitchat.github.comNot in the scope2026-11-14
chiuki.github.comNot in the scope2026-11-14
chiva.github.comNot in the scope2026-11-14
chkal.github.comNot in the scope2026-11-14
chloe.github.comNot in the scope2026-11-14
chlrandybear.github.comNot in the scope2026-11-14
chm.github.comNot in the scope2026-11-14
chmeee.github.comNot in the scope2026-11-14
chmille4.github.comNot in the scope2026-11-14
chneukirchen.github.comNot in the scope2026-11-14
cho.github.comNot in the scope2026-11-14
cho45.github.comNot in the scope2026-11-14
chocks.github.comNot in the scope2026-11-14
chocolate.github.comNot in the scope2026-11-14
chocolate-coin.github.comNot in the scope2026-11-14
chocolatey.github.comNot in the scope2026-11-14
chocolatina.github.comNot in the scope2026-11-14
choffee.github.comNot in the scope2026-11-14
chokim.github.comNot in the scope2026-11-14
choko1229.github.comNot in the scope2026-11-14
cholmes.github.comNot in the scope2026-11-14
chonton.github.comNot in the scope2026-11-14
chooie.github.comNot in the scope2026-11-14
chookapp.github.comNot in the scope2026-11-14
choonster.github.comNot in the scope2026-11-14
choose.github.comNot in the scope2026-11-14
chopin.github.comNot in the scope2026-11-14
chopins.github.comNot in the scope2026-11-14
choplin.github.comNot in the scope2026-11-14
chorman0773.github.comNot in the scope2026-11-14
chorola.github.comNot in the scope2026-11-14
chou.github.comNot in the scope2026-11-14
chouchou.github.comNot in the scope2026-11-14
chouser.github.comNot in the scope2026-11-14
chowse.github.comNot in the scope2026-11-14
chpweb.github.comNot in the scope2026-11-14
chripede.github.comNot in the scope2026-11-14
chris.github.comNot in the scope2026-11-14
chris-79.github.comNot in the scope2026-11-14
chris-horner.github.comNot in the scope2026-11-14
chris-taylor.github.comNot in the scope2026-11-14
chris-vaszauskas.github.comNot in the scope2026-11-14
chrisa.github.comNot in the scope2026-11-14
chrisabrams.github.comNot in the scope2026-11-14
chrisann.github.comNot in the scope2026-11-14
dug.chrisarcand.github.comNot in the scope2026-11-14
chrisbaglieri.github.comNot in the scope2026-11-14
chrisbailey-za.github.comNot in the scope2026-11-14
chrisbarr.github.comNot in the scope2026-11-14
chrisbateman.github.comNot in the scope2026-11-14
chrisblackburn.github.comNot in the scope2026-11-14
chrisbra.github.comNot in the scope2026-11-14
chrisbreiding.github.comNot in the scope2026-11-14
chrisbu.github.comNot in the scope2026-11-14
chrisbuchholz.github.comNot in the scope2026-11-14
chriscinelli.github.comNot in the scope2026-11-14
chriscook.github.comNot in the scope2026-11-14
chriscool.github.comNot in the scope2026-11-14
chriscoyier.github.comNot in the scope2026-11-14
chrisdavidmills.github.comNot in the scope2026-11-14
chrisdickinson.github.comNot in the scope2026-11-14
chrisdinn.github.comNot in the scope2026-11-14
chrisedmo.github.comNot in the scope2026-11-14
chrisekelley.github.comNot in the scope2026-11-14
chriseldredge.github.comNot in the scope2026-11-14
chriseppstein.github.comNot in the scope2026-11-14
chriseppsteinsigmavirus24.github.comNot in the scope2026-11-14
chrisfarms.github.comNot in the scope2026-11-14
chrisfjones.github.comNot in the scope2026-11-14
chrisforbes.github.comNot in the scope2026-11-14
chrisfrank.github.comNot in the scope2026-11-14
chrisgastrell.github.comNot in the scope2026-11-14
chrisglass.github.comNot in the scope2026-11-14
chrishamant.github.comNot in the scope2026-11-14
chrishan.github.comNot in the scope2026-11-14
chrisharrington.github.comNot in the scope2026-11-14
chrishoca.github.comNot in the scope2026-11-14
chrishulbert.github.comNot in the scope2026-11-14
chrishyle.github.comNot in the scope2026-11-14
chrisichris.github.comNot in the scope2026-11-14
chrisirhc.github.comNot in the scope2026-11-14
chrisjacob.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.