Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
citadel.github.comNot in the scope2026-11-14
citation-style-editor.github.comNot in the scope2026-11-14
citation-style-editor-antivirus.github.comNot in the scope2026-11-14
citedx.github.comNot in the scope2026-11-14
citibank.github.comNot in the scope2026-11-14
cities.github.comNot in the scope2026-11-14
citizen428.github.comNot in the scope2026-11-14
citizero.github.comNot in the scope2026-11-14
citrix.github.comvpnNot in the scope2026-11-14
citrix1.github.comvpnNot in the scope2026-11-14
citrix2.github.comvpnNot in the scope2026-11-14
citroen.github.comNot in the scope2026-11-14
citron.github.comNot in the scope2026-11-14
citrus.github.comNot in the scope2026-11-14
citruspi.github.comNot in the scope2026-11-14
city.github.comNot in the scope2026-11-14
www.city.github.comNot in the scope2026-11-14
city41.github.comNot in the scope2026-11-14
citylive.github.comNot in the scope2026-11-14
cityofgreatersudbury.github.comNot in the scope2026-11-14
cityofphiladelphia.github.comNot in the scope2026-11-14
citytracking.github.comNot in the scope2026-11-14
ciudadanointeligente.github.comNot in the scope2026-11-14
ciupicri.github.comNot in the scope2026-11-14
civascu.github.comNot in the scope2026-11-14
civicdb.github.comNot in the scope2026-11-14
civictechwr.github.comNot in the scope2026-11-14
civil.github.comNot in the scope2026-11-14
cj.github.comNot in the scope2026-11-14
cjadvertising.github.comNot in the scope2026-11-14
cjauvin.github.comNot in the scope2026-11-14
cjbrock.github.comNot in the scope2026-11-14
cjc.github.comNot in the scope2026-11-14
cjcliffe.github.comNot in the scope2026-11-14
cjdb.github.comNot in the scope2026-11-14
cjdev.github.comNot in the scope2026-11-14
cjdsie.github.comNot in the scope2026-11-14
cjerdonek.github.comNot in the scope2026-11-14
cjfuller.github.comNot in the scope2026-11-14
cjgammon.github.comNot in the scope2026-11-14
cjh608.github.comNot in the scope2026-11-14
cjheath.github.comNot in the scope2026-11-14
bouncer.cjheppell.github.comNot in the scope2026-11-14
finalizer.tcpservice.bouncer.cjheppell.github.comNot in the scope2026-11-14
tcpservices.bouncer.cjheppell.github.comNot in the scope2026-11-14
cjj9812.github.comNot in the scope2026-11-14
cjjer.github.comNot in the scope2026-11-14
cjlucas.github.comNot in the scope2026-11-14
cjoh.github.comNot in the scope2026-11-14
cjolif.github.comNot in the scope2026-11-14
cjpl.github.comNot in the scope2026-11-14
cjreiner.github.comNot in the scope2026-11-14
cjs8487.github.comNot in the scope2026-11-14
cjsharp1.github.comNot in the scope2026-11-14
cjc6m.cjsmq.github.comNot in the scope2026-11-14
cjwoodward.github.comNot in the scope2026-11-14
cjxgm.github.comNot in the scope2026-11-14
cjxy.github.comNot in the scope2026-11-14
cjxy-cdnantivirus.github.comNot in the scope2026-11-14
cjy.github.comNot in the scope2026-11-14
ck.github.comNot in the scope2026-11-14
ckaestne.github.comNot in the scope2026-11-14
ckarea.github.comNot in the scope2026-11-14
mail.ckarea.github.commailNot in the scope2026-11-14
cketti.github.comNot in the scope2026-11-14
ckhung.github.comNot in the scope2026-11-14
ckihneman.github.comNot in the scope2026-11-14
ckimrie.github.comNot in the scope2026-11-14
ckirkendall.github.comNot in the scope2026-11-14
ckknight.github.comNot in the scope2026-11-14
ckloote.github.comNot in the scope2026-11-14
cknan.github.comNot in the scope2026-11-14
ckrack.github.comNot in the scope2026-11-14
ckulla.github.comNot in the scope2026-11-14
ckunte.github.comNot in the scope2026-11-14
ckw-mod.github.comNot in the scope2026-11-14
ckwalsh.github.comNot in the scope2026-11-14
cl.github.comNot in the scope2026-11-14
www.cl.github.comNot in the scope2026-11-14
cl1.github.comNot in the scope2026-11-14
cla.github.comNot in the scope2026-11-14
clab.github.comNot in the scope2026-11-14
clabot.github.comNot in the scope2026-11-14
clack.github.comNot in the scope2026-11-14
claeusdev.github.comNot in the scope2026-11-14
claims.github.comNot in the scope2026-11-14
claird.github.comNot in the scope2026-11-14
claire.github.comNot in the scope2026-11-14
clalancette.github.comNot in the scope2026-11-14
clan.github.comNot in the scope2026-11-14
clandence.github.comNot in the scope2026-11-14
clang-omp.github.comNot in the scope2026-11-14
clans.github.comNot in the scope2026-11-14
clara.github.comNot in the scope2026-11-14
clare.github.comNot in the scope2026-11-14
clarete.github.comNot in the scope2026-11-14
claria-ai.github.comNot in the scope2026-11-14
clarity.github.comNot in the scope2026-11-14
clark.github.comNot in the scope2026-11-14
clark-kent.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.