Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
media.classroom.github.comNot in the scope2026-11-14
metrics.classroom.github.commonitoringNot in the scope2026-11-14
mobile.classroom.github.comNot in the scope2026-11-14
mobile-rest.classroom.github.comNot in the scope2026-11-14
mongodb.classroom.github.comdataNot in the scope2026-11-14
mssql.classroom.github.comNot in the scope2026-11-14
mta-sts.classroom.github.comNot in the scope2026-11-14
mx.classroom.github.commailNot in the scope2026-11-14
mx01.classroom.github.comNot in the scope2026-11-14
mx1.classroom.github.comNot in the scope2026-11-14
news.classroom.github.comNot in the scope2026-11-14
nginx-newest.classroom.github.comNot in the scope2026-11-14
nginx-newest1.classroom.github.comNot in the scope2026-11-14
nodejs-dev.classroom.github.comdevNot in the scope2026-11-14
ns.classroom.github.comNot in the scope2026-11-14
ns1.classroom.github.comNot in the scope2026-11-14
ns4.classroom.github.comNot in the scope2026-11-14
office.classroom.github.comNot in the scope2026-11-14
okta.classroom.github.comauthNot in the scope2026-11-14
outlook.classroom.github.comNot in the scope2026-11-14
owa.classroom.github.commailNot in the scope2026-11-14
pop.classroom.github.comNot in the scope2026-11-14
pop3.classroom.github.commailNot in the scope2026-11-14
postmaster.classroom.github.comNot in the scope2026-11-14
pre.classroom.github.comNot in the scope2026-11-14
pre-prod.classroom.github.comNot in the scope2026-11-14
proxy.classroom.github.comNot in the scope2026-11-14
publishing-catalog.classroom.github.comNot in the scope2026-11-14
publishing-preview.classroom.github.comstagingNot in the scope2026-11-14
rx.classroom.github.comNot in the scope2026-11-14
searchportal-dev.classroom.github.comdevNot in the scope2026-11-14
searchportal-qa.classroom.github.comtestNot in the scope2026-11-14
secure.classroom.github.comNot in the scope2026-11-14
server.classroom.github.comNot in the scope2026-11-14
shop.classroom.github.comNot in the scope2026-11-14
signup.classroom.github.comNot in the scope2026-11-14
sitecore.classroom.github.comNot in the scope2026-11-14
spf.classroom.github.comNot in the scope2026-11-14
sslvpn.classroom.github.comvpnNot in the scope2026-11-14
sso.classroom.github.comauthNot in the scope2026-11-14
stage.classroom.github.comstagingNot in the scope2026-11-14
stats.classroom.github.comNot in the scope2026-11-14
store.classroom.github.comNot in the scope2026-11-14
storybook.classroom.github.comNot in the scope2026-11-14
support.classroom.github.comNot in the scope2026-11-14
tcp.classroom.github.comNot in the scope2026-11-14
test.classroom.github.comtestNot in the scope2026-11-14
tls.classroom.github.comNot in the scope2026-11-14
tx.classroom.github.comNot in the scope2026-11-14
uk.classroom.github.comNot in the scope2026-11-14
upload.classroom.github.comdataNot in the scope2026-11-14
us-east.classroom.github.comNot in the scope2026-11-14
us-east-1.classroom.github.comNot in the scope2026-11-14
vendor.classroom.github.comNot in the scope2026-11-14
vendors.classroom.github.comNot in the scope2026-11-14
video.classroom.github.comNot in the scope2026-11-14
videos.classroom.github.comNot in the scope2026-11-14
view.classroom.github.comNot in the scope2026-11-14
voice.classroom.github.comNot in the scope2026-11-14
webmail.classroom.github.commailNot in the scope2026-11-14
whois.classroom.github.comNot in the scope2026-11-14
wordpress.classroom.github.comNot in the scope2026-11-14
wp.classroom.github.comNot in the scope2026-11-14
ww1.classroom.github.comNot in the scope2026-11-14
www.classroom.github.comNot in the scope2026-11-14
www2.classroom.github.comNot in the scope2026-11-14
claude.github.comNot in the scope2026-11-14
claudenw.github.comNot in the scope2026-11-14
claudijd.github.comNot in the scope2026-11-14
claudine.github.comNot in the scope2026-11-14
claudiob.github.comNot in the scope2026-11-14
claudioc.github.comNot in the scope2026-11-14
claudiordgz.github.comNot in the scope2026-11-14
claudius-kienle.github.comNot in the scope2026-11-14
clausklein.github.comNot in the scope2026-11-14
clausreinke.github.comNot in the scope2026-11-14
clauswitt.github.comNot in the scope2026-11-14
claw16.github.comNot in the scope2026-11-14
claw666.github.comNot in the scope2026-11-14
clawpack.github.comNot in the scope2026-11-14
claws.github.comNot in the scope2026-11-14
clay.github.comNot in the scope2026-11-14
clayallsopp.github.comNot in the scope2026-11-14
clayh53.github.comNot in the scope2026-11-14
claymore.github.comNot in the scope2026-11-14
claytonbarnette.github.comNot in the scope2026-11-14
claytron.github.comNot in the scope2026-11-14
clayzermk1.github.comNot in the scope2026-11-14
clc.github.comNot in the scope2026-11-14
cldscript.github.comNot in the scope2026-11-14
cldwalker.github.comNot in the scope2026-11-14
cleamoon.github.comNot in the scope2026-11-14
clean.github.comNot in the scope2026-11-14
cleaning.github.comNot in the scope2026-11-14
cleanweb-uk.github.comNot in the scope2026-11-14
clear.github.comNot in the scope2026-11-14
clearleft.github.comNot in the scope2026-11-14
rika.clearly-non-existent.github.comNot in the scope2026-11-14
clearsightstudio.github.comNot in the scope2026-11-14
clearskies.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.