Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
clearwater.github.comNot in the scope2026-11-14
cledesma.github.comNot in the scope2026-11-14
clee.github.comNot in the scope2026-11-14
cleentfaar.github.comNot in the scope2026-11-14
cleercode.github.comNot in the scope2026-11-14
clehner.github.comNot in the scope2026-11-14
clei.github.comNot in the scope2026-11-14
cleishm.github.comNot in the scope2026-11-14
cleitonfco.github.comNot in the scope2026-11-14
clemens.github.comNot in the scope2026-11-14
clemens-tolboom.github.comNot in the scope2026-11-14
clemente-lab.github.comNot in the scope2026-11-14
clementinabushorn.github.comNot in the scope2026-11-14
clemherreman.github.comNot in the scope2026-11-14
cleo.github.comNot in the scope2026-11-14
cleonte.github.comNot in the scope2026-11-14
clepto.github.comNot in the scope2026-11-14
clermontech.github.comNot in the scope2026-11-14
cletusw.github.comNot in the scope2026-11-14
cleveland.github.comNot in the scope2026-11-14
clever-lang.github.comNot in the scope2026-11-14
cleverage.github.comNot in the scope2026-11-14
cleverandson.github.comNot in the scope2026-11-14
cleverantivirus.github.comNot in the scope2026-11-14
cleverskincare.github.comNot in the scope2026-11-14
clf.github.comNot in the scope2026-11-14
cli.github.comNot in the scope2026-11-14
cli-cli.github.comNot in the scope2026-11-14
beta.cli.github.comstagingNot in the scope2026-11-14
cloud.cli.github.comNot in the scope2026-11-14
images.cli.github.comNot in the scope2026-11-14
install.cli.github.comNot in the scope2026-11-14
ns3.cli.github.comNot in the scope2026-11-14
preview.cli.github.comstagingNot in the scope2026-11-14
track.cli.github.comNot in the scope2026-11-14
video.cli.github.comNot in the scope2026-11-14
clic.github.comNot in the scope2026-11-14
click.github.comNot in the scope2026-11-14
www.click.github.comNot in the scope2026-11-14
click3.github.comNot in the scope2026-11-14
clickalicious.github.comNot in the scope2026-11-14
clickinnovation.github.comNot in the scope2026-11-14
clickme.github.comNot in the scope2026-11-14
clicks.github.comNot in the scope2026-11-14
clicrdv.github.comNot in the scope2026-11-14
clics.github.comNot in the scope2026-11-14
clidewei.github.comNot in the scope2026-11-14
client.github.comNot in the scope2026-11-14
api.client.github.comapiNot in the scope2026-11-14
autoconfig.client.github.comNot in the scope2026-11-14
autodiscover.client.github.commailNot in the scope2026-11-14
covid19.client.github.comNot in the scope2026-11-14
sigmavirus24.client.github.comNot in the scope2026-11-14
virus.client.github.comNot in the scope2026-11-14
webdisk.client.github.comNot in the scope2026-11-14
www.client.github.comNot in the scope2026-11-14
clientcide.github.comNot in the scope2026-11-14
cliente.github.comNot in the scope2026-11-14
clientes.github.comNot in the scope2026-11-14
www.clientes.github.comNot in the scope2026-11-14
clientftp.github.comNot in the scope2026-11-14
clienti.github.comNot in the scope2026-11-14
clientnameb0z.github.comNot in the scope2026-11-14
x19.pb.clientrequestresponseb0z.github.comNot in the scope2026-11-14
clients.github.comNot in the scope2026-11-14
autoconfig.clients.github.comNot in the scope2026-11-14
autodiscover.clients.github.commailNot in the scope2026-11-14
webdisk.clients.github.comNot in the scope2026-11-14
www.clients.github.comNot in the scope2026-11-14
clients3.github.comNot in the scope2026-11-14
clientweb.github.comNot in the scope2026-11-14
clifff.github.comNot in the scope2026-11-14
cliffmoon.github.comNot in the scope2026-11-14
cliffniff.github.comNot in the scope2026-11-14
cliftonc.github.comNot in the scope2026-11-14
climate.github.comNot in the scope2026-11-14
clindsay107.github.comNot in the scope2026-11-14
clindsey.github.comNot in the scope2026-11-14
clinic.github.comNot in the scope2026-11-14
clint-tseng.github.comNot in the scope2026-11-14
clintcparker.github.comNot in the scope2026-11-14
clintecker.github.comNot in the scope2026-11-14
clintjhill.github.comNot in the scope2026-11-14
clintongormley.github.comNot in the scope2026-11-14
clio.github.comNot in the scope2026-11-14
clip.github.comNot in the scope2026-11-14
clipperhouse.github.comNot in the scope2026-11-14
clippings.github.comNot in the scope2026-11-14
clips.github.comNot in the scope2026-11-14
clivecrous.github.comNot in the scope2026-11-14
clj-time.github.comNot in the scope2026-11-14
clk.github.comNot in the scope2026-11-14
clkao.github.comNot in the scope2026-11-14
cllkazan.github.comNot in the scope2026-11-14
clock.github.comNot in the scope2026-11-14
clockworkmod.github.comNot in the scope2026-11-14
cloderic.github.comNot in the scope2026-11-14
clody69.github.comNot in the scope2026-11-14
clojure.github.comNot in the scope2026-11-14
clojure-liberator.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.