Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on Github#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.com#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
redis1.ae.github.comdataNot in the scope2026-11-14
antivirus-s3.github.comdataNot in the scope2026-11-14
bucket.antivirus.github.comdataNot in the scope2026-11-14
s3.antivirus.github.comdataNot in the scope2026-11-14
db.api.github.comapi, dataNot in the scope2026-11-14
elastic.api.github.comapi, dataNot in the scope2026-11-14
ftp.api.github.comapi, dataNot in the scope2026-11-14
mongo.api.github.comapi, dataNot in the scope2026-11-14
mysql.api.github.comapi, dataNot in the scope2026-11-14
upload.api.github.comapi, dataNot in the scope2026-11-14
uploads.api.github.comapi, dataNot in the scope2026-11-14
backup.github.comdataNot in the scope2026-11-14
backup-api.github.comapi, dataNot in the scope2026-11-14
backup01.github.comdataNot in the scope2026-11-14
backup02.github.comdataNot in the scope2026-11-14
backup1.github.comdataNot in the scope2026-11-14
backup2.github.comdataNot in the scope2026-11-14
backup3.github.comdataNot in the scope2026-11-14
backup4.github.comdataNot in the scope2026-11-14
backup5.github.comdataNot in the scope2026-11-14
backup6.github.comdataNot in the scope2026-11-14
backups.github.comdataNot in the scope2026-11-14
s3.barnybug.github.comdataNot in the scope2026-11-14
ftp.blog.github.comdataNot in the scope2026-11-14
bucket.github.comdataNot in the scope2026-11-14
bucket-virus.github.comdataNot in the scope2026-11-14
covid19.bucket.github.comdataNot in the scope2026-11-14
sigmavirus24.bucket.github.comdataNot in the scope2026-11-14
s3.central.github.comdataNot in the scope2026-11-14
mongodb.classroom.github.comdataNot in the scope2026-11-14
upload.classroom.github.comdataNot in the scope2026-11-14
covid19-s3.github.comdataNot in the scope2026-11-14
bucket.covid19.github.comdataNot in the scope2026-11-14
s3.covid19.github.comdataNot in the scope2026-11-14
covid19bucket.github.comdataNot in the scope2026-11-14
ftp.cp.github.comdataNot in the scope2026-11-14
database.github.comdataNot in the scope2026-11-14
database1.github.comdataNot in the scope2026-11-14
database2.github.comdataNot in the scope2026-11-14
db.github.comdataNot in the scope2026-11-14
www.db.github.comdataNot in the scope2026-11-14
ftp.demo.github.comdata, testNot in the scope2026-11-14
ftp.desktop.github.comdataNot in the scope2026-11-14
ftp.dev.github.comdata, devNot in the scope2026-11-14
django-mongodb-engine.github.comdataNot in the scope2026-11-14
bucket.docs.github.comdataNot in the scope2026-11-14
ftp.drvinceknight.github.comdataNot in the scope2026-11-14
mysql.drvinceknight.github.comdataNot in the scope2026-11-14
dump.github.comdataNot in the scope2026-11-14
db.education.github.comdataNot in the scope2026-11-14
elastic.education.github.comdataNot in the scope2026-11-14
ftp.education.github.comdataNot in the scope2026-11-14
mongo.education.github.comdataNot in the scope2026-11-14
mysql.education.github.comdataNot in the scope2026-11-14
upload.education.github.comdataNot in the scope2026-11-14
elastic.github.comdataNot in the scope2026-11-14
elasticsearch.github.comdataNot in the scope2026-11-14
mysql.example.github.comdataNot in the scope2026-11-14
files.github.comdataNot in the scope2026-11-14
autoconfig.files.github.comdataNot in the scope2026-11-14
autodiscover.files.github.comdata, mailNot in the scope2026-11-14
webdisk.files.github.comdataNot in the scope2026-11-14
www.files.github.comdataNot in the scope2026-11-14
files1.github.comdataNot in the scope2026-11-14
files2.github.comdataNot in the scope2026-11-14
files3.github.comdataNot in the scope2026-11-14
files4.github.comdataNot in the scope2026-11-14
ftp.forum.github.comdataNot in the scope2026-11-14
ftp.fr.github.comdataNot in the scope2026-11-14
ftp.github.comdataNot in the scope2026-11-14
ftp-eu.github.comdataNot in the scope2026-11-14
www.ftp.github.comdataNot in the scope2026-11-14
ftp01.github.comdataNot in the scope2026-11-14
ftp02.github.comdataNot in the scope2026-11-14
ftp1.github.comdataNot in the scope2026-11-14
ftp10.github.comdataNot in the scope2026-11-14
ftp12.github.comdataNot in the scope2026-11-14
ftp13.github.comdataNot in the scope2026-11-14
ftp14.github.comdataNot in the scope2026-11-14
ftp15.github.comdataNot in the scope2026-11-14
ftp2.github.comdataNot in the scope2026-11-14
ftp3.github.comdataNot in the scope2026-11-14
ftp4.github.comdataNot in the scope2026-11-14
ftp5.github.comdataNot in the scope2026-11-14
ftp6.github.comdataNot in the scope2026-11-14
ftp7.github.comdataNot in the scope2026-11-14
ftp8.github.comdataNot in the scope2026-11-14
ftp9.github.comdataNot in the scope2026-11-14
db.gist.github.comdataNot in the scope2026-11-14
elastic.gist.github.comdataNot in the scope2026-11-14
ftp.gist.github.comdataNot in the scope2026-11-14
mongo.gist.github.comdataNot in the scope2026-11-14
mongodb.gist.github.comdataNot in the scope2026-11-14
mysql.gist.github.comdataNot in the scope2026-11-14
upload.gist.github.comdataNot in the scope2026-11-14
db.help.github.comdataNot in the scope2026-11-14
elastic.help.github.comdataNot in the scope2026-11-14
mongo.help.github.comdataNot in the scope2026-11-14
mysql.help.github.comdataNot in the scope2026-11-14
holland-backup.github.comdataNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in