Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
10
Disclosed reports
3
Subdomains
3,165

Most upvoted reports3

Most upvoted reports of Files.com
ReportWeaknessDisclosedBountyVotes
File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001No weakness recorded2017-04-16$60029
Existence of Folder path by guessing the path through responseAnalysed#174645Information Disclosure2017-05-02–15
CSRF @ configuration#208734Cross-Site Request Forgery2017-05-27–8

Subdomains3,165

Subdomains of Files.com
NameScopeFirst seen
lighthouse.files.comNot in the scope2026-11-14
lighthouselab.files.comNot in the scope2026-11-14
lilly.files.comNot in the scope2026-11-14
lilyai.files.comNot in the scope2026-11-14
limelightplatform.files.comNot in the scope2026-11-14
lindatesting.files.comNot in the scope2026-11-14
lindsaymeans.files.comNot in the scope2026-11-14
linkeahosting.files.comNot in the scope2026-11-14
linkin.files.comNot in the scope2026-11-14
lists.files.comNot in the scope2026-11-14
liveu.files.comNot in the scope2026-11-14
liveupdate.files.comNot in the scope2026-11-14
ljnops.files.comNot in the scope2026-11-14
lms.files.comNot in the scope2026-11-14
localhost.files.comdevNot in the scope2026-11-14
locally.files.comNot in the scope2026-11-14
login.files.comauthNot in the scope2026-11-14
loncov9.files.comNot in the scope2026-11-14
longdao.files.comNot in the scope2026-11-14
lostinnotation.files.comNot in the scope2026-11-14
lot.files.comNot in the scope2026-11-14
louwrentius.files.comNot in the scope2026-11-14
lovehoneygroup.files.comNot in the scope2026-11-14
loxxter.files.comNot in the scope2026-11-14
lqftp.files.comNot in the scope2026-11-14
lra-m-tax.files.comNot in the scope2026-11-14
lsma.files.comNot in the scope2026-11-14
luftent.files.comNot in the scope2026-11-14
lumberliquidators.files.comNot in the scope2026-11-14
lumeta.files.comNot in the scope2026-11-14
lus.files.comNot in the scope2026-11-14
m.files.comNot in the scope2026-11-14
m2m.files.comNot in the scope2026-11-14
macconsult.files.comNot in the scope2026-11-14
macrofin.files.comNot in the scope2026-11-14
madisonai.files.comNot in the scope2026-11-14
madoliveprods.files.comNot in the scope2026-11-14
mafcloud.files.comNot in the scope2026-11-14
magnoliawash.files.comNot in the scope2026-11-14
magzter.files.comNot in the scope2026-11-14
mahip.files.comNot in the scope2026-11-14
mail.files.commailListed out of scope2026-11-14
mail1.files.commailNot in the scope2026-11-14
mail2.files.commailNot in the scope2026-11-14
mainstaymedical.files.comNot in the scope2026-11-14
makeshift.files.comNot in the scope2026-11-14
mannu.files.comNot in the scope2026-11-14
mannualag.files.comNot in the scope2026-11-14
mantl.files.comNot in the scope2026-11-14
maple.files.comNot in the scope2026-11-14
maranaaz.files.comNot in the scope2026-11-14
maranaazold1133665.files.comNot in the scope2026-11-14
marcresearch.files.comNot in the scope2026-11-14
margo.files.comNot in the scope2026-11-14
mari.files.comNot in the scope2026-11-14
marinus.files.comNot in the scope2026-11-14
mariposahsc.files.comNot in the scope2026-11-14
markaaz.files.comNot in the scope2026-11-14
marketbridge2.files.comNot in the scope2026-11-14
marolina.files.comNot in the scope2026-11-14
marquettetrans.files.comNot in the scope2026-11-14
masonicvillages.files.comNot in the scope2026-11-14
mast.files.comNot in the scope2026-11-14
master.files.comNot in the scope2026-11-14
matrix.files.comNot in the scope2026-11-14
matrixsystems.files.comNot in the scope2026-11-14
matrixx.files.comNot in the scope2026-11-14
mattoswald.files.comNot in the scope2026-11-14
mattschust.files.comNot in the scope2026-11-14
maxwellpaper.files.comNot in the scope2026-11-14
mazama.files.comNot in the scope2026-11-14
mazda-mexico.files.comNot in the scope2026-11-14
mazemedia.files.comNot in the scope2026-11-14
mbrower.files.comNot in the scope2026-11-14
mbx.files.comNot in the scope2026-11-14
mcgill.files.comNot in the scope2026-11-14
mdlivecare.files.comNot in the scope2026-11-14
mdm.files.comNot in the scope2026-11-14
mdw-swk.files.comNot in the scope2026-11-14
medcom.files.comNot in the scope2026-11-14
medhealth.files.comNot in the scope2026-11-14
media.files.comNot in the scope2026-11-14
media-horizons.files.comNot in the scope2026-11-14
mediacellar.files.comNot in the scope2026-11-14
www.mediafire.files.comNot in the scope2026-11-14
mediality.files.comNot in the scope2026-11-14
outgoing.mediastrategy.files.comNot in the scope2026-11-14
medicalassociates.files.comNot in the scope2026-11-14
medicareinsurance.files.comNot in the scope2026-11-14
medistreams.files.comNot in the scope2026-11-14
meeder.files.comNot in the scope2026-11-14
meenta.files.comNot in the scope2026-11-14
meinunterricht.files.comNot in the scope2026-11-14
membershoppers.files.comNot in the scope2026-11-14
mentom.files.comNot in the scope2026-11-14
mercer.files.comNot in the scope2026-11-14
out.mercsolo.files.comNot in the scope2026-11-14
merle.files.comNot in the scope2026-11-14
mersive.files.comNot in the scope2026-11-14
messagepool.files.comNot in the scope2026-11-14

3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.