Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
10
Disclosed reports
3
Subdomains
3,165

Most upvoted reports3

Most upvoted reports of Files.com
ReportWeaknessDisclosedBountyVotes
File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001No weakness recorded2017-04-16$60029
Existence of Folder path by guessing the path through responseAnalysed#174645Information Disclosure2017-05-02–15
CSRF @ configuration#208734Cross-Site Request Forgery2017-05-27–8

Subdomains3,165

Subdomains of Files.com
NameScopeFirst seen
nesto.files.comNot in the scope2026-11-14
net60.files.comNot in the scope2026-11-14
netbrain.files.comNot in the scope2026-11-14
netbraintechnologies.files.comNot in the scope2026-11-14
netpro.files.comNot in the scope2026-11-14
new.files.comNot in the scope2026-11-14
news.files.comNot in the scope2026-11-14
newtonimpact.files.comNot in the scope2026-11-14
newwestcityprod.files.comNot in the scope2026-11-14
newwestcitytest.files.comNot in the scope2026-11-14
nexant.files.comNot in the scope2026-11-14
nexla.files.comNot in the scope2026-11-14
nextracker.files.comNot in the scope2026-11-14
nginx.files.comNot in the scope2026-11-14
nginx-newest.files.comNot in the scope2026-11-14
nginx-newest1.files.comNot in the scope2026-11-14
ngx.files.comNot in the scope2026-11-14
nhg.files.comNot in the scope2026-11-14
ninjatrader.files.comNot in the scope2026-11-14
nitaherlestiany.files.comNot in the scope2026-11-14
niyantras.files.comNot in the scope2026-11-14
njoy.files.comNot in the scope2026-11-14
nlyte.files.comNot in the scope2026-11-14
nni.files.comNot in the scope2026-11-14
nodejs.files.comNot in the scope2026-11-14
nodejs-dev.files.comdevNot in the scope2026-11-14
nogin.files.comNot in the scope2026-11-14
non-prod.files.comNot in the scope2026-11-14
noname59.files.comNot in the scope2026-11-14
noneed2.files.comNot in the scope2026-11-14
norlock.files.comNot in the scope2026-11-14
northbaycu.files.comNot in the scope2026-11-14
northdata.files.comNot in the scope2026-11-14
northerlies.files.comNot in the scope2026-11-14
northfield.files.comNot in the scope2026-11-14
northstar.files.comNot in the scope2026-11-14
northwind.files.comNot in the scope2026-11-14
nortonrosefulbright.files.comNot in the scope2026-11-14
notora.files.comNot in the scope2026-11-14
noveocare.files.comNot in the scope2026-11-14
novusfiles.files.comNot in the scope2026-11-14
nowcourier.files.comNot in the scope2026-11-14
nrfus.files.comNot in the scope2026-11-14
nrfus-test.files.comtestNot in the scope2026-11-14
nrr.files.comNot in the scope2026-11-14
webmail.nrs2001pt.files.commailNot in the scope2026-11-14
ns.files.comNot in the scope2026-11-14
ns1.files.comNot in the scope2026-11-14
ns2.files.comNot in the scope2026-11-14
ns3.files.comNot in the scope2026-11-14
ns4.files.comNot in the scope2026-11-14
nsbsl.files.comNot in the scope2026-11-14
nuclearhotsauce.files.comNot in the scope2026-11-14
nullpointer.files.comNot in the scope2026-11-14
nunatsiavut.files.comNot in the scope2026-11-14
nxg.files.comNot in the scope2026-11-14
nxt.files.comNot in the scope2026-11-14
nxturn.files.comNot in the scope2026-11-14
oa.files.comNot in the scope2026-11-14
oak.files.comNot in the scope2026-11-14
oaknorth.files.comNot in the scope2026-11-14
october.files.comNot in the scope2026-11-14
oda.files.comNot in the scope2026-11-14
oefcu.files.comNot in the scope2026-11-14
offenderlink.files.comNot in the scope2026-11-14
office.files.comNot in the scope2026-11-14
ohnoshedidntsite.files.comNot in the scope2026-11-14
oildex.files.comNot in the scope2026-11-14
okta.files.comauthNot in the scope2026-11-14
old.files.comlegacyNot in the scope2026-11-14
omegapoint.files.comNot in the scope2026-11-14
omegaraptor.files.comNot in the scope2026-11-14
omnia.files.comNot in the scope2026-11-14
omniamowgli.files.comNot in the scope2026-11-14
omnionpower.files.comNot in the scope2026-11-14
onair.files.comNot in the scope2026-11-14
one.files.comNot in the scope2026-11-14
onedatasource.files.comNot in the scope2026-11-14
onelegacy.files.comNot in the scope2026-11-14
onlineprinters.files.comNot in the scope2026-11-14
onpointwarranty.files.comNot in the scope2026-11-14
ontheborder.files.comNot in the scope2026-11-14
onwards.files.comNot in the scope2026-11-14
onypoenya.files.comNot in the scope2026-11-14
opb.files.comNot in the scope2026-11-14
open.files.comNot in the scope2026-11-14
openature.files.comNot in the scope2026-11-14
opengov.files.comNot in the scope2026-11-14
openloophealth.files.comNot in the scope2026-11-14
opensesame.files.comNot in the scope2026-11-14
opiniion.files.comNot in the scope2026-11-14
opiniion2.files.comNot in the scope2026-11-14
optimed.files.comNot in the scope2026-11-14
orchardglobal.files.comNot in the scope2026-11-14
orders.files.comNot in the scope2026-11-14
sftp.powerfaids.org.files.comdataNot in the scope2026-11-14
webmail.orientacioneducativa.files.commailNot in the scope2026-11-14
origin.files.comNot in the scope2026-11-14
origina.files.comNot in the scope2026-11-14
originalsyndicate.files.comNot in the scope2026-11-14

3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.