Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
10
Disclosed reports
3
Subdomains
3,165

Most upvoted reports3

Most upvoted reports of Files.com
ReportWeaknessDisclosedBountyVotes
File access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedAnalysed#214001No weakness recorded2017-04-16$60029
Existence of Folder path by guessing the path through response#174645Information Disclosure2017-05-02–15
CSRF @ configuration#208734Cross-Site Request Forgery2017-05-27–8

Subdomains3,165

Subdomains of Files.com
NameScopeFirst seen
callrevu.files.comNot in the scope2026-11-14
cambridgeenglish.files.comNot in the scope2026-11-14
campaignguru.files.comNot in the scope2026-11-14
campdavid.files.comNot in the scope2026-11-14
campos.files.comNot in the scope2026-11-14
camposlegal.files.comNot in the scope2026-11-14
campossage.files.comNot in the scope2026-11-14
campusexplorer.files.comNot in the scope2026-11-14
canadianblackbook.files.comNot in the scope2026-11-14
cancommunity.files.comNot in the scope2026-11-14
candidate159.files.comNot in the scope2026-11-14
candidate209.files.comNot in the scope2026-11-14
candidatejoshuaroskos.files.comNot in the scope2026-11-14
candidatesteveskladany.files.comNot in the scope2026-11-14
candidatetaylor.files.comNot in the scope2026-11-14
cangopal.files.comNot in the scope2026-11-14
canonical.files.comNot in the scope2026-11-14
capacertified.files.comNot in the scope2026-11-14
capsys.files.comNot in the scope2026-11-14
carallel.files.comNot in the scope2026-11-14
cardata.files.comNot in the scope2026-11-14
cardiovascular.files.comNot in the scope2026-11-14
careers.files.comNot in the scope2026-11-14
cargobase.files.comNot in the scope2026-11-14
carlisle.files.comNot in the scope2026-11-14
carlisleit.files.comNot in the scope2026-11-14
carlisleitold1133595.files.comNot in the scope2026-11-14
carlos-success.files.comNot in the scope2026-11-14
carlosboyd.files.comNot in the scope2026-11-14
carnegie.files.comNot in the scope2026-11-14
carrot.files.comNot in the scope2026-11-14
carrotfdc.files.comNot in the scope2026-11-14
cart.files.comNot in the scope2026-11-14
cartcartdotcom.files.comNot in the scope2026-11-14
cartiga.files.comNot in the scope2026-11-14
catalogkiosk.files.comNot in the scope2026-11-14
catalystone.files.comNot in the scope2026-11-14
catalyx.files.comNot in the scope2026-11-14
cbw.files.comNot in the scope2026-11-14
cc.files.comNot in the scope2026-11-14
cca2.files.comNot in the scope2026-11-14
ccc.files.comNot in the scope2026-11-14
cdcusa.files.comNot in the scope2026-11-14
cdn.files.comNot in the scope2026-11-14
cdp.files.comNot in the scope2026-11-14
cdpcommunity.files.comNot in the scope2026-11-14
cdtarget1.files.comNot in the scope2026-11-14
cencor.files.comNot in the scope2026-11-14
centerforresearchlibraries.files.comNot in the scope2026-11-14
centralconsulting.files.comNot in the scope2026-11-14
centralpnb.files.comNot in the scope2026-11-14
cenveofiles.files.comNot in the scope2026-11-14
cert.files.comNot in the scope2026-11-14
certcoftp.files.comNot in the scope2026-11-14
cfcsecure.files.comNot in the scope2026-11-14
cfcu.files.comNot in the scope2026-11-14
cgasaves.files.comNot in the scope2026-11-14
cgix.files.comNot in the scope2026-11-14
chain.files.comNot in the scope2026-11-14
chainalytics.files.comNot in the scope2026-11-14
championps.files.comNot in the scope2026-11-14
chcenergia.files.comNot in the scope2026-11-14
check.files.comNot in the scope2026-11-14
chegg.files.comNot in the scope2026-11-14
cherre.files.comNot in the scope2026-11-14
cherresandbox.files.comNot in the scope2026-11-14
child3.files.comNot in the scope2026-11-14
childsitetest.files.comNot in the scope2026-11-14
chitiore.files.comNot in the scope2026-11-14
choreo.files.comNot in the scope2026-11-14
ciasoft.files.comNot in the scope2026-11-14
ciis.files.comNot in the scope2026-11-14
cim-api.files.comapiNot in the scope2026-11-14
cim-api-dev.files.comapi, devNot in the scope2026-11-14
cim-api-qa.files.comapi, testNot in the scope2026-11-14
cim-api-uat.files.comapi, testNot in the scope2026-11-14
cim-data-quality-qa.files.comtestNot in the scope2026-11-14
cim-dev.files.comdevNot in the scope2026-11-14
cim-geo-dev.files.comdevNot in the scope2026-11-14
cingular.files.comNot in the scope2026-11-14
cipla.files.comNot in the scope2026-11-14
circleenix.files.comNot in the scope2026-11-14
circuitof.files.comNot in the scope2026-11-14
citrix.files.comvpnNot in the scope2026-11-14
cityofmidlandtx.files.comNot in the scope2026-11-14
clarapriceinc.files.comNot in the scope2026-11-14
clarksmith.files.comNot in the scope2026-11-14
clarkstoncapital.files.comNot in the scope2026-11-14
claudiotest.files.comNot in the scope2026-11-14
cldfiles.files.comNot in the scope2026-11-14
cle-indians.files.comNot in the scope2026-11-14
cleanpower.files.comNot in the scope2026-11-14
clearbit.files.comNot in the scope2026-11-14
clearcom.files.comNot in the scope2026-11-14
clearsky.files.comNot in the scope2026-11-14
click.files.comNot in the scope2026-11-14
clients-2-166.files.comNot in the scope2026-11-14
clifbarnes.files.comNot in the scope2026-11-14
cliftest.files.comNot in the scope2026-11-14
clippingpath.files.comNot in the scope2026-11-14

3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.