Bug bounty program · HackerOne
Most upvoted reports47
- #3124517ValidArbitrary Read of Another Users private repository without AuthorizationGitHub · Insecure Direct Object Reference · 2025 · High$10,000276votes
- #1711938ValidGithub Apps can use Scoped-User-To-Server Tokens to Obtain Full Access to User's Projects in Project V2 GraphQL apiGitHub · Access Control · 2023–198votes
- #2579939ValidSAML Signature verification bypass allows logging into any user (with specific conditions)GitHub · Access Control · 2024 · Critical–196votes
- #1901040ValidAuthentication bypass on gist.github.com through SSH CertificatesGitHub · Access Control · 2023$10,000182votes
- #1497169ValidCSRF protection bypass in GitHub Enterprise management consoleGitHub · Cross-Site Request Forgery · 2022$10,000152votes
- #3560256ValidCross-repository IDOR in `/settings/security_analysis/bypass_reviewers` allows unauthorized delegated bypass reviewer modificationGitHub · Insecure Direct Object Reference · 2026 · Medium–108votes
- #3713965ValidAble to bypass authorization logic and gain more access then intendedGitHub · No weakness recorded · 2026 · Medium–105votes
- #2501036ValidAccess body and title of Internal Repo Issues in ProjectsGitHub · Information Disclosure · 2024 · Medium–100votes
- #1732595ValidGithub app Privilege Escalation to Administrator/Owner of the OrganizationGitHub · Access Control · 2023–98votes
- #3506183ValidMissing Access Control in MigrationFile allows attacker to upload files to any MigrationGitHub · Insecure Direct Object Reference · 2026 · High–92votes
Subdomains56,442
661 covered by the program's own scope · 0 first seen this week
Roots:github.com 55,670 · 3 in scopegithub.net 330 · 330 in scopegithubapp.com 328 · 328 in scopesemmle.com 63githubassets.com 24semmle.net 18lgtm.com 8githubwebhooks.net 1
330 names under github.net
| Name | Scope | First seen |
|---|---|---|
| ac4-iad.github.net | In scope | 2026-11-14 |
| service.ac4-iad.github.net | In scope | 2026-11-14 |
| logging.service.ac4-iad.github.netmonitoring | In scope | 2026-11-14 |
| am4-ams.github.net | In scope | 2026-11-14 |
| service.am4-ams.github.net | In scope | 2026-11-14 |
| ams.github.net | In scope | 2026-11-14 |
| service.ams.github.net | In scope | 2026-11-14 |
| ap-northeast-1.github.net | In scope | 2026-11-14 |
| ap-northeast-2.github.net | In scope | 2026-11-14 |
| ap-south-1.github.net | In scope | 2026-11-14 |
| ap-southeast-1.github.net | In scope | 2026-11-14 |
| service.ap-southeast-1.github.net | In scope | 2026-11-14 |
| ap-southeast-2.github.net | In scope | 2026-11-14 |
| ash1-iad.github.net | In scope | 2026-11-14 |
| service.ash1-iad.github.net | In scope | 2026-11-14 |
| service.australiaeast.github.net | In scope | 2026-11-14 |
| aws.github.net | In scope | 2026-11-14 |
| haystack-fe1-ue1-stg.aws.github.netstaging | In scope | 2026-11-14 |
| haystack-fe10-ue1-prd.aws.github.net | In scope | 2026-11-14 |
| haystack-fe11-ue1-prd.aws.github.net | In scope | 2026-11-14 |
| haystack-fe12-ue1-prd.aws.github.net | In scope | 2026-11-14 |
| haystack-fe13-ue1-prd.aws.github.net | In scope | 2026-11-14 |
| haystack-fe14-ue1-prd.aws.github.net | In scope | 2026-11-14 |
| haystack-fe15-ue1-prd.aws.github.net | In scope | 2026-11-14 |
| haystack-fe16-ue1-prd.aws.github.net | In scope | 2026-11-14 |
| haystack-fe17-ue1-prd.aws.github.net | In scope | 2026-11-14 |
| haystack-fe18-ue1-prd.aws.github.net | In scope | 2026-11-14 |
| kube-me.aws.github.nettools | In scope | 2026-11-14 |
| lfs.aws.github.net | In scope | 2026-11-14 |
| ops-consul1-pe1-prd.aws.github.nettools | In scope | 2026-11-14 |
| ops-consul1-pe1-stg.aws.github.netstaging, tools | In scope | 2026-11-14 |
| ops-consul2-pe1-prd.aws.github.nettools | In scope | 2026-11-14 |
| ops-consul2-pe1-stg.aws.github.netstaging, tools | In scope | 2026-11-14 |
| ops-consul3-pe1-prd.aws.github.nettools | In scope | 2026-11-14 |
| ops-consul3-pe1-stg.aws.github.netstaging, tools | In scope | 2026-11-14 |
| ops-consul4-pe1-prd.aws.github.nettools | In scope | 2026-11-14 |
| ops-consul40-pe1-stg.aws.github.netstaging, tools | In scope | 2026-11-14 |
| ops-consul5-pe1-prd.aws.github.nettools | In scope | 2026-11-14 |
| ops-ldap1-pe1-prd.aws.github.net | In scope | 2026-11-14 |
| ops-ldap2-pe1-prd.aws.github.net | In scope | 2026-11-14 |
| ops-ldap3-pe1-prd.aws.github.net | In scope | 2026-11-14 |
| ops-ldap4-pe1-prd.aws.github.net | In scope | 2026-11-14 |
| ops-ldap5-pe1-prd.aws.github.net | In scope | 2026-11-14 |
| puppetmaster.aws.github.net | In scope | 2026-11-14 |
| render-fe1-ue1-lab.aws.github.net | In scope | 2026-11-14 |
| security-vault1-pe1-stg.aws.github.netstaging, tools | In scope | 2026-11-14 |
| security-vault2-pe1-stg.aws.github.netstaging, tools | In scope | 2026-11-14 |
| security-vault3-pe1-stg.aws.github.netstaging, tools | In scope | 2026-11-14 |
| sites-api-test.aws.github.netapi, test | In scope | 2026-11-14 |
| service.azure-australiaeast.github.net | In scope | 2026-11-14 |
| glb-proxy-22365c3.azure-brazilsouth.github.net | In scope | 2026-11-14 |
| glb-proxy-7218fa7.azure-brazilsouth.github.net | In scope | 2026-11-14 |
| service.azure-brazilsouth.github.net | In scope | 2026-11-14 |
| service.azure-canadacentral.github.net | In scope | 2026-11-14 |
| service.azure-centralindia.github.net | In scope | 2026-11-14 |
| service.azure-centralus.github.net | In scope | 2026-11-14 |
| glb-proxy-1e0f862.azure-eastus.github.net | In scope | 2026-11-14 |
| service.azure-eastus.github.net | In scope | 2026-11-14 |
| provisioning.service.azure-eastus.github.net | In scope | 2026-11-14 |
| provisioning-staging.service.azure-eastus.github.netstaging | In scope | 2026-11-14 |
| splunk-api.service.azure-eastus.github.netapi, monitoring | In scope | 2026-11-14 |
| splunk-hec.service.azure-eastus.github.netmonitoring | In scope | 2026-11-14 |
| splunkazure-api.service.azure-eastus.github.netapi | In scope | 2026-11-14 |
| trino.service.azure-eastus.github.net | In scope | 2026-11-14 |
| service.azure-eastus2.github.net | In scope | 2026-11-14 |
| service.azure-francecentral.github.net | In scope | 2026-11-14 |
| service.azure-japanwest.github.net | In scope | 2026-11-14 |
| service.azure-koreacentral.github.net | In scope | 2026-11-14 |
| service.azure-northcentralus.github.net | In scope | 2026-11-14 |
| glb-proxy-d599499.azure-southafricanorth.github.net | In scope | 2026-11-14 |
| glb-proxy-df77a87.azure-southafricanorth.github.net | In scope | 2026-11-14 |
| glb-proxy-6859ed5.azure-southeastasia.github.net | In scope | 2026-11-14 |
| glb-proxy-9a7e074.azure-southeastasia.github.net | In scope | 2026-11-14 |
| service.azure-swedencentral.github.net | In scope | 2026-11-14 |
| service.azure-uksouth.github.net | In scope | 2026-11-14 |
| service.azure-westeurope.github.net | In scope | 2026-11-14 |
| splunk-api-prod-weu-01.service.azure-westeurope.github.netapi, monitoring | In scope | 2026-11-14 |
| splunk-api-westeu-prod-01.service.azure-westeurope.github.netapi, monitoring | In scope | 2026-11-14 |
| www.splunk-api-westeu-prod-01.service.azure-westeurope.github.netapi, monitoring | In scope | 2026-11-14 |
| service.azure-westus3.github.net | In scope | 2026-11-14 |
| bifrost.bna.github.net | In scope | 2026-11-14 |
| service.bpdev-us-east-1.github.net | In scope | 2026-11-14 |
| service.brazilsouth.github.net | In scope | 2026-11-14 |
| service.canadacentral.github.net | In scope | 2026-11-14 |
| capablemonkey.github.net | In scope | 2026-11-14 |
| service.centralindia.github.net | In scope | 2026-11-14 |
| service.centralus.github.net | In scope | 2026-11-14 |
| corona.github.net | In scope | 2026-11-14 |
| cp1-iad.github.net | In scope | 2026-11-14 |
| irb-3122.bdr1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| lo0-11.bdr1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| lo0-12.bdr1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| xe-1-0-3-0.bdr1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| xe-1-0-8-3700.bdr1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| xe-1-2-3-0.bdr1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| xe-2-0-3-0.bdr1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| xe-2-2-3-0.bdr1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| irb-3123.bdr2-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| lo0-11.bdr2-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| lo0-12.bdr2-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.