Bug bounty program · HackerOne
Most upvoted reports47
- #3124517ValidArbitrary Read of Another Users private repository without AuthorizationGitHub · Insecure Direct Object Reference · 2025 · High$10,000276votes
- #1711938ValidGithub Apps can use Scoped-User-To-Server Tokens to Obtain Full Access to User's Projects in Project V2 GraphQL apiGitHub · Access Control · 2023–198votes
- #2579939ValidSAML Signature verification bypass allows logging into any user (with specific conditions)GitHub · Access Control · 2024 · Critical–196votes
- #1901040ValidAuthentication bypass on gist.github.com through SSH CertificatesGitHub · Access Control · 2023$10,000182votes
- #1497169ValidCSRF protection bypass in GitHub Enterprise management consoleGitHub · Cross-Site Request Forgery · 2022$10,000152votes
- #3560256ValidCross-repository IDOR in `/settings/security_analysis/bypass_reviewers` allows unauthorized delegated bypass reviewer modificationGitHub · Insecure Direct Object Reference · 2026 · Medium–108votes
- #3713965ValidAble to bypass authorization logic and gain more access then intendedGitHub · No weakness recorded · 2026 · Medium–105votes
- #2501036ValidAccess body and title of Internal Repo Issues in ProjectsGitHub · Information Disclosure · 2024 · Medium–100votes
- #1732595ValidGithub app Privilege Escalation to Administrator/Owner of the OrganizationGitHub · Access Control · 2023–98votes
- #3506183ValidMissing Access Control in MigrationFile allows attacker to upload files to any MigrationGitHub · Insecure Direct Object Reference · 2026 · High–92votes
Subdomains56,442
661 covered by the program's own scope · 0 first seen this week
Roots:github.com 55,670 · 3 in scopegithub.net 330 · 330 in scopegithubapp.com 328 · 328 in scopesemmle.com 63githubassets.com 24semmle.net 18lgtm.com 8githubwebhooks.net 1
330 names under github.net
| Name | Scope | First seen |
|---|---|---|
| xe-1-0-3-0.bdr2-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| xe-1-0-8-3701.bdr2-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| xe-1-2-3-0.bdr2-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| xe-2-0-3-0.bdr2-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| xe-2-2-3-0.bdr2-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| ge-13-0-0-0.fw1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| lo0-20.fw1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| reth0-3122.fw1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| reth1-3123.fw1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| et47.ssw1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| et48.ssw1-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| et47.ssw2-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| et48.ssw2-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| et47.ssw3-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| et48.ssw3-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| et47.ssw4-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| et48.ssw4-cp1-prd.net.cp1-iad.github.net | In scope | 2026-11-14 |
| ops-ldap-4ce8b65.cp1-iad.github.net | In scope | 2026-11-14 |
| ops-ldap-9823aad.cp1-iad.github.net | In scope | 2026-11-14 |
| service.cp1-iad.github.net | In scope | 2026-11-14 |
| logging.service.cp1-iad.github.netmonitoring | In scope | 2026-11-14 |
| dc2-iad.github.net | In scope | 2026-11-14 |
| irb-200.bdr-102-2.net.dc2-iad.github.net | In scope | 2026-11-14 |
| lo0-0.bdr-102-2.net.dc2-iad.github.net | In scope | 2026-11-14 |
| irb-200.bdr-103-1.net.dc2-iad.github.net | In scope | 2026-11-14 |
| lo0-0.bdr-103-1.net.dc2-iad.github.net | In scope | 2026-11-14 |
| fw-1.net.dc2-iad.github.net | In scope | 2026-11-14 |
| reth0-200.fw-1.net.dc2-iad.github.net | In scope | 2026-11-14 |
| reth1-200.fw-1.net.dc2-iad.github.net | In scope | 2026-11-14 |
| service.dc2-iad.github.net | In scope | 2026-11-14 |
| dc4-iad.github.net | In scope | 2026-11-14 |
| downbox.github.net | In scope | 2026-11-14 |
| ink-lab.drt-us-east-1.github.net | In scope | 2026-11-14 |
| service.eastus2.github.net | In scope | 2026-11-14 |
| service.edge-ae-01.github.net | In scope | 2026-11-14 |
| service.edge-brs-01.github.net | In scope | 2026-11-14 |
| service.edge-cnc-01.github.net | In scope | 2026-11-14 |
| service.edge-cus-01.github.net | In scope | 2026-11-14 |
| service.edge-eus-01.github.net | In scope | 2026-11-14 |
| service.edge-eus2-01.github.net | In scope | 2026-11-14 |
| service.edge-frc-01.github.net | In scope | 2026-11-14 |
| service.edge-ins-01.github.net | In scope | 2026-11-14 |
| service.edge-itn-01.github.net | In scope | 2026-11-14 |
| service.edge-jpw-01.github.net | In scope | 2026-11-14 |
| service.edge-plc-01.github.net | In scope | 2026-11-14 |
| service.edge-sdc-01.github.net | In scope | 2026-11-14 |
| service.edge-szn-01.github.net | In scope | 2026-11-14 |
| service.edge-wus-01.github.net | In scope | 2026-11-14 |
| service.edge-wus3-01.github.net | In scope | 2026-11-14 |
| eu-central-1.github.net | In scope | 2026-11-14 |
| service.eu-central-1.github.net | In scope | 2026-11-14 |
| federation.github.net | In scope | 2026-11-14 |
| fr5-fra.github.net | In scope | 2026-11-14 |
| glb-proxy-8a19792.fr5-fra.github.net | In scope | 2026-11-14 |
| glb-proxy-c2e149b.fr5-fra.github.net | In scope | 2026-11-14 |
| service.fr5-fra.github.net | In scope | 2026-11-14 |
| fra.github.net | In scope | 2026-11-14 |
| service.francecentral.github.net | In scope | 2026-11-14 |
| service.gc-cus-02.github.net | In scope | 2026-11-14 |
| vitess-production.service.gc-cus-02.github.net | In scope | 2026-11-14 |
| vitess-staging.service.gc-cus-02.github.netstaging | In scope | 2026-11-14 |
| vitess-testing.service.gc-cus-02.github.nettest | In scope | 2026-11-14 |
| service.gc-eus3-01.github.net | In scope | 2026-11-14 |
| service.gc-wus3-01.github.net | In scope | 2026-11-14 |
| iad.github.net | In scope | 2026-11-14 |
| github-fe131-cp1-prd.iad.github.netgit | In scope | 2026-11-14 |
| github-mon2ext-cp1-prd.iad.github.netgit | In scope | 2026-11-14 |
| github-poll1-cp1-prd.iad.github.netgit | In scope | 2026-11-14 |
| github-poll2-cp1-prd.iad.github.netgit | In scope | 2026-11-14 |
| github-poll3-cp1-prd.iad.github.netgit | In scope | 2026-11-14 |
| github-smtp2-ext1.iad.github.netgit, mail | In scope | 2026-11-14 |
| github-smtp2-ext2.iad.github.netgit, mail | In scope | 2026-11-14 |
| github-smtp2-ext3.iad.github.netgit, mail | In scope | 2026-11-14 |
| github-smtp2-ext4.iad.github.netgit, mail | In scope | 2026-11-14 |
| github-smtp2-ext5.iad.github.netgit, mail | In scope | 2026-11-14 |
| github-smtp2-ext6.iad.github.netgit, mail | In scope | 2026-11-14 |
| github-smtp2-ext7.iad.github.netgit, mail | In scope | 2026-11-14 |
| github-smtp2-ext8.iad.github.netgit, mail | In scope | 2026-11-14 |
| github-smtp2a-cp1-prd.iad.github.netgit, mail | In scope | 2026-11-14 |
| github-smtp2a-ext-cp1-prd.iad.github.netgit, mail | In scope | 2026-11-14 |
| github-smtp2b-cp1-prd.iad.github.netgit, mail | In scope | 2026-11-14 |
| github-smtp2b-ext-cp1-prd.iad.github.netgit, mail | In scope | 2026-11-14 |
| logging-aggregator-cp1-prd.iad.github.netmonitoring | In scope | 2026-11-14 |
| logging-aggregator-cp2-prd.iad.github.netmonitoring | In scope | 2026-11-14 |
| mirror.iad.github.net | In scope | 2026-11-14 |
| mirrors.iad.github.net | In scope | 2026-11-14 |
| mirrors-ext.iad.github.net | In scope | 2026-11-14 |
| ops-consul11-cp1-prd.iad.github.nettools | In scope | 2026-11-14 |
| ops-consul12-cp1-prd.iad.github.nettools | In scope | 2026-11-14 |
| ops-consul6-cp1-prd.iad.github.nettools | In scope | 2026-11-14 |
| ops-consul7-cp1-prd.iad.github.nettools | In scope | 2026-11-14 |
| ops-consul9-cp1-prd.iad.github.nettools | In scope | 2026-11-14 |
| ops-mon2ext-cp1-prd.iad.github.net | In scope | 2026-11-14 |
| ops-puppetmaster-cp1-prd.iad.github.net | In scope | 2026-11-14 |
| security-nexpose1-cp1-prd.iad.github.net | In scope | 2026-11-14 |
| service.iad.github.net | In scope | 2026-11-14 |
| logging.service.iad.github.netmonitoring | In scope | 2026-11-14 |
| timestamp-authority-staging.service.iad.github.netstaging | In scope | 2026-11-14 |
| statsd-ext.iad.github.net | In scope | 2026-11-14 |
| service.japanwest.github.net | In scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.