Bug bounty program · HackerOne
Most upvoted reports47
- #3124517ValidArbitrary Read of Another Users private repository without AuthorizationGitHub · Insecure Direct Object Reference · 2025 · High$10,000276votes
- #1711938ValidGithub Apps can use Scoped-User-To-Server Tokens to Obtain Full Access to User's Projects in Project V2 GraphQL apiGitHub · Access Control · 2023–198votes
- #2579939ValidSAML Signature verification bypass allows logging into any user (with specific conditions)GitHub · Access Control · 2024 · Critical–196votes
- #1901040ValidAuthentication bypass on gist.github.com through SSH CertificatesGitHub · Access Control · 2023$10,000182votes
- #1497169ValidCSRF protection bypass in GitHub Enterprise management consoleGitHub · Cross-Site Request Forgery · 2022$10,000152votes
- #3560256ValidCross-repository IDOR in `/settings/security_analysis/bypass_reviewers` allows unauthorized delegated bypass reviewer modificationGitHub · Insecure Direct Object Reference · 2026 · Medium–108votes
- #3713965ValidAble to bypass authorization logic and gain more access then intendedGitHub · No weakness recorded · 2026 · Medium–105votes
- #2501036ValidAccess body and title of Internal Repo Issues in ProjectsGitHub · Information Disclosure · 2024 · Medium–100votes
- #1732595ValidGithub app Privilege Escalation to Administrator/Owner of the OrganizationGitHub · Access Control · 2023–98votes
- #3506183ValidMissing Access Control in MigrationFile allows attacker to upload files to any MigrationGitHub · Insecure Direct Object Reference · 2026 · High–92votes
Subdomains56,442
661 covered by the program's own scope · 0 first seen this week
Roots:github.com 55,670 · 3 in scopegithub.net 330 · 330 in scopegithubapp.com 328 · 328 in scopesemmle.com 63githubassets.com 24semmle.net 18lgtm.com 8githubwebhooks.net 1
328 names under githubapp.com
| Name | Scope | First seen |
|---|---|---|
| 2fa-checklist.githubapp.com | In scope | 2026-11-14 |
| 92mfastly-elephants.githubapp.com | In scope | 2026-11-14 |
| a11y-help.githubapp.com | In scope | 2026-11-14 |
| actions-availability-report.githubapp.com | In scope | 2026-11-14 |
| actions-support-report.githubapp.com | In scope | 2026-11-14 |
| platform.agents.githubapp.com | In scope | 2026-11-14 |
| ahoy.githubapp.com | In scope | 2026-11-14 |
| ahoy-ms.githubapp.com | In scope | 2026-11-14 |
| www.ahoy.githubapp.com | In scope | 2026-11-14 |
| ai.githubapp.com | In scope | 2026-11-14 |
| airflow.githubapp.comtools | In scope | 2026-11-14 |
| airflow-staging.githubapp.comstaging, tools | In scope | 2026-11-14 |
| analytics.githubapp.com | In scope | 2026-11-14 |
| animal.githubapp.com | In scope | 2026-11-14 |
| www.animal.githubapp.com | In scope | 2026-11-14 |
| api-platform-docs.githubapp.comapi | In scope | 2026-11-14 |
| are-we-available.githubapp.com | In scope | 2026-11-14 |
| are-we-available-yet.githubapp.com | In scope | 2026-11-14 |
| athena.githubapp.com | In scope | 2026-11-14 |
| atom.githubapp.com | In scope | 2026-11-14 |
| atom-io.githubapp.com | In scope | 2026-11-14 |
| atom-io-staging.githubapp.comstaging | In scope | 2026-11-14 |
| github.atom-io-staging.githubapp.comgit, staging | In scope | 2026-11-14 |
| availability-core4-report.githubapp.com | In scope | 2026-11-14 |
| availability-report.githubapp.com | In scope | 2026-11-14 |
| bastion.githubapp.com | In scope | 2026-11-14 |
| bastion-ams.githubapp.com | In scope | 2026-11-14 |
| bastion-iad.githubapp.com | In scope | 2026-11-14 |
| bastion-sea.githubapp.com | In scope | 2026-11-14 |
| bcdr-report.githubapp.com | In scope | 2026-11-14 |
| boomi.githubapp.com | In scope | 2026-11-14 |
| boomi-test.githubapp.comtest | In scope | 2026-11-14 |
| bootstats.githubapp.com | In scope | 2026-11-14 |
| c2c-actions-reports.githubapp.com | In scope | 2026-11-14 |
| c2c-mentorship-program.githubapp.com | In scope | 2026-11-14 |
| c2c-packages-reports.githubapp.com | In scope | 2026-11-14 |
| c2c-pages-reports.githubapp.com | In scope | 2026-11-14 |
| camo.githubapp.com | In scope | 2026-11-14 |
| career-ladder.githubapp.com | In scope | 2026-11-14 |
| catalog.githubapp.com | In scope | 2026-11-14 |
| ccc.githubapp.com | In scope | 2026-11-14 |
| ccr.githubapp.com | In scope | 2026-11-14 |
| central.githubapp.com | In scope | 2026-11-14 |
| cerebro.githubapp.com | In scope | 2026-11-14 |
| cfp.githubapp.com | In scope | 2026-11-14 |
| chat.githubapp.com | In scope | 2026-11-14 |
| chat-ec2-production.githubapp.com | In scope | 2026-11-14 |
| chatsearch.githubapp.com | In scope | 2026-11-14 |
| chatterbox.githubapp.com | In scope | 2026-11-14 |
| chatterbox-staging.githubapp.comstaging | In scope | 2026-11-14 |
| cla.githubapp.com | In scope | 2026-11-14 |
| cla-staging.githubapp.comstaging | In scope | 2026-11-14 |
| classroom.githubapp.com | In scope | 2026-11-14 |
| cloudshark.githubapp.com | In scope | 2026-11-14 |
| coaictools.githubapp.com | In scope | 2026-11-14 |
| code-scanning-data.githubapp.com | In scope | 2026-11-14 |
| code-scanning-ops.githubapp.com | In scope | 2026-11-14 |
| code-scanning-reports.githubapp.com | In scope | 2026-11-14 |
| codeql-c-extractor-reports.githubapp.com | In scope | 2026-11-14 |
| codeql-profile-viewer.githubapp.com | In scope | 2026-11-14 |
| codeql-reports.githubapp.com | In scope | 2026-11-14 |
| coding-maintenance-reports.githubapp.com | In scope | 2026-11-14 |
| collector.githubapp.com | In scope | 2026-11-14 |
| collector-internal.githubapp.cominternal | In scope | 2026-11-14 |
| collector-new.githubapp.com | In scope | 2026-11-14 |
| collector-staging.githubapp.comstaging | In scope | 2026-11-14 |
| commish.githubapp.com | In scope | 2026-11-14 |
| commish-staging.githubapp.comstaging | In scope | 2026-11-14 |
| compute-products-design.githubapp.com | In scope | 2026-11-14 |
| compute-products-fundamentals.githubapp.com | In scope | 2026-11-14 |
| constructicon.githubapp.com | In scope | 2026-11-14 |
| consul.githubapp.comtools | In scope | 2026-11-14 |
| consul-acl.githubapp.comtools | In scope | 2026-11-14 |
| contracts-request.githubapp.com | In scope | 2026-11-14 |
| copilot-atlas.githubapp.com | In scope | 2026-11-14 |
| core-ux.githubapp.com | In scope | 2026-11-14 |
| csdashboard.githubapp.com | In scope | 2026-11-14 |
| cse.githubapp.com | In scope | 2026-11-14 |
| cse-hub.githubapp.com | In scope | 2026-11-14 |
| cseq-ops.githubapp.com | In scope | 2026-11-14 |
| cshub.githubapp.com | In scope | 2026-11-14 |
| customer-connections.githubapp.com | In scope | 2026-11-14 |
| customer-research-docs.githubapp.com | In scope | 2026-11-14 |
| customer-stories.githubapp.com | In scope | 2026-11-14 |
| dashboard.githubapp.comadmin | In scope | 2026-11-14 |
| data.githubapp.com | In scope | 2026-11-14 |
| data-triage-reports.githubapp.com | In scope | 2026-11-14 |
| datacenter-reports.githubapp.com | In scope | 2026-11-14 |
| delivery-org.githubapp.com | In scope | 2026-11-14 |
| demos.githubapp.com | In scope | 2026-11-14 |
| dependabot-api.githubapp.comapi | In scope | 2026-11-14 |
| dependabot-badges.githubapp.com | In scope | 2026-11-14 |
| design-tools.githubapp.com | In scope | 2026-11-14 |
| developer-site.githubapp.com | In scope | 2026-11-14 |
| developer-site2.githubapp.com | In scope | 2026-11-14 |
| developer-site3.githubapp.com | In scope | 2026-11-14 |
| developer-site4.githubapp.com | In scope | 2026-11-14 |
| developer-site5.githubapp.com | In scope | 2026-11-14 |
| developer-site6.githubapp.com | In scope | 2026-11-14 |
| devtools.githubapp.com | In scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.