Bug bounty program · HackerOne
Most upvoted reports47
- #3124517ValidAnalysedArbitrary Read of Another Users private repository without AuthorizationGitHub · Insecure Direct Object Reference · 2025 · High · needs: a user account · IDOR / object reference, Missing authorisation check$10,000276votes
- #1711938ValidGithub Apps can use Scoped-User-To-Server Tokens to Obtain Full Access to User's Projects in Project V2 GraphQL apiGitHub · Access Control · 2023–198votes
- #2579939ValidSAML Signature verification bypass allows logging into any user (with specific conditions)GitHub · Access Control · 2024 · Critical–196votes
- #1901040ValidAuthentication bypass on gist.github.com through SSH CertificatesGitHub · Access Control · 2023$10,000182votes
- #1497169ValidCSRF protection bypass in GitHub Enterprise management consoleGitHub · Cross-Site Request Forgery · 2022$10,000152votes
- #3560256ValidCross-repository IDOR in `/settings/security_analysis/bypass_reviewers` allows unauthorized delegated bypass reviewer modificationGitHub · Insecure Direct Object Reference · 2026 · Medium–108votes
- #3713965ValidAble to bypass authorization logic and gain more access then intendedGitHub · No weakness recorded · 2026 · Medium–105votes
- #2501036ValidAccess body and title of Internal Repo Issues in ProjectsGitHub · Information Disclosure · 2024 · Medium–100votes
- #1732595ValidGithub app Privilege Escalation to Administrator/Owner of the OrganizationGitHub · Access Control · 2023–98votes
- #3506183ValidMissing Access Control in MigrationFile allows attacker to upload files to any MigrationGitHub · Insecure Direct Object Reference · 2026 · High–92votes
Subdomains56,442
661 covered by the program's own scope · 0 first seen this week
Roots:github.com 55,670 · 3 in scopegithub.net 330 · 330 in scopegithubapp.com 328 · 328 in scopesemmle.com 63githubassets.com 24semmle.net 18lgtm.com 8githubwebhooks.net 1
172 names
| Name | Scope | First seen |
|---|---|---|
| redis1.ae.github.comdata | Not in the scope | 2026-11-14 |
| antivirus-s3.github.comdata | Not in the scope | 2026-11-14 |
| bucket.antivirus.github.comdata | Not in the scope | 2026-11-14 |
| s3.antivirus.github.comdata | Not in the scope | 2026-11-14 |
| db.api.github.comapi, data | Not in the scope | 2026-11-14 |
| elastic.api.github.comapi, data | Not in the scope | 2026-11-14 |
| ftp.api.github.comapi, data | Not in the scope | 2026-11-14 |
| mongo.api.github.comapi, data | Not in the scope | 2026-11-14 |
| mysql.api.github.comapi, data | Not in the scope | 2026-11-14 |
| upload.api.github.comapi, data | Not in the scope | 2026-11-14 |
| uploads.api.github.comapi, data | Not in the scope | 2026-11-14 |
| backup.github.comdata | Not in the scope | 2026-11-14 |
| backup-api.github.comapi, data | Not in the scope | 2026-11-14 |
| backup01.github.comdata | Not in the scope | 2026-11-14 |
| backup02.github.comdata | Not in the scope | 2026-11-14 |
| backup1.github.comdata | Not in the scope | 2026-11-14 |
| backup2.github.comdata | Not in the scope | 2026-11-14 |
| backup3.github.comdata | Not in the scope | 2026-11-14 |
| backup4.github.comdata | Not in the scope | 2026-11-14 |
| backup5.github.comdata | Not in the scope | 2026-11-14 |
| backup6.github.comdata | Not in the scope | 2026-11-14 |
| backups.github.comdata | Not in the scope | 2026-11-14 |
| s3.barnybug.github.comdata | Not in the scope | 2026-11-14 |
| ftp.blog.github.comdata | Not in the scope | 2026-11-14 |
| bucket.github.comdata | Not in the scope | 2026-11-14 |
| bucket-virus.github.comdata | Not in the scope | 2026-11-14 |
| covid19.bucket.github.comdata | Not in the scope | 2026-11-14 |
| sigmavirus24.bucket.github.comdata | Not in the scope | 2026-11-14 |
| s3.central.github.comdata | Not in the scope | 2026-11-14 |
| mongodb.classroom.github.comdata | Not in the scope | 2026-11-14 |
| upload.classroom.github.comdata | Not in the scope | 2026-11-14 |
| covid19-s3.github.comdata | Not in the scope | 2026-11-14 |
| bucket.covid19.github.comdata | Not in the scope | 2026-11-14 |
| s3.covid19.github.comdata | Not in the scope | 2026-11-14 |
| covid19bucket.github.comdata | Not in the scope | 2026-11-14 |
| ftp.cp.github.comdata | Not in the scope | 2026-11-14 |
| database.github.comdata | Not in the scope | 2026-11-14 |
| database1.github.comdata | Not in the scope | 2026-11-14 |
| database2.github.comdata | Not in the scope | 2026-11-14 |
| db.github.comdata | Not in the scope | 2026-11-14 |
| www.db.github.comdata | Not in the scope | 2026-11-14 |
| ftp.demo.github.comdata, test | Not in the scope | 2026-11-14 |
| ftp.desktop.github.comdata | Not in the scope | 2026-11-14 |
| ftp.dev.github.comdata, dev | Not in the scope | 2026-11-14 |
| django-mongodb-engine.github.comdata | Not in the scope | 2026-11-14 |
| bucket.docs.github.comdata | Not in the scope | 2026-11-14 |
| ftp.drvinceknight.github.comdata | Not in the scope | 2026-11-14 |
| mysql.drvinceknight.github.comdata | Not in the scope | 2026-11-14 |
| dump.github.comdata | Not in the scope | 2026-11-14 |
| db.education.github.comdata | Not in the scope | 2026-11-14 |
| elastic.education.github.comdata | Not in the scope | 2026-11-14 |
| ftp.education.github.comdata | Not in the scope | 2026-11-14 |
| mongo.education.github.comdata | Not in the scope | 2026-11-14 |
| mysql.education.github.comdata | Not in the scope | 2026-11-14 |
| upload.education.github.comdata | Not in the scope | 2026-11-14 |
| elastic.github.comdata | Not in the scope | 2026-11-14 |
| elasticsearch.github.comdata | Not in the scope | 2026-11-14 |
| mysql.example.github.comdata | Not in the scope | 2026-11-14 |
| files.github.comdata | Not in the scope | 2026-11-14 |
| autoconfig.files.github.comdata | Not in the scope | 2026-11-14 |
| autodiscover.files.github.comdata, mail | Not in the scope | 2026-11-14 |
| webdisk.files.github.comdata | Not in the scope | 2026-11-14 |
| www.files.github.comdata | Not in the scope | 2026-11-14 |
| files1.github.comdata | Not in the scope | 2026-11-14 |
| files2.github.comdata | Not in the scope | 2026-11-14 |
| files3.github.comdata | Not in the scope | 2026-11-14 |
| files4.github.comdata | Not in the scope | 2026-11-14 |
| ftp.forum.github.comdata | Not in the scope | 2026-11-14 |
| ftp.fr.github.comdata | Not in the scope | 2026-11-14 |
| ftp.github.comdata | Not in the scope | 2026-11-14 |
| ftp-eu.github.comdata | Not in the scope | 2026-11-14 |
| www.ftp.github.comdata | Not in the scope | 2026-11-14 |
| ftp01.github.comdata | Not in the scope | 2026-11-14 |
| ftp02.github.comdata | Not in the scope | 2026-11-14 |
| ftp1.github.comdata | Not in the scope | 2026-11-14 |
| ftp10.github.comdata | Not in the scope | 2026-11-14 |
| ftp12.github.comdata | Not in the scope | 2026-11-14 |
| ftp13.github.comdata | Not in the scope | 2026-11-14 |
| ftp14.github.comdata | Not in the scope | 2026-11-14 |
| ftp15.github.comdata | Not in the scope | 2026-11-14 |
| ftp2.github.comdata | Not in the scope | 2026-11-14 |
| ftp3.github.comdata | Not in the scope | 2026-11-14 |
| ftp4.github.comdata | Not in the scope | 2026-11-14 |
| ftp5.github.comdata | Not in the scope | 2026-11-14 |
| ftp6.github.comdata | Not in the scope | 2026-11-14 |
| ftp7.github.comdata | Not in the scope | 2026-11-14 |
| ftp8.github.comdata | Not in the scope | 2026-11-14 |
| ftp9.github.comdata | Not in the scope | 2026-11-14 |
| db.gist.github.comdata | Not in the scope | 2026-11-14 |
| elastic.gist.github.comdata | Not in the scope | 2026-11-14 |
| ftp.gist.github.comdata | Not in the scope | 2026-11-14 |
| mongo.gist.github.comdata | Not in the scope | 2026-11-14 |
| mongodb.gist.github.comdata | Not in the scope | 2026-11-14 |
| mysql.gist.github.comdata | Not in the scope | 2026-11-14 |
| upload.gist.github.comdata | Not in the scope | 2026-11-14 |
| db.help.github.comdata | Not in the scope | 2026-11-14 |
| elastic.help.github.comdata | Not in the scope | 2026-11-14 |
| mongo.help.github.comdata | Not in the scope | 2026-11-14 |
| mysql.help.github.comdata | Not in the scope | 2026-11-14 |
| holland-backup.github.comdata | Not in the scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.