Bug bounty program · HackerOne
Kubernetes
Most upvoted reports77
- #867699ValidNode disk DOS by writing to container /etc/hostsKubernetes · Denial of Service · 2020$1,000161votes
- #2701701ValidInjection in path parameter of Ingress-nginxKubernetes · Command and Code Injection · 2026 · High–91votes
- #1387366Validelections.k8s.io uses weak session secret key, may place elections at riskKubernetes · Cryptography · 2025 · High$25086votes
- #1580493ValidBypass validation parts in AWS IAM Authenticator for KubernetesKubernetes · Authentication · 2023$2,50068votes
- #2231019ValidCVE-2023-5528: Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodesKubernetes · Command and Code Injection · 2023$5,00067votes
- #746000ValidSubdomain Takeover Via via Dangling NS records on Amazon Route 53 http://api.e2e-kops-aws-canary.test-cncf-aws.canary.k8s.ioKubernetes · Authentication · 2020$25062votes
- #1728174ValidIngress nginx annotation injection causes arbitrary command executionKubernetes · Command and Code Injection · 2023$2,50057votes
- #1249583ValidAuthenticated kubernetes principal with restricted permissions can retrieve ingress-nginx serviceaccount token and secrets across all namespacesKubernetes · Access Control · 2021–55votes
- #1842829ValidPrivilege Escalation in kOps using GCE/GCP ProviderKubernetes · Access Control · 2023$2,50052votes
- #1544133ValidSSRF vulnerability can be exploited when a hijacked aggregated api server such as metrics-server returns 30XKubernetes · Server-Side Request Forgery · 2022$1,00051votes
Subdomains662
2 covered by the program's own scope · 0 first seen this week
Name suggestsAnything
662 names
| Name | Scope | First seen |
|---|---|---|
| 137mbk8s.gcr.io | Not in the scope | 2026-11-14 |
| 142mbk8s.gcr.io | Not in the scope | 2026-11-14 |
| 209mbk8s.gcr.io | Not in the scope | 2026-11-14 |
| 217mbk8s.gcr.io | Not in the scope | 2026-11-14 |
| 232mbk8s.gcr.io | Not in the scope | 2026-11-14 |
| v1.14.2k8s.gcr.io | Not in the scope | 2026-11-14 |
| 33mbk8s.gcr.io | Not in the scope | 2026-11-14 |
| 38.3mbk8s.gcr.io | Not in the scope | 2026-11-14 |
| _mta-sts.gcr.io | Not in the scope | 2026-11-14 |
| a.gcr.io | Not in the scope | 2026-11-14 |
| addon-resizerk8s.gcr.io | Not in the scope | 2026-11-14 |
| admin.gcr.ioadmin | Not in the scope | 2026-11-14 |
| allus.gcr.io | Not in the scope | 2026-11-14 |
| api.gcr.ioapi | Not in the scope | 2026-11-14 |
| app.gcr.io | Not in the scope | 2026-11-14 |
| appengine.gcr.io | Not in the scope | 2026-11-14 |
| asia.gcr.io | Not in the scope | 2026-11-14 |
| auth.gcr.ioauth | Not in the scope | 2026-11-14 |
| autoconfig.gcr.io | Not in the scope | 2026-11-14 |
| autodiscover.gcr.iomail | Not in the scope | 2026-11-14 |
| b.gcr.io | Not in the scope | 2026-11-14 |
| b2b.gcr.io | Not in the scope | 2026-11-14 |
| bbs.gcr.io | Not in the scope | 2026-11-14 |
| beta.gcr.iostaging | Not in the scope | 2026-11-14 |
| blog.gcr.io | Not in the scope | 2026-11-14 |
| bucket.gcr.iodata | Not in the scope | 2026-11-14 |
| builder.gcr.io | Not in the scope | 2026-11-14 |
| c.gcr.io | Not in the scope | 2026-11-14 |
| careers.gcr.io | Not in the scope | 2026-11-14 |
| cdn.gcr.io | Not in the scope | 2026-11-14 |
| cim.gcr.io | Not in the scope | 2026-11-14 |
| cim-api.gcr.ioapi | Not in the scope | 2026-11-14 |
| cim-api-dev.gcr.ioapi, dev | Not in the scope | 2026-11-14 |
| cim-api-qa.gcr.ioapi, test | Not in the scope | 2026-11-14 |
| cim-api-uat.gcr.ioapi, test | Not in the scope | 2026-11-14 |
| cim-dev.gcr.iodev | Not in the scope | 2026-11-14 |
| cim-qa.gcr.iotest | Not in the scope | 2026-11-14 |
| cim-service.gcr.io | Not in the scope | 2026-11-14 |
| cim-service-dev.gcr.iodev | Not in the scope | 2026-11-14 |
| cim-service-qa.gcr.iotest | Not in the scope | 2026-11-14 |
| cim-service-uat.gcr.iotest | Not in the scope | 2026-11-14 |
| cim-uat.gcr.iotest | Not in the scope | 2026-11-14 |
| citrix.gcr.iovpn | Not in the scope | 2026-11-14 |
| cloud.gcr.io | Not in the scope | 2026-11-14 |
| cname.gcr.io | Not in the scope | 2026-11-14 |
| my-company.com.gcr.io | Not in the scope | 2026-11-14 |
| cp.gcr.io | Not in the scope | 2026-11-14 |
| cpanel.gcr.ioadmin | Not in the scope | 2026-11-14 |
| crm.gcr.io | Not in the scope | 2026-11-14 |
| dataflow.gcr.io | Not in the scope | 2026-11-14 |
| de.gcr.io | Not in the scope | 2026-11-14 |
| demo.gcr.iotest | Not in the scope | 2026-11-14 |
| dev.gcr.iodev | Not in the scope | 2026-11-14 |
| dk8s.gcr.io | Not in the scope | 2026-11-14 |
| dnm.gcr.io | Not in the scope | 2026-11-14 |
| dns.gcr.io | Not in the scope | 2026-11-14 |
| dns1.gcr.io | Not in the scope | 2026-11-14 |
| dns2.gcr.io | Not in the scope | 2026-11-14 |
| docker.gcr.iotools | Not in the scope | 2026-11-14 |
| download.gcr.io | Not in the scope | 2026-11-14 |
| dyn.gcr.io | Not in the scope | 2026-11-14 |
| elastic.gcr.iodata | Not in the scope | 2026-11-14 |
| email.gcr.io | Not in the scope | 2026-11-14 |
| en.gcr.io | Not in the scope | 2026-11-14 |
| encodingeu.gcr.io | Not in the scope | 2026-11-14 |
| etcdk8s.gcr.io | Not in the scope | 2026-11-14 |
| eu.gcr.io | Not in the scope | 2026-11-14 |
| eu-mirror.gcr.io | Not in the scope | 2026-11-14 |
| exchange.gcr.iomail | Not in the scope | 2026-11-14 |
| fluentdstaging-k8s.gcr.iotools | Not in the scope | 2026-11-14 |
| forum.gcr.io | Not in the scope | 2026-11-14 |
| ftp.gcr.iodata | Not in the scope | 2026-11-14 |
| fw.gcr.io | Not in the scope | 2026-11-14 |
| git.gcr.iogit | Not in the scope | 2026-11-14 |
| gitlab.gcr.iogit | Not in the scope | 2026-11-14 |
| gke.gcr.io | Not in the scope | 2026-11-14 |
| go.gcr.io | Not in the scope | 2026-11-14 |
| gw.gcr.io | Not in the scope | 2026-11-14 |
| help.gcr.io | Not in the scope | 2026-11-14 |
| here.gcr.io | Not in the scope | 2026-11-14 |
| home.gcr.io | Not in the scope | 2026-11-14 |
| host.gcr.io | Not in the scope | 2026-11-14 |
| hostmaster.gcr.io | Not in the scope | 2026-11-14 |
| http.gcr.io | Not in the scope | 2026-11-14 |
| httpbin.gcr.io | Not in the scope | 2026-11-14 |
| images.gcr.io | Not in the scope | 2026-11-14 |
| imap.gcr.iomail | Not in the scope | 2026-11-14 |
| img.gcr.io | Not in the scope | 2026-11-14 |
| inbound.gcr.io | Not in the scope | 2026-11-14 |
| info.gcr.io | Not in the scope | 2026-11-14 |
| inventory.gcr.io | Not in the scope | 2026-11-14 |
| ip.gcr.io | Not in the scope | 2026-11-14 |
| ipaddressesisobjectendjobmetadatajobtemplatek8s.gcr.io | Not in the scope | 2026-11-14 |
| ipv6.gcr.io | Not in the scope | 2026-11-14 |
| k8s.gcr.iotools | In scope | 2026-11-14 |
| k8s-staging.gcr.iostaging, tools | Not in the scope | 2026-11-14 |
| dl.k8s.gcr.iotools | Not in the scope | 2026-11-14 |
| www.k8s.gcr.iotools | Not in the scope | 2026-11-14 |
| kbk8s.gcr.io | Not in the scope | 2026-11-14 |
| kube-apiserverk8s.gcr.iotools | Not in the scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.