Bug bounty program · HackerOne
Most upvoted reports15
- #1046630ValidOne Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comLogitech · Cross-Site Request Forgery · 2021–99votes
- #1070510ValidManipulating response leads to free access to Streamlabs PrimeLogitech · Input Validation and Logic · 2021–80votes
- #1049012ValidStored XSS in [https://streamlabs.com/dashboard#/*goal] pagesLogitech · Cross-site Scripting · 2020–68votes
- #983070ValidIDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldLogitech · Insecure Direct Object Reference · 2020–61votes
- #1178239Validsession takeover via open protocol redirection on streamlabs.comLogitech · Open Redirect · 2021$20050votes
- #1049360ValidCSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Logitech · Cross-Site Request Forgery · 2020–49votes
- #1108418ValidSSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotLogitech · Server-Side Request Forgery · 2021$20041votes
- #1174527ValidPrivilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Logitech · Access Control · 2021–38votes
- #1072277ValidHost Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingLogitech · Input Validation and Logic · 2021–37votes
- #1072893ValidSensitive information disclosure to shared access user via streamlabs platform apiLogitech · Information Disclosure · 2021$20036votes
Subdomains7,102
1,405 covered by the program's own scope · 0 first seen this week
Roots:challonge.com 5,450logitech.com 638 · 638 in scopelogitech.io 291 · 291 in scopelogi.com 176 · 176 in scopestreamlabs.com 144 · 144 in scopeastrogaming.com 72 · 1 in scopemyharmony.com 63 · 63 in scopeultimateears.com 51 · 1 in scopelogitechg.com 42 · 1 in scopelogitech.com.cn 32 · 1 in scopemysqueezebox.com 23 · 23 in scopelogitechstore.com.br 18 · 1 in scopelogitechmusic.com 17 · 17 in scopejaybirdsport.com 16 · 1 in scopeslimdevices.com 16 · 16 in scopeharmonyremote.com 14 · 14 in scopeplaymaster.gg 11teambeyond.net 9lukwerks.com 6 · 6 in scopeuesmartradio.com 6 · 6 in scopelogitech-partner.com 3 · 1 in scopelogitech-channel-marketing.com 2 · 2 in scopelogitechauthorization.com 1 · 1 in scopeultimateearsuniversity.com 1 · 1 in scopecognitiveperformer.com 0
Name suggestsAnything
7,102 names
| Name | Scope | First seen |
|---|---|---|
| answers.astrogaming.com | Not in the scope | 2026-11-14 |
| apollo.astrogaming.com | Not in the scope | 2026-11-14 |
| autodiscover.astrogaming.commail | Not in the scope | 2026-11-14 |
| betacustomizer.astrogaming.com | Not in the scope | 2026-11-14 |
| blog.astrogaming.com | Not in the scope | 2026-11-14 |
| www.blog.astrogaming.com | Not in the scope | 2026-11-14 |
| blogorigin.astrogaming.com | Not in the scope | 2026-11-14 |
| buy.astrogaming.com | Not in the scope | 2026-11-14 |
| cart.astrogaming.com | Not in the scope | 2026-11-14 |
| cdn.astrogaming.com | Not in the scope | 2026-11-14 |
| cdn2.astrogaming.com | Not in the scope | 2026-11-14 |
| dev.astrogaming.comdev | Not in the scope | 2026-11-14 |
| dev01.astrogaming.comdev | Not in the scope | 2026-11-14 |
| dev02.astrogaming.comdev | Not in the scope | 2026-11-14 |
| dev03.astrogaming.comdev | Not in the scope | 2026-11-14 |
| dev04.astrogaming.comdev | Not in the scope | 2026-11-14 |
| dev05.astrogaming.comdev | Not in the scope | 2026-11-14 |
| dev06.astrogaming.comdev | Not in the scope | 2026-11-14 |
| dev07.astrogaming.comdev | Not in the scope | 2026-11-14 |
| dev08.astrogaming.comdev | Not in the scope | 2026-11-14 |
| dev09.astrogaming.comdev | Not in the scope | 2026-11-14 |
| dev10.astrogaming.comdev | Not in the scope | 2026-11-14 |
| development.astrogaming.comdev | Not in the scope | 2026-11-14 |
| dialin.astrogaming.com | Not in the scope | 2026-11-14 |
| digitalriver.astrogaming.com | Not in the scope | 2026-11-14 |
| email.astrogaming.com | Not in the scope | 2026-11-14 |
| m.email.astrogaming.com | Not in the scope | 2026-11-14 |
| r5.email.astrogaming.com | Not in the scope | 2026-11-14 |
| r6.email.astrogaming.com | Not in the scope | 2026-11-14 |
| res.email.astrogaming.com | Not in the scope | 2026-11-14 |
| t.email.astrogaming.com | Not in the scope | 2026-11-14 |
| enews.astrogaming.com | Not in the scope | 2026-11-14 |
| forums.astrogaming.com | Not in the scope | 2026-11-14 |
| ftp.astrogaming.comdata | Not in the scope | 2026-11-14 |
| games.astrogaming.com | Not in the scope | 2026-11-14 |
| help.astrogaming.com | Not in the scope | 2026-11-14 |
| imap.astrogaming.commail | Not in the scope | 2026-11-14 |
| lyncdiscover.astrogaming.com | Not in the scope | 2026-11-14 |
| lyncdiscoverinternal.astrogaming.com | Not in the scope | 2026-11-14 |
| mail.astrogaming.commail | Not in the scope | 2026-11-14 |
| mail1.astrogaming.commail | Not in the scope | 2026-11-14 |
| m.mail1.astrogaming.commail | Not in the scope | 2026-11-14 |
| r7.mail1.astrogaming.commail | Not in the scope | 2026-11-14 |
| res.mail1.astrogaming.commail | Not in the scope | 2026-11-14 |
| t.mail1.astrogaming.commail | Not in the scope | 2026-11-14 |
| media.astrogaming.com | Not in the scope | 2026-11-14 |
| meet.astrogaming.com | Not in the scope | 2026-11-14 |
| metrics.astrogaming.commonitoring | Not in the scope | 2026-11-14 |
| origin.astrogaming.com | Not in the scope | 2026-11-14 |
| pop.astrogaming.com | Not in the scope | 2026-11-14 |
| prod.astrogaming.com | Not in the scope | 2026-11-14 |
| qa.astrogaming.comtest | Not in the scope | 2026-11-14 |
| register.astrogaming.com | Not in the scope | 2026-11-14 |
| resource.astrogaming.com | Not in the scope | 2026-11-14 |
| reviews.astrogaming.com | Not in the scope | 2026-11-14 |
| server.astrogaming.com | Not in the scope | 2026-11-14 |
| share.astrogaming.com | Not in the scope | 2026-11-14 |
| www.share.astrogaming.com | Not in the scope | 2026-11-14 |
| sip.astrogaming.com | Not in the scope | 2026-11-14 |
| smetrics.astrogaming.com | Not in the scope | 2026-11-14 |
| smtp.astrogaming.commail | Not in the scope | 2026-11-14 |
| smtp2.astrogaming.commail | Not in the scope | 2026-11-14 |
| stackable.astrogaming.com | Not in the scope | 2026-11-14 |
| staging.astrogaming.comstaging | Not in the scope | 2026-11-14 |
| support.astrogaming.com | Not in the scope | 2026-11-14 |
| update.astrogaming.com | Not in the scope | 2026-11-14 |
| www.update.astrogaming.com | Not in the scope | 2026-11-14 |
| us.astrogaming.com | Not in the scope | 2026-11-14 |
| webanalytics.astrogaming.com | Not in the scope | 2026-11-14 |
| webtarget.astrogaming.com | Not in the scope | 2026-11-14 |
| ws.astrogaming.com | Not in the scope | 2026-11-14 |
| www.astrogaming.com | In scope | 2026-11-14 |
| gmindustries.0-44.challonge.com | Not in the scope | 2026-11-14 |
| remoteaccess.0-44.challonge.com | Not in the scope | 2026-11-14 |
| shop1366036045507.0-44.challonge.com | Not in the scope | 2026-11-14 |
| 002.challonge.com | Not in the scope | 2026-11-14 |
| 00nation.challonge.com | Not in the scope | 2026-11-14 |
| 05326018681493397268238810930960822213241666313001.challonge.com | Not in the scope | 2026-11-14 |
| 07d42897b8772a56b34e15ec.challonge.com | Not in the scope | 2026-11-14 |
| 08f4e6939ee245b7c59c9a55.challonge.com | Not in the scope | 2026-11-14 |
| 0906daiki-com-gladwell.challonge.com | Not in the scope | 2026-11-14 |
| 0a86941c71cb943b5bc5bcd7.challonge.com | Not in the scope | 2026-11-14 |
| 0dd77b271cbb1d82c1ae841e.challonge.com | Not in the scope | 2026-11-14 |
| 0f5e6862ecf81d3784139f8d.challonge.com | Not in the scope | 2026-11-14 |
| 0oz.challonge.com | Not in the scope | 2026-11-14 |
| 1-2smash.challonge.com | Not in the scope | 2026-11-14 |
| occ-0-921-923.1.challonge.com | Not in the scope | 2026-11-14 |
| 11111111111111111111111.challonge.com | Not in the scope | 2026-11-14 |
| 11178b81218c2d2bb8e43a2a.challonge.com | Not in the scope | 2026-11-14 |
| 111rcacs.challonge.com | Not in the scope | 2026-11-14 |
| 113a5157c11f3d1d579d6556.challonge.com | Not in the scope | 2026-11-14 |
| 118.challonge.com | Not in the scope | 2026-11-14 |
| 11d4155c8503010872f23e5e.challonge.com | Not in the scope | 2026-11-14 |
| 123456.challonge.com | Not in the scope | 2026-11-14 |
| 123456420mixer.challonge.com | Not in the scope | 2026-11-14 |
| 1250eloduelcups.challonge.com | Not in the scope | 2026-11-14 |
| 125fps.challonge.com | Not in the scope | 2026-11-14 |
| 125fpstemp.challonge.com | Not in the scope | 2026-11-14 |
| 12daves.challonge.com | Not in the scope | 2026-11-14 |
| 1320so.challonge.com | Not in the scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.