Skip to content
Connect AISign inSign up free

Bug bounty program

LY

Lyst

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
7
Disclosed reports
9
Subdomains
1,624

Most upvoted reports9

Most upvoted reports of Lyst
ReportWeaknessDisclosedBountyVotes
Subdomain takeover of storybook.lystit.comAnalysed#779442Access Control2020-01-22$1,000163
Web Cache poisoning attack leads to User information Disclosure and moreAnalysed#631589Misconfiguration and Insecure Design2022-03-22–45
SSRF at iris.lystit.com#206894Server-Side Request Forgery2017-10-18–21
CSRF - Adding unlimited number of saved items via GET request#205953Cross-Site Request Forgery2017-09-28$15019
Site configured improperly at subdomain of lyst.co.uk#208480Misconfiguration and Insecure Design2017-03-29$10019
[https://█████████/]&&[https://█████████/] Open Redirection#537047Open Redirect2022-03-22–18
DOM XSS on http://talks.lystit.com#1031644Cross-site Scripting2021-02-09$10015
Mixed Active content issue on https://www.lyst.com#207329Misconfiguration and Insecure Design2017-02-22–12
Bypassing one-time checkout router page (revealing payment information)#271176Information Disclosure2018-05-10–12

Subdomains1,624

Root
Scope:In scope
Name suggests
First seen
Text fileClear filters1,623 names
Subdomains of Lyst
NameScopeFirst seen
chef-master.lyst.coIn scope2026-11-14
drome-1.lyst.coIn scope2026-11-14
jenkins-master.lyst.cociIn scope2026-11-14
mother.lyst.coIn scope2026-11-14
office.lyst.coIn scope2026-11-14
sentry.lyst.comonitoringIn scope2026-11-14
0.uk.lyst.coIn scope2026-11-14
www.lyst.coIn scope2026-11-14
14.lyst.comIn scope2026-11-14
6jxe1r0v3l.lyst.comIn scope2026-11-14
7sa1unz96j.lyst.comIn scope2026-11-14
api.lyst.comapiIn scope2026-11-14
b.lyst.comIn scope2026-11-14
bclicks.lyst.comIn scope2026-11-14
blog.lyst.comIn scope2026-11-14
bnc3.lyst.comIn scope2026-11-14
boomerang.lyst.comIn scope2026-11-14
brand-product-anatomy-cf.lyst.comIn scope2026-11-14
business.lyst.comIn scope2026-11-14
checkout.lyst.comIn scope2026-11-14
checkout-eks.lyst.comIn scope2026-11-14
clicks.lyst.comIn scope2026-11-14
commonplaces.lyst.comIn scope2026-11-14
225.79-161-65.customer.lyst.comIn scope2026-11-14
134.81-166-62.customer.lyst.comIn scope2026-11-14
developer.lyst.comIn scope2026-11-14
developers.lyst.comIn scope2026-11-14
email.lyst.comIn scope2026-11-14
o2.email.lyst.comIn scope2026-11-14
gif.lyst.comIn scope2026-11-14
iazwzp.lyst.comIn scope2026-11-14
insights.lyst.comIn scope2026-11-14
internal.lyst.cominternalIn scope2026-11-14
life.lyst.comIn scope2026-11-14
making.lyst.comIn scope2026-11-14
marketing.lyst.comIn scope2026-11-14
bz269.marketing.lyst.comIn scope2026-11-14
master.lyst.comIn scope2026-11-14
moderation.lyst.comIn scope2026-11-14
news.lyst.comIn scope2026-11-14
news-staging.lyst.comstagingIn scope2026-11-14
newsitemaps.lyst.comIn scope2026-11-14
origin-news.lyst.comIn scope2026-11-14
origin-www.lyst.comIn scope2026-11-14
r.lyst.comIn scope2026-11-14
s.lyst.comIn scope2026-11-14
s5.lyst.comIn scope2026-11-14
send.lyst.comIn scope2026-11-14
s1.send.lyst.comIn scope2026-11-14
s2.send.lyst.comIn scope2026-11-14
s3.send.lyst.comdataIn scope2026-11-14
sitemaps.lyst.comIn scope2026-11-14
sitemaps-glue.lyst.comIn scope2026-11-14
the-lyst-index-q124-cf.lyst.comIn scope2026-11-14
bz270.transactional.lyst.comIn scope2026-11-14
w.lyst.comIn scope2026-11-14
winit.lyst.comIn scope2026-11-14
ww.lyst.comIn scope2026-11-14
www.lyst.comIn scope2026-11-14
www-alias.lyst.comIn scope2026-11-14
wwww.lyst.comIn scope2026-11-14
year-in-fashion-2023-cf.lyst.comIn scope2026-11-14
zendesk.lyst.comIn scope2026-11-14
abacus.lystit.comIn scope2026-11-14
agif.lystit.comIn scope2026-11-14
alertmanager.lystit.commonitoringIn scope2026-11-14
alertmanager-internal.lystit.cominternal, monitoringIn scope2026-11-14
alpha.lystit.comstagingIn scope2026-11-14
argocd.lystit.comciIn scope2026-11-14
argowf.lystit.comIn scope2026-11-14
argowf-eks-1-32.lystit.comIn scope2026-11-14
argowf-eks-1-36.lystit.comIn scope2026-11-14
argowf-eks-ci-1-32.lystit.comciIn scope2026-11-14
argowf-eks-website-1-32.lystit.comIn scope2026-11-14
argowf-eks-website-1-36.lystit.comIn scope2026-11-14
ax-webhook-receiver.lystit.comIn scope2026-11-14
backstage.lystit.comIn scope2026-11-14
boomerang.lystit.comIn scope2026-11-14
bork.lystit.comIn scope2026-11-14
botify-test.lystit.comtestIn scope2026-11-14
branch-io-feed-pr-81-web-cloudflare-alb-eks-1-26.lystit.comIn scope2026-11-14
branch-io-feed-pr-86-web-cloudflare-alb-eks-1-26.lystit.comIn scope2026-11-14
branch-io-feed-web.lystit.comIn scope2026-11-14
braze-api.lystit.comapiIn scope2026-11-14
bridge.lystit.comIn scope2026-11-14
catalog-admin.lystit.comadminIn scope2026-11-14
catalog-pr-2459-admin-web-cloudflare-alb-eks-1-26.lystit.comadminIn scope2026-11-14
catalog-pr-2463-admin-web-cloudflare-alb-eks-1-26.lystit.comadminIn scope2026-11-14
cdn.lystit.comIn scope2026-11-14
cdn1.lystit.comIn scope2026-11-14
cdn2.lystit.comIn scope2026-11-14
cdn3.lystit.comIn scope2026-11-14
cdn4.lystit.comIn scope2026-11-14
cdna.lystit.comIn scope2026-11-14
cdnb.lystit.comIn scope2026-11-14
cdnc.lystit.comIn scope2026-11-14
cdnd.lystit.comIn scope2026-11-14
cdni.lystit.comIn scope2026-11-14
cdnj.lystit.comIn scope2026-11-14
cdnk.lystit.comIn scope2026-11-14

1,623 names are covered by the program's own scope; 26 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated