Skip to content
Connect AISign inSign up free

Bug bounty program

MA

Mars

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
113
Disclosed reports
68
Subdomains
3,528

Most upvoted reports68

All reports
Most upvoted reports of Mars
ReportWeaknessDisclosedBountyVotes
Account Takeover in Password Reset FunctionAnalysed#3228888Authentication2025-09-02–105
Reflected HTML Injection via contact (faq) search parameter on ██████████Analysed#2587101Cross-site Scripting2024-11-25–103
█████████ when adding branches to your accountAnalysed#2756402Insecure Direct Object Reference2024-11-26–98
Reflected HTML Injection via contact (faq) search parameter on ███]=Analysed#2578985Cross-site Scripting2024-11-25–82
Unrestricted File Upload at ██████████Analysed#2357778File and Path Handling2024-02-19–78
sqli on █████████ search functionalityAnalysed#2446550SQL Injection2024-06-25–72
CVE-█████-35813 in █████Analysed#2200329File and Path Handling2026-02-24–71
RXSS on ██████ via customerId parameterAnalysed#3126603Cross-site Scripting2025-07-28–71
Unauthenticated Sensitive Information Disclosure on █████████ CVE-2021-38314Analysed#1452774Information Disclosure2025-09-02–67
Upload profile photo and Pets addition - IDORAnalysed#2393021Insecure Direct Object Reference2024-11-21–66

Subdomains3,528

Root
Scope
Name suggests
First seen
Text file3,528 names
Subdomains of Mars
NameScopeFirst seen
www.sqa02.launch.banfield.comIn scope2026-11-14
wildcard.launch.banfield.comIn scope2026-11-14
launchpad.banfield.comIn scope2026-11-14
lb-prod-ecm-reportrouting.banfield.comIn scope2026-11-14
www.lb-prod-ecm-reportrouting.banfield.comIn scope2026-11-14
learning-dev-owp.banfield.comdevIn scope2026-11-14
learning-owp.banfield.comIn scope2026-11-14
learningdev-owp.banfield.comIn scope2026-11-14
lync.banfield.comIn scope2026-11-14
lyncdiscover.banfield.comIn scope2026-11-14
m1lnces01.banfield.comIn scope2026-11-14
m1scs01.banfield.comIn scope2026-11-14
www.m1scs01.banfield.comIn scope2026-11-14
mail.banfield.commailIn scope2026-11-14
click.mail.banfield.commailIn scope2026-11-14
cloud.mail.banfield.commailIn scope2026-11-14
image.mail.banfield.commailIn scope2026-11-14
view.mail.banfield.commailIn scope2026-11-14
mail01.banfield.commailIn scope2026-11-14
mail02.banfield.commailIn scope2026-11-14
mailer.banfield.comIn scope2026-11-14
click.mailer.banfield.comIn scope2026-11-14
image.mailer.banfield.comIn scope2026-11-14
mta.mailer.banfield.comIn scope2026-11-14
pages.mailer.banfield.comIn scope2026-11-14
view.mailer.banfield.comIn scope2026-11-14
metc.banfield.comIn scope2026-11-14
mfaenroll.banfield.comIn scope2026-11-14
www.mfaenroll.banfield.comIn scope2026-11-14
mgs.banfield.comIn scope2026-11-14
www.mgs.banfield.comIn scope2026-11-14
mi1.banfield.comIn scope2026-11-14
mi3.banfield.comIn scope2026-11-14
misync1.banfield.comIn scope2026-11-14
mmipor040.banfield.comIn scope2026-11-14
www.mmipor040.banfield.comIn scope2026-11-14
myapi.banfield.comIn scope2026-11-14
int6.newbanfieldexchange.banfield.comIn scope2026-11-14
int6.newbanfieldfoundation.banfield.comIn scope2026-11-14
ns1.banfield.comIn scope2026-11-14
ns2.banfield.comIn scope2026-11-14
ods.banfield.comIn scope2026-11-14
outlook.banfield.comIn scope2026-11-14
dr.outlook.banfield.comIn scope2026-11-14
pri.outlook.banfield.comIn scope2026-11-14
pagerules.banfield.comIn scope2026-11-14
password.banfield.comIn scope2026-11-14
payeezy.banfield.comIn scope2026-11-14
www.payeezy.banfield.comIn scope2026-11-14
payrecov.banfield.comIn scope2026-11-14
point.banfield.comIn scope2026-11-14
www.point.banfield.comIn scope2026-11-14
pointlab.banfield.comIn scope2026-11-14
www.pointlab.banfield.comIn scope2026-11-14
precheckin.banfield.comIn scope2026-11-14
retriever.banfield.comIn scope2026-11-14
reviews.banfield.comIn scope2026-11-14
scripts.banfield.comIn scope2026-11-14
scripts-dev.banfield.comdevIn scope2026-11-14
scripts-staging.banfield.comstagingIn scope2026-11-14
servicedesk.banfield.comIn scope2026-11-14
sfcc-bglg001.banfield.comIn scope2026-11-14
sfcc-bglg002.banfield.comIn scope2026-11-14
sfcc-bglg003.banfield.comIn scope2026-11-14
sfcc-bglg004.banfield.comIn scope2026-11-14
sfcc-bglg005.banfield.comIn scope2026-11-14
es.sfcc-performance.banfield.comIn scope2026-11-14
sfcc-qa.banfield.comtestIn scope2026-11-14
sfcc-uat.banfield.comtestIn scope2026-11-14
es.sfcc-uat.banfield.comtestIn scope2026-11-14
www.sfcc-uat.banfield.comtestIn scope2026-11-14
shop.banfield.comIn scope2026-11-14
es.shop.banfield.comIn scope2026-11-14
www.es.shop.banfield.comIn scope2026-11-14
www.shop.banfield.comIn scope2026-11-14
sip.banfield.comIn scope2026-11-14
smetc.banfield.comIn scope2026-11-14
www.smetc.banfield.comIn scope2026-11-14
spf1.banfield.comIn scope2026-11-14
spf1wecomply.banfield.comIn scope2026-11-14
spf2.banfield.comIn scope2026-11-14
spf2exacttrgt.banfield.comIn scope2026-11-14
spf3.banfield.comIn scope2026-11-14
spftop1.banfield.comIn scope2026-11-14
spprod.banfield.comIn scope2026-11-14
www.spprod.banfield.comIn scope2026-11-14
sptest.banfield.comIn scope2026-11-14
www.sptest.banfield.comIn scope2026-11-14
sptest1.banfield.comIn scope2026-11-14
www.sptest1.banfield.comIn scope2026-11-14
stg.banfield.comstagingIn scope2026-11-14
supplier.banfield.comIn scope2026-11-14
tms.banfield.comIn scope2026-11-14
ts.banfield.comIn scope2026-11-14
www.ts.banfield.comIn scope2026-11-14
tsgateway001.banfield.comIn scope2026-11-14
www.tsgateway001.banfield.comIn scope2026-11-14
tsgateway002.banfield.comIn scope2026-11-14
www.tsgateway002.banfield.comIn scope2026-11-14
vcare.banfield.comIn scope2026-11-14

3,528 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated