Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
27
Disclosed reports
72
Subdomains
23,159
Vendor on CyberSIXT
Reddit (1 CVE, 0 exploited)

Most upvoted reports72

All reports
Most upvoted reports of Reddit
ReportWeaknessDisclosedBountyVotes
One-click account hijack for anyone using Apple sign-in with Reddit, due to response-type switch + leaking href to XSS on www.redditmedia.comAnalysed#1567186Access Control2022-08-02–509
[accounts.reddit.com] Redirect parameter allows for XSSAnalysed#1962645Cross-site Scripting2023-05-18$5,000394
Blind SSRF to internal services in matrix preview_link APIAnalysed#1960765Server-Side Request Forgery2023-04-26$6,000344
Exposed proxy allows to access internal reddit domainsAnalysed#2967634Access Control2025-02-24$7,500296
RichText parser vulnerability in scheduled posts allows XSSAnalysed#1930763Cross-site Scripting2023-04-20$5,000280
Deleting all DMs on RedditGifts.comAnalysed#1213237Insecure Direct Object Reference2021-10-21$5,000267
Infromation Disclosure To Use of Hard-coded Cryptographic Key#2353237Cryptography2024-02-06–238
XSS via Mod Log Removed PostsAnalysed#1504410Cross-site Scripting2022-03-10–218
IDOR allows an attacker to modify the links of any userAnalysed#1661113Insecure Direct Object Reference2022-09-30–208
Able to bypass email verification and change email to any other user emailAnalysed#1551176Access Control2022-05-06$5,000200

Subdomains23,159

Subdomains of Reddit
NameScopeFirst seen
akamai-test.reddit.comtestIn scope2026-11-14
akamai-test-origin.reddit.comtestIn scope2026-11-14
api-test.reddit.comapi, testIn scope2026-11-14
cim-api-qa.reddit.comapi, testIn scope2026-11-14
cim-api-uat.reddit.comapi, testIn scope2026-11-14
cim-data-quality-qa.reddit.comtestIn scope2026-11-14
covid19test.reddit.comtestIn scope2026-11-14
demo.reddit.comtestIn scope2026-11-14
autoconfig.demo.reddit.comtestIn scope2026-11-14
autodiscover.demo.reddit.commail, testIn scope2026-11-14
ftp.demo.reddit.comdata, testIn scope2026-11-14
ipv4.demo.reddit.comtestIn scope2026-11-14
m.demo.reddit.comtestIn scope2026-11-14
mail.demo.reddit.commail, testIn scope2026-11-14
ns.demo.reddit.comtestIn scope2026-11-14
webdisk.demo.reddit.comtestIn scope2026-11-14
webmail.demo.reddit.commail, testIn scope2026-11-14
www.demo.reddit.comtestIn scope2026-11-14
demo01.reddit.comtestIn scope2026-11-14
demo02.reddit.comtestIn scope2026-11-14
demo1.reddit.comtestIn scope2026-11-14
www.demo1.reddit.comtestIn scope2026-11-14
demo10.reddit.comtestIn scope2026-11-14
demo11.reddit.comtestIn scope2026-11-14
demo12.reddit.comtestIn scope2026-11-14
demo13.reddit.comtestIn scope2026-11-14
demo14.reddit.comtestIn scope2026-11-14
demo15.reddit.comtestIn scope2026-11-14
demo16.reddit.comtestIn scope2026-11-14
demo17.reddit.comtestIn scope2026-11-14
demo18.reddit.comtestIn scope2026-11-14
demo19.reddit.comtestIn scope2026-11-14
demo2.reddit.comtestIn scope2026-11-14
www.demo2.reddit.comtestIn scope2026-11-14
demo20.reddit.comtestIn scope2026-11-14
demo21.reddit.comtestIn scope2026-11-14
demo3.reddit.comtestIn scope2026-11-14
www.demo3.reddit.comtestIn scope2026-11-14
demo4.reddit.comtestIn scope2026-11-14
demo5.reddit.comtestIn scope2026-11-14
demo6.reddit.comtestIn scope2026-11-14
demo7.reddit.comtestIn scope2026-11-14
demo8.reddit.comtestIn scope2026-11-14
demo9.reddit.comtestIn scope2026-11-14
forum-test.reddit.comtestIn scope2026-11-14
gcom-product-find-qa.reddit.comtestIn scope2026-11-14
gws-api-sandbox.reddit.comapi, testIn scope2026-11-14
gws-qa.reddit.comtestIn scope2026-11-14
gws-rds-external-readonly-uat.reddit.comtestIn scope2026-11-14
gws-uat.reddit.comtestIn scope2026-11-14
idp-test.reddit.comauth, testIn scope2026-11-14
ldap-test.reddit.comtestIn scope2026-11-14
qa.legacy.reddit.comlegacy, testIn scope2026-11-14
m-test.reddit.comtestIn scope2026-11-14
test.m.reddit.comtestIn scope2026-11-14
mobile-test.reddit.comtestIn scope2026-11-14
demo.old.reddit.comlegacy, testIn scope2026-11-14
test.old.reddit.comlegacy, testIn scope2026-11-14
qa.reddit.comtestIn scope2026-11-14
qa-partner-portal.reddit.comtestIn scope2026-11-14
qa-verio-portal.reddit.comtestIn scope2026-11-14
www.qa.reddit.comtestIn scope2026-11-14
sandbox.reddit.comtestIn scope2026-11-14
autoconfig.sandbox.reddit.comtestIn scope2026-11-14
autodiscover.sandbox.reddit.commail, testIn scope2026-11-14
webdisk.sandbox.reddit.comtestIn scope2026-11-14
www.sandbox.reddit.comtestIn scope2026-11-14
sandbox1.reddit.comtestIn scope2026-11-14
sandbox2.reddit.comtestIn scope2026-11-14
searchportal-qa.reddit.comtestIn scope2026-11-14
qa.secure.reddit.comtestIn scope2026-11-14
test.secure.reddit.comtestIn scope2026-11-14
test.shop.reddit.comtestIn scope2026-11-14
sit.reddit.comtestIn scope2026-11-14
test.support.reddit.comtestIn scope2026-11-14
demo.technewstoday.reddit.comtestIn scope2026-11-14
test.technewstoday.reddit.comtestIn scope2026-11-14
test.reddit.comtestIn scope2026-11-14
test-coronavirus.reddit.comtestIn scope2026-11-14
test-m.reddit.comtestIn scope2026-11-14
test-www.reddit.comtestIn scope2026-11-14
admin.test.reddit.comadmin, testIn scope2026-11-14
api.test.reddit.comapi, testIn scope2026-11-14
autoconfig.test.reddit.comtestIn scope2026-11-14
autodiscover.test.reddit.commail, testIn scope2026-11-14
coronavirusca.test.reddit.comtestIn scope2026-11-14
ftp.test.reddit.comdata, testIn scope2026-11-14
m.test.reddit.comtestIn scope2026-11-14
mail.test.reddit.commail, testIn scope2026-11-14
ns.test.reddit.comtestIn scope2026-11-14
webdisk.test.reddit.comtestIn scope2026-11-14
webmail.test.reddit.commail, testIn scope2026-11-14
www.test.reddit.comtestIn scope2026-11-14
test001.reddit.comtestIn scope2026-11-14
test002.reddit.comtestIn scope2026-11-14
test007.reddit.comtestIn scope2026-11-14
test01.reddit.comtestIn scope2026-11-14
test02.reddit.comtestIn scope2026-11-14
test03.reddit.comtestIn scope2026-11-14
test04.reddit.comtestIn scope2026-11-14

23,064 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.