Bug bounty program · HackerOne
Rockstar Games
Most upvoted reports106
- #639684ValidAnalysedThe return of the ＜Rockstar Games · Cross-site Scripting · 2019 · needs: a user account · Stored XSS$1,000576votes
- #463330ValidAccount Takeover using Linked Accounts due to lack of CSRF protectionRockstar Games · Cross-Site Request Forgery · 2019–238votes
- #488269ValidStealing Facebook OAuth Code Through Screenshot viewerRockstar Games · Information Disclosure · 2019–200votes
- #220852ValidXSS STORED AT socialclub.rockstargames.com (add friend request from profile attacker)Rockstar Games · Cross-site Scripting · 2021–194votes
- #507494Validxss on https://www.rockstargames.com/GTAOnline/jp/screens/Rockstar Games · Cross-site Scripting · 2020–159votes
- #1920908ValidAccess to the business emails of Rockstar Support agents through the support platformRockstar Games · Access Control · 2025 · Low$550151votes
- #210741ValidUnserialize leading to arbitrary PHP function invokeRockstar Games · Command and Code Injection · 2017–119votes
- #309531ValidStored XSS in Snapmatic + R★Editor commentsRockstar Games · Cross-site Scripting · 2018–118votes
- #901728ValidSocialClub Account Take Over Through Import Friends featureRockstar Games · Cross-Site Request Forgery · 2021–116votes
- #787160ValidReferer Leakage Vulnerability in socialclub.rockstargames.com/crew/ leads to FB'S OAuth token theft.Rockstar Games · Cross-Site Request Forgery · 2020–112votes
Subdomains496
481 covered by the program's own scope · 0 first seen this week
Name suggestsAnything
496 names
| Name | Scope | First seen |
|---|---|---|
| www.lifeinvader.com | Not in the scope | 2026-11-14 |
| 22da3d.rockstargames.com | In scope | 2026-11-14 |
| 5034118b6d9f602e-speed-uw2.rockstargames.com | In scope | 2026-11-14 |
| 96yna1fw54.rockstargames.com | In scope | 2026-11-14 |
| 987f803ce6c4aec6-speed-ew1.rockstargames.com | In scope | 2026-11-14 |
| activate.rockstargames.com | In scope | 2026-11-14 |
| admin-1.rockstargames.comadmin | In scope | 2026-11-14 |
| ads.rockstargames.com | In scope | 2026-11-14 |
| akapatch.rockstargames.com | In scope | 2026-11-14 |
| am0qz1fs5p.rockstargames.com | In scope | 2026-11-14 |
| approvals.rockstargames.com | In scope | 2026-11-14 |
| australian.rockstargames.com | In scope | 2026-11-14 |
| autodiscover.rockstargames.commail | In scope | 2026-11-14 |
| backtrace.rockstargames.com | In scope | 2026-11-14 |
| beaterator.rockstargames.com | In scope | 2026-11-14 |
| biggie.rockstargames.com | In scope | 2026-11-14 |
| bomgar.rockstargames.com | Listed out of scope | 2026-11-14 |
| dev.bp.rockstargames.comdev | In scope | 2026-11-14 |
| prod1.bp.rockstargames.com | In scope | 2026-11-14 |
| prod2.bp.rockstargames.com | In scope | 2026-11-14 |
| bugstar.rockstargames.com | In scope | 2026-11-14 |
| app.bugstar.rockstargames.com | In scope | 2026-11-14 |
| attachments.bugstar.rockstargames.com | In scope | 2026-11-14 |
| dev.bugstar.rockstargames.comdev | In scope | 2026-11-14 |
| dev2.bugstar.rockstargames.comdev | In scope | 2026-11-14 |
| playback.bugstar.rockstargames.com | In scope | 2026-11-14 |
| rest.bugstar.rockstargames.com | In scope | 2026-11-14 |
| services.bugstar.rockstargames.com | In scope | 2026-11-14 |
| cd5385c666318b90-speed-ue1.rockstargames.com | In scope | 2026-11-14 |
| cert.rockstargames.com | In scope | 2026-11-14 |
| cert-catalog-cloud.rockstargames.com | In scope | 2026-11-14 |
| cert-gamedownloads.rockstargames.com | In scope | 2026-11-14 |
| cert-locator-cloud.rockstargames.com | In scope | 2026-11-14 |
| cert-overlay.rockstargames.com | In scope | 2026-11-14 |
| cert-scauth.rockstargames.com | In scope | 2026-11-14 |
| checkout.rockstargames.com | In scope | 2026-11-14 |
| www.checkout.rockstargames.com | In scope | 2026-11-14 |
| cloud.rockstargames.com | In scope | 2026-11-14 |
| cert.cloud.rockstargames.com | In scope | 2026-11-14 |
| dev.cloud.rockstargames.comdev | In scope | 2026-11-14 |
| devlive.cloud.rockstargames.com | In scope | 2026-11-14 |
| cert.hosted.cloud.rockstargames.com | In scope | 2026-11-14 |
| dev.hosted.cloud.rockstargames.comdev | In scope | 2026-11-14 |
| devlive.hosted.cloud.rockstargames.com | In scope | 2026-11-14 |
| load.hosted.cloud.rockstargames.com | In scope | 2026-11-14 |
| prod.hosted.cloud.rockstargames.com | In scope | 2026-11-14 |
| rage.hosted.cloud.rockstargames.com | In scope | 2026-11-14 |
| soundstage.hosted.cloud.rockstargames.com | In scope | 2026-11-14 |
| stage-cert.hosted.cloud.rockstargames.comstaging | In scope | 2026-11-14 |
| stage-dev.hosted.cloud.rockstargames.comdev, staging | In scope | 2026-11-14 |
| stage-prod.hosted.cloud.rockstargames.comstaging | In scope | 2026-11-14 |
| load.cloud.rockstargames.com | In scope | 2026-11-14 |
| prod.cloud.rockstargames.com | In scope | 2026-11-14 |
| www.prod.cloud.rockstargames.com | In scope | 2026-11-14 |
| soundstage.cloud.rockstargames.com | In scope | 2026-11-14 |
| stage.cloud.rockstargames.comstaging | In scope | 2026-11-14 |
| stagecert.cloud.rockstargames.com | In scope | 2026-11-14 |
| stagedev.cloud.rockstargames.com | In scope | 2026-11-14 |
| stageprod.cloud.rockstargames.com | In scope | 2026-11-14 |
| cmk.rockstargames.com | In scope | 2026-11-14 |
| rockstargames.comwww.rockstargames.com | In scope | 2026-11-14 |
| connect.rockstargames.com | In scope | 2026-11-14 |
| corp.rockstargames.cominternal | In scope | 2026-11-14 |
| creative.rockstargames.com | In scope | 2026-11-14 |
| crypt.rockstargames.com | In scope | 2026-11-14 |
| cxapi.rockstargames.com | In scope | 2026-11-14 |
| dash.rockstargames.com | In scope | 2026-11-14 |
| dev.rockstargames.comdev | In scope | 2026-11-14 |
| dev-catalog-cloud.rockstargames.comdev | In scope | 2026-11-14 |
| dev-gamedownloads.rockstargames.comdev | In scope | 2026-11-14 |
| dev-int.rockstargames.comdev | In scope | 2026-11-14 |
| dev-locator-cloud.rockstargames.comdev | In scope | 2026-11-14 |
| dev-overlay.rockstargames.comdev | In scope | 2026-11-14 |
| dev-scauth.rockstargames.comdev | In scope | 2026-11-14 |
| dev-stage.rockstargames.comdev, staging | In scope | 2026-11-14 |
| socialclub.dev.rockstargames.comdev | In scope | 2026-11-14 |
| dev2.rockstargames.comdev | In scope | 2026-11-14 |
| devlive-catalog-cloud.rockstargames.com | In scope | 2026-11-14 |
| devlive-locator-cloud.rockstargames.com | In scope | 2026-11-14 |
| devlive-scauth.rockstargames.com | In scope | 2026-11-14 |
| devrws.rockstargames.com | In scope | 2026-11-14 |
| devstar.rockstargames.com | In scope | 2026-11-14 |
| discoverreceiver.rockstargames.com | In scope | 2026-11-14 |
| downloads.rockstargames.com | In scope | 2026-11-14 |
| downloads1.rockstargames.com | In scope | 2026-11-14 |
| emailcontent.rockstargames.com | Listed out of scope | 2026-11-14 |
| employee.rockstargames.cominternal | In scope | 2026-11-14 |
| ewr-gtm.rockstargames.com | In scope | 2026-11-14 |
| facebook.rockstargames.com | In scope | 2026-11-14 |
| faspex.rockstargames.com | Listed out of scope | 2026-11-14 |
| fastly.rockstargames.com | In scope | 2026-11-14 |
| ftp2.rockstargames.comdata | In scope | 2026-11-14 |
| fw.rockstargames.com | In scope | 2026-11-14 |
| gamedownloads.rockstargames.com | In scope | 2026-11-14 |
| prod.gamespy.rockstargames.com | In scope | 2026-11-14 |
| german.rockstargames.com | In scope | 2026-11-14 |
| github.rockstargames.comgit | In scope | 2026-11-14 |
| graph.rockstargames.com | In scope | 2026-11-14 |
| graph-eaa.rockstargames.com | In scope | 2026-11-14 |
| dev.graph.rockstargames.comdev | In scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.