Skip to content
Connect AISign inSign up free

Bug bounty program

RG

Rockstar Games

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
9
Disclosed reports
106
Subdomains
496
Vendor on CyberSIXT
Rockstar Games (2 CVEs, 0 exploited)

Most upvoted reports106

All reports
Most upvoted reports of Rockstar Games
ReportWeaknessDisclosedBountyVotes
The return of the ＜Analysed#639684Cross-site Scripting2019-09-24$1,000576
Account Takeover using Linked Accounts due to lack of CSRF protectionAnalysed#463330Cross-Site Request Forgery2019-02-20–238
Stealing Facebook OAuth Code Through Screenshot viewerAnalysed#488269Information Disclosure2019-03-05–200
XSS STORED AT socialclub.rockstargames.com (add friend request from profile attacker)Analysed#220852Cross-site Scripting2021-06-03–194
xss on https://www.rockstargames.com/GTAOnline/jp/screens/Analysed#507494Cross-site Scripting2020-06-12–159
Access to the business emails of Rockstar Support agents through the support platformAnalysed#1920908Access Control2025-10-02$550151
Unserialize leading to arbitrary PHP function invokeAnalysed#210741Command and Code Injection2017-12-13–119
Stored XSS in Snapmatic + R★Editor commentsAnalysed#309531Cross-site Scripting2018-04-19–118
SocialClub Account Take Over Through Import Friends featureAnalysed#901728Cross-Site Request Forgery2021-04-01–116
Referer Leakage Vulnerability in socialclub.rockstargames.com/crew/ leads to FB'S OAuth token theft.Analysed#787160Cross-Site Request Forgery2020-06-24–112

Subdomains496

Root
Scope
Name suggests
First seen
Text file496 names
Subdomains of Rockstar Games
NameScopeFirst seen
gsa.rockstargames.comIn scope2026-11-14
gtm.rockstargames.comIn scope2026-11-14
gtmdev.rockstargames.comIn scope2026-11-14
haley.rockstargames.comIn scope2026-11-14
houser.rockstargames.comIn scope2026-11-14
hub.rockstargames.comIn scope2026-11-14
i.rockstargames.comIn scope2026-11-14
intranetdev.rockstargames.comIn scope2026-11-14
inventory.rockstargames.comIn scope2026-11-14
italian.rockstargames.comIn scope2026-11-14
jira.rockstargames.comtoolsIn scope2026-11-14
jira2.rockstargames.comtoolsIn scope2026-11-14
jobs.rockstargames.comIn scope2026-11-14
staging.jobs.rockstargames.comstagingIn scope2026-11-14
jobsadmin.rockstargames.comIn scope2026-11-14
jobsadmin2.rockstargames.comIn scope2026-11-14
jobstar.rockstargames.comIn scope2026-11-14
mobilecontrol.adc.ms.k8s.rockstargames.comtoolsIn scope2026-11-14
mobilecontrol.edc.ms.k8s.rockstargames.comtoolsIn scope2026-11-14
keys.rockstargames.comIn scope2026-11-14
level9.rockstargames.comIn scope2026-11-14
autodiscover.level9.rockstargames.commailIn scope2026-11-14
lists.rockstargames.comIn scope2026-11-14
listserv.rockstargames.comIn scope2026-11-14
listserv2.rockstargames.comIn scope2026-11-14
load-catalog-cloud.rockstargames.comIn scope2026-11-14
load-scauth.rockstargames.comIn scope2026-11-14
loc.rockstargames.comIn scope2026-11-14
www.loc.rockstargames.comIn scope2026-11-14
lync.rockstargames.comIn scope2026-11-14
lyncdiscover.rockstargames.comIn scope2026-11-14
m.rockstargames.comIn scope2026-11-14
mail.rockstargames.commailIn scope2026-11-14
maildr.rockstargames.comIn scope2026-11-14
media.rockstargames.comIn scope2026-11-14
media-dev.rockstargames.comdevIn scope2026-11-14
mindlink.rockstargames.comIn scope2026-11-14
mindlinkmob.rockstargames.comIn scope2026-11-14
mls.rockstargames.comIn scope2026-11-14
mls-dev.rockstargames.comdevIn scope2026-11-14
mobileapi.rockstargames.comIn scope2026-11-14
moon.rockstargames.comIn scope2026-11-14
mx1.rockstargames.comIn scope2026-11-14
mx2.rockstargames.comIn scope2026-11-14
mxout1.rockstargames.comIn scope2026-11-14
net.rockstargames.comIn scope2026-11-14
newsletter.rockstargames.comIn scope2026-11-14
click.newsletter.rockstargames.comIn scope2026-11-14
cloud.newsletter.rockstargames.comIn scope2026-11-14
image.newsletter.rockstargames.comIn scope2026-11-14
mta.newsletter.rockstargames.comIn scope2026-11-14
mta2.newsletter.rockstargames.comIn scope2026-11-14
pages.newsletter.rockstargames.comIn scope2026-11-14
view.newsletter.rockstargames.comIn scope2026-11-14
ns.rockstargames.comIn scope2026-11-14
ns6.rockstargames.comIn scope2026-11-14
oaktree.rockstargames.comIn scope2026-11-14
online.rockstargames.comIn scope2026-11-14
onlinevpn-east.rockstargames.comIn scope2026-11-14
otmm.rockstargames.comIn scope2026-11-14
overlay.rockstargames.comIn scope2026-11-14
overlaystore.rockstargames.comIn scope2026-11-14
patches.rockstargames.comIn scope2026-11-14
patchespatches.rockstargames.comIn scope2026-11-14
auth.perforce.rockstargames.comauthIn scope2026-11-14
sso.perforce.rockstargames.comauthIn scope2026-11-14
ssoclient.perforce.rockstargames.comIn scope2026-11-14
auth.perrforce.rockstargames.comauthIn scope2026-11-14
prod.p01ams.pod.rockstargames.comIn scope2026-11-14
www.prod.p01ams.pod.rockstargames.comIn scope2026-11-14
cert.p01ewr.pod.rockstargames.comIn scope2026-11-14
www.cert.p01ewr.pod.rockstargames.comIn scope2026-11-14
dev.p01ewr.pod.rockstargames.comdevIn scope2026-11-14
www.dev.p01ewr.pod.rockstargames.comdevIn scope2026-11-14
load.p01ewr.pod.rockstargames.comIn scope2026-11-14
prod.p01ewr.pod.rockstargames.comIn scope2026-11-14
www.prod.p01ewr.pod.rockstargames.comIn scope2026-11-14
stagecert.p01ewr.pod.rockstargames.comIn scope2026-11-14
stagedev.p01ewr.pod.rockstargames.comIn scope2026-11-14
stageprod.p01ewr.pod.rockstargames.comIn scope2026-11-14
prod.p01sjc.pod.rockstargames.comIn scope2026-11-14
www.prod.p01sjc.pod.rockstargames.comIn scope2026-11-14
prod.p02ams.pod.rockstargames.comIn scope2026-11-14
www.prod.p02ams.pod.rockstargames.comIn scope2026-11-14
dev.p02ewr.pod.rockstargames.comdevIn scope2026-11-14
load.p02ewr.pod.rockstargames.comIn scope2026-11-14
prod.p02ewr.pod.rockstargames.comIn scope2026-11-14
www.prod.p02ewr.pod.rockstargames.comIn scope2026-11-14
prod.p02sjc.pod.rockstargames.comIn scope2026-11-14
www.prod.p02sjc.pod.rockstargames.comIn scope2026-11-14
preprod.rockstargames.comstagingIn scope2026-11-14
preprod-graph.rockstargames.comstagingIn scope2026-11-14
preprod-overlay.rockstargames.comstagingIn scope2026-11-14
preprod-scauth.rockstargames.comstagingIn scope2026-11-14
pressftp.rockstargames.comIn scope2026-11-14
prod-catalog-cloud.rockstargames.comIn scope2026-11-14
prod-dev.rockstargames.comdevIn scope2026-11-14
prod-locator-cloud.rockstargames.comIn scope2026-11-14
prod1.rockstargames.comIn scope2026-11-14
proget.rockstargames.comIn scope2026-11-14

481 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated