Bug bounty program · HackerOne
Most upvoted reports82
- #470520ValidAnalysedRCE on Steam Client via buffer overflow in Server InfoValve · Memory Corruption · 2019 · needs: no account · Memory corruption, Code injection / eval–1,289votes
- #391217ValidAnalysedGetting all the CD keys of any gameValve · Access Control · 2018 · needs: a user account · Missing authorisation check, IDOR / object reference, Information disclosure$20,000638votes
- #409850ValidAnalysedXSS in steam react chat clientValve · Cross-site Scripting · 2019 · needs: not clear from the report · Stored XSS$7,500499votes
- #1295844ValidAnalysedModify in-flight data to payment provider Smart2PayValve · Input Validation and Logic · 2021 · needs: a user account · Business logic flaw, Parameter pollution, Price or quantity tampering$7,500443votes
- #631956ValidAnalysedPanorama UI XSS leads to Remote Code Execution via Kick/Disconnect MessageValve · Command and Code Injection · 2019 · needs: no account · Stored XSS, Code injection / eval–420votes
- #383127ValidAnalysedSQL Injection in report_xml.php through countryFilter[] parameterValve · SQL Injection · 2018 · needs: not clear from the report · SQL injection$25,000410votes
- #397545ValidAnalysedMalformed .BMP file in Counter-Strike 1.6 may cause shellcode injectionValve · Memory Corruption · 2020 · needs: no account · Memory corruption, Code injection / eval–321votes
- #542180ValidMalformed NAV file leads to buffer overflow and code execution in Left4Dead2.exeValve · Memory Corruption · 2020$10,000268votes
- #513154ValidUnchecked weapon id in WeaponList message parser on client leads to RCEValve · Memory Corruption · 2019$3,000229votes
- #807772ValidOOB reads in network message handlers leads to RCEValve · Memory Corruption · 2021$7,500219votes
Subdomains790
13 covered by the program's own scope · 0 first seen this week
Roots:steampowered.com 592 · 6 in scopevalvesoftware.com 96 · 2 in scopedota2.com 39 · 1 in scopecounter-strike.net 19 · 1 in scopesteamgames.com 18 · 1 in scopesteamcommunity.com 13teamfortress.com 10 · 2 in scopeplayartifact.com 3
Name suggestsAnything
790 names
| Name | Scope | First seen |
|---|---|---|
| accid0ent.counter-strike.net | Not in the scope | 2026-11-14 |
| beta.counter-strike.netstaging | Not in the scope | 2026-11-14 |
| blog.counter-strike.net | Not in the scope | 2026-11-14 |
| new.blog.counter-strike.net | Not in the scope | 2026-11-14 |
| www.new.blog.counter-strike.net | Not in the scope | 2026-11-14 |
| www.blog.counter-strike.net | Not in the scope | 2026-11-14 |
| bot.counter-strike.net | Not in the scope | 2026-11-14 |
| countermap.counter-strike.net | Not in the scope | 2026-11-14 |
| csnation.counter-strike.net | Not in the scope | 2026-11-14 |
| enquirer.counter-strike.net | Not in the scope | 2026-11-14 |
| forums.counter-strike.net | Not in the scope | 2026-11-14 |
| old-blog.counter-strike.netlegacy | Not in the scope | 2026-11-14 |
| preview.counter-strike.netstaging | Not in the scope | 2026-11-14 |
| server.counter-strike.net | Not in the scope | 2026-11-14 |
| skins.counter-strike.net | Not in the scope | 2026-11-14 |
| skinshack.counter-strike.net | Not in the scope | 2026-11-14 |
| store.counter-strike.net | Not in the scope | 2026-11-14 |
| u003eblog.counter-strike.net | Not in the scope | 2026-11-14 |
| www.counter-strike.net | In scope | 2026-11-14 |
| beta.dota2.comstaging | Not in the scope | 2026-11-14 |
| blog.dota2.com | Not in the scope | 2026-11-14 |
| br.blog.dota2.com | Not in the scope | 2026-11-14 |
| cn.blog.dota2.com | Not in the scope | 2026-11-14 |
| de.blog.dota2.com | Not in the scope | 2026-11-14 |
| en.blog.dota2.com | Not in the scope | 2026-11-14 |
| es.blog.dota2.com | Not in the scope | 2026-11-14 |
| fr.blog.dota2.com | Not in the scope | 2026-11-14 |
| it.blog.dota2.com | Not in the scope | 2026-11-14 |
| kr.blog.dota2.com | Not in the scope | 2026-11-14 |
| ru.blog.dota2.com | Not in the scope | 2026-11-14 |
| staging.blog.dota2.comstaging | Not in the scope | 2026-11-14 |
| en.staging.blog.dota2.comstaging | Not in the scope | 2026-11-14 |
| br.dota2.com | Not in the scope | 2026-11-14 |
| cdn.dota2.com | Not in the scope | 2026-11-14 |
| cn.dota2.com | Not in the scope | 2026-11-14 |
| de.dota2.com | Not in the scope | 2026-11-14 |
| dev.dota2.comdev | Not in the scope | 2026-11-14 |
| en.dota2.com | Not in the scope | 2026-11-14 |
| es.dota2.com | Not in the scope | 2026-11-14 |
| exp.dota2.com | Not in the scope | 2026-11-14 |
| fr.dota2.com | Not in the scope | 2026-11-14 |
| it.dota2.com | Not in the scope | 2026-11-14 |
| kr.dota2.com | Not in the scope | 2026-11-14 |
| origin.dota2.com | Not in the scope | 2026-11-14 |
| blog.origin.dota2.com | Not in the scope | 2026-11-14 |
| dev.origin.dota2.comdev | Not in the scope | 2026-11-14 |
| exp.origin.dota2.com | Not in the scope | 2026-11-14 |
| partner.dota2.com | Not in the scope | 2026-11-14 |
| preview.dota2.comstaging | Not in the scope | 2026-11-14 |
| ru.dota2.com | Not in the scope | 2026-11-14 |
| staging.dota2.comstaging | Not in the scope | 2026-11-14 |
| en.staging.dota2.comstaging | Not in the scope | 2026-11-14 |
| partner.staging.dota2.comstaging | Not in the scope | 2026-11-14 |
| www.staging.dota2.comstaging | Not in the scope | 2026-11-14 |
| store.dota2.com | Not in the scope | 2026-11-14 |
| test.dota2.comtest | Not in the scope | 2026-11-14 |
| tv.dota2.com | Not in the scope | 2026-11-14 |
| www.dota2.com | In scope | 2026-11-14 |
| beta.playartifact.comstaging | Not in the scope | 2026-11-14 |
| preview.playartifact.comstaging | Not in the scope | 2026-11-14 |
| www.playartifact.com | Not in the scope | 2026-11-14 |
| api.steamcommunity.comapi | Not in the scope | 2026-11-14 |
| beta.steamcommunity.comstaging | Not in the scope | 2026-11-14 |
| china.beta.steamcommunity.comstaging | Not in the scope | 2026-11-14 |
| cdn.steamcommunity.com | Not in the scope | 2026-11-14 |
| media.steamcommunity.com | Not in the scope | 2026-11-14 |
| mta2.steamcommunity.com | Not in the scope | 2026-11-14 |
| origin.steamcommunity.com | Not in the scope | 2026-11-14 |
| preview.steamcommunity.comstaging | Not in the scope | 2026-11-14 |
| smtp.steamcommunity.commail | Not in the scope | 2026-11-14 |
| staging.steamcommunity.comstaging | Not in the scope | 2026-11-14 |
| static.steamcommunity.com | Not in the scope | 2026-11-14 |
| store.steamcommunity.com | Not in the scope | 2026-11-14 |
| www.steamcommunity.com | Not in the scope | 2026-11-14 |
| beta.steamgames.comstaging | Not in the scope | 2026-11-14 |
| cm0.steamgames.com | Not in the scope | 2026-11-14 |
| cpanel.steamgames.comadmin | Not in the scope | 2026-11-14 |
| developer.steamgames.com | Not in the scope | 2026-11-14 |
| forums.steamgames.com | Not in the scope | 2026-11-14 |
| gds1.steamgames.com | Not in the scope | 2026-11-14 |
| gds2.steamgames.com | Not in the scope | 2026-11-14 |
| hl1master.steamgames.com | Not in the scope | 2026-11-14 |
| hl2master.steamgames.com | Not in the scope | 2026-11-14 |
| origin.steamgames.com | Not in the scope | 2026-11-14 |
| partner.origin.steamgames.com | Not in the scope | 2026-11-14 |
| partner.steamgames.com | In scope | 2026-11-14 |
| partner-linux.steamgames.com | Not in the scope | 2026-11-14 |
| preview.steamgames.comstaging | Not in the scope | 2026-11-14 |
| partner.staging.steamgames.comstaging | Not in the scope | 2026-11-14 |
| store.steamgames.com | Not in the scope | 2026-11-14 |
| www.steamgames.com | Listed out of scope | 2026-11-14 |
| xbox.steamgames.com | Not in the scope | 2026-11-14 |
| smtp157.1-hosting11.steampowered.commail | Not in the scope | 2026-11-14 |
| 202-180-64-226.steampowered.com | Not in the scope | 2026-11-14 |
| 202-180-64-227.steampowered.com | Not in the scope | 2026-11-14 |
| 202-180-64-231.steampowered.com | Not in the scope | 2026-11-14 |
| 202-180-64-232.steampowered.com | Not in the scope | 2026-11-14 |
| 208-64-200-1.steampowered.com | Not in the scope | 2026-11-14 |
| 208-64-200-10.steampowered.com | Not in the scope | 2026-11-14 |
| 208-64-200-100.steampowered.com | Not in the scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.