Bug bounty program · HackerOne
Most upvoted reports248
- #591295ValidAnalysedPotential pre-auth RCE on Twitter VPNX / xAI · Command and Code Injection · 2019 · needs: no account · Path traversal, Information disclosure, 2FA bypass, Session fixation or reuse$20,1601,246votes
- #129873ValidAnalysedBypassing Digits origin validation which leads to account takeoverX / xAI · Authentication · 2020 · needs: a user account · Authentication bypass, postMessage flaw, Account takeover chain–619votes
- #446271ValidAnalysedCRLF injectionX / xAI · No weakness recorded · 2019 · needs: no account · CRLF / header injection–439votes
- #1032468ValidAnalysedRead-only application can publish/delete fleetsX / xAI · Access Control · 2021 · needs: a user account · Missing authorisation check, Privilege escalation–398votes
- #1207040ValidAnalysedBlind XSS on Twitter's internal Big Data panel at █████████████X / xAI · Cross-site Scripting · 2021 · needs: no account · Stored XSS, Blind XSS–357votes
- #885539ValidAnalysedPrivate list members disclosure via GraphQLX / xAI · Access Control · 2020 · needs: a user account · Missing authorisation check, IDOR / object reference, Information disclosure, Missing rate limit–346votes
- #210779ValidAnalysed[Urgent] Invalidating OAuth2 Bearer token makes TweetDeck unavailableX / xAI · Denial of Service · 2019 · needs: no account · Denial of service, Leaked secret or key–323votes
- #770504ValidBypass Password Authentication for updating email and phone number - Security VulnerabilityX / xAI · Authentication · 2020–288votes
- #110293ValidInsufficient OAuth callback validation which leads to Periscope account takeoverX / xAI · Authentication · 2019–277votes
- #168116ValidInsufficient validation on Digits bridgeX / xAI · Authentication · 2020–263votes
Subdomains10,596
10,296 covered by the program's own scope · 0 first seen this week
Roots:twitter.com 9,943 · 9,943 in scopetwimg.com 314 · 314 in scopepscp.tv 300vine.co 39 · 39 in scope
Name suggestsAnything
10,596 names
| Name | Scope | First seen |
|---|---|---|
| a.pscp.tv | Not in the scope | 2026-11-14 |
| webdisk.acesso.pscp.tv | Not in the scope | 2026-11-14 |
| api.pscp.tvapi | Not in the scope | 2026-11-14 |
| api-ws.pscp.tvapi | Not in the scope | 2026-11-14 |
| assets.pscp.tv | Not in the scope | 2026-11-14 |
| au.pscp.tv | Not in the scope | 2026-11-14 |
| audit-trail.pscp.tv | Not in the scope | 2026-11-14 |
| b.pscp.tv | Not in the scope | 2026-11-14 |
| bounce.pscp.tv | Not in the scope | 2026-11-14 |
| br.pscp.tv | Not in the scope | 2026-11-14 |
| ca.pscp.tv | Not in the scope | 2026-11-14 |
| canary-channels.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-chatman-ancillary-us-west-2.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-exp-video-us-east-1.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-fleets-us-west-1.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-fleets-us-west-2.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-guest.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-guest-cf.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-proxsee.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-proxsee-cf.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-safety.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-text-classification.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-transcode-proxy-us-east-1.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-transcode-us-east-1.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-video-us-east-1.pscp.tvstaging | Not in the scope | 2026-11-14 |
| canary-web.pscp.tvstaging | Not in the scope | 2026-11-14 |
| channel-thumbnails-dev.pscp.tvdev | Not in the scope | 2026-11-14 |
| channel-thumbnails-live.pscp.tv | Not in the scope | 2026-11-14 |
| channels.pscp.tv | Not in the scope | 2026-11-14 |
| chatman-replay-ap-northeast-1.pscp.tv | Not in the scope | 2026-11-14 |
| chatman-replay-eu-central-1.pscp.tv | Not in the scope | 2026-11-14 |
| chatman-replay-us-east-1.pscp.tv | Not in the scope | 2026-11-14 |
| chatman-replay-us-west-2.pscp.tv | Not in the scope | 2026-11-14 |
| client-services.pscp.tv | Not in the scope | 2026-11-14 |
| clubcafe.pscp.tv | Not in the scope | 2026-11-14 |
| d.pscp.tv | Not in the scope | 2026-11-14 |
| dca.pscp.tv | Not in the scope | 2026-11-14 |
| de.pscp.tv | Not in the scope | 2026-11-14 |
| dev-api.pscp.tvapi, dev | Not in the scope | 2026-11-14 |
| dev-api-ws.pscp.tvapi, dev | Not in the scope | 2026-11-14 |
| dev-assets.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-audit-trail.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-channels-thumbnails.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-chatman-ancillary-us-west-2.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-chatman-replay-eu-west-1.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-chatman-replay-us-west-2.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-email.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-embed.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-exp-video-eu-west-1.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-exp-video-us-west-2.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-fleets.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-fleets-us-west-2.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-guest.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-guest-cf.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-hlspull.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-lex-us-east-1.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-masks.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-profile.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-proxsee.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-proxsee-cf.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-public-api-assets.pscp.tvapi, dev | Not in the scope | 2026-11-14 |
| dev-safety.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-signer.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-signer-eu-west-1.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-text-classification.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-thumbnail.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-tn.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-transcode-us-west-2.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-turn.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-turn-p2p.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-turn-p2p-eu-west-1.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-turn-p2p-us-west-2.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-video-eu-west-1.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-video-us-west-2.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-vidman-eu-west-1.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-vidman-us-west-2.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-web.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-web-eu-west-1.pscp.tvdev | Not in the scope | 2026-11-14 |
| dev-www.pscp.tvdev | Not in the scope | 2026-11-14 |
| tusman.us-west-2.dev.pscp.tvdev | Not in the scope | 2026-11-14 |
| die.pscp.tv | Not in the scope | 2026-11-14 |
| donarsang.pscp.tv | Not in the scope | 2026-11-14 |
| doyanqq.pscp.tv | Not in the scope | 2026-11-14 |
| ec-dev-video-eu-west-1.pscp.tvdev | Not in the scope | 2026-11-14 |
| ec-dev-video-us-west-2.pscp.tvdev | Not in the scope | 2026-11-14 |
| ec-prod-video-ap-northeast-1.pscp.tv | Not in the scope | 2026-11-14 |
| ec-prod-video-ap-southeast-1.pscp.tv | Not in the scope | 2026-11-14 |
| ec-prod-video-ap-southeast-2.pscp.tv | Not in the scope | 2026-11-14 |
| ec-prod-video-eu-central-1.pscp.tv | Not in the scope | 2026-11-14 |
| ec-prod-video-eu-west-1.pscp.tv | Not in the scope | 2026-11-14 |
| ec-prod-video-sa-east-1.pscp.tv | Not in the scope | 2026-11-14 |
| ec-prod-video-us-east-1.pscp.tv | Not in the scope | 2026-11-14 |
| ec-prod-video-us-west-1.pscp.tv | Not in the scope | 2026-11-14 |
| ec-prod-video-us-west-2.pscp.tv | Not in the scope | 2026-11-14 |
| email.pscp.tv | Not in the scope | 2026-11-14 |
| embed.pscp.tv | Not in the scope | 2026-11-14 |
| fapz.pscp.tv | Not in the scope | 2026-11-14 |
| fleets.pscp.tv | Not in the scope | 2026-11-14 |
| fleets-us-west-2.pscp.tv | Not in the scope | 2026-11-14 |
| fr.pscp.tv | Not in the scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.