Skip to content
Connect AISign inSign up free

Bug bounty program

XX

X / xAI

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
23
Disclosed reports
248
Subdomains
10,596

Most upvoted reports248

All reports
Most upvoted reports of X / xAI
ReportWeaknessDisclosedBountyVotes
Potential pre-auth RCE on Twitter VPNAnalysed#591295Command and Code Injection2019-08-10$20,1601,246
Bypassing Digits origin validation which leads to account takeoverAnalysed#129873Authentication2020-06-24–619
CRLF injectionAnalysed#446271No weakness recorded2019-12-25–439
Read-only application can publish/delete fleetsAnalysed#1032468Access Control2021-01-04–398
Blind XSS on Twitter's internal Big Data panel at █████████████Analysed#1207040Cross-site Scripting2021-07-09–357
Private list members disclosure via GraphQLAnalysed#885539Access Control2020-08-04–346
[Urgent] Invalidating OAuth2 Bearer token makes TweetDeck unavailableAnalysed#210779Denial of Service2019-04-25–323
Bypass Password Authentication for updating email and phone number - Security VulnerabilityAnalysed#770504Authentication2020-02-08–288
Insufficient OAuth callback validation which leads to Periscope account takeoverAnalysed#110293Authentication2019-04-10–277
Insufficient validation on Digits bridgeAnalysed#168116Authentication2020-08-20–263

Subdomains10,596

Root:twimg.com
Scope
Name suggests
First seen
Text fileClear filters314 names
Subdomains of X / xAI
NameScopeFirst seen
0.twimg.comIn scope2026-11-14
1.twimg.comIn scope2026-11-14
2a0.twimg.comIn scope2026-11-14
2fvideo.twimg.comIn scope2026-11-14
a0.twimg.comIn scope2026-11-14
a1.twimg.comIn scope2026-11-14
a2.twimg.comIn scope2026-11-14
a3.twimg.comIn scope2026-11-14
a4.twimg.comIn scope2026-11-14
a5.twimg.comIn scope2026-11-14
a6.twimg.comIn scope2026-11-14
a7.twimg.comIn scope2026-11-14
abc.twimg.comIn scope2026-11-14
abc-0.twimg.comIn scope2026-11-14
abs.twimg.comIn scope2026-11-14
abs-0.twimg.comIn scope2026-11-14
abs-ak.twimg.comIn scope2026-11-14
abs-ec.twimg.comIn scope2026-11-14
abs-ft.twimg.comIn scope2026-11-14
abs-gc.twimg.comIn scope2026-11-14
abs-o.twimg.comIn scope2026-11-14
abs-o-ak.twimg.comIn scope2026-11-14
abs-o-ec.twimg.comIn scope2026-11-14
abs-o-ft.twimg.comIn scope2026-11-14
abs-t-1.twimg.comIn scope2026-11-14
abs-t-2.twimg.comIn scope2026-11-14
abs-t-3.twimg.comIn scope2026-11-14
abs-t-4.twimg.comIn scope2026-11-14
abs-t-5.twimg.comIn scope2026-11-14
abs-zero.twimg.comIn scope2026-11-14
geo0.abs.twimg.comIn scope2026-11-14
admedia.twimg.comIn scope2026-11-14
amp.twimg.comIn scope2026-11-14
amp-0.twimg.comIn scope2026-11-14
amp-eb.twimg.comIn scope2026-11-14
amp-o.twimg.comIn scope2026-11-14
amp-staging.twimg.comstagingIn scope2026-11-14
amp-zero.twimg.comIn scope2026-11-14
amp2.twimg.comIn scope2026-11-14
cdn.api.twimg.comapiIn scope2026-11-14
ation.twimg.comIn scope2026-11-14
bs.twimg.comIn scope2026-11-14
bs-t-5.twimg.comIn scope2026-11-14
cation.twimg.comIn scope2026-11-14
cd-eb1.twimg.comIn scope2026-11-14
cdn.twimg.comIn scope2026-11-14
cf.twimg.comIn scope2026-11-14
twitter.comoem.twimg.comIn scope2026-11-14
lh3.googleusercontent.compbs.twimg.comIn scope2026-11-14
r1.sn-q4f7dm7k.googlevideo.comwildcard.twimg.comIn scope2026-11-14
en-us.appex-rf.msn.comwildcard.twimg.comIn scope2026-11-14
t.copbs.twimg.comIn scope2026-11-14
crashlytics.twimg.comIn scope2026-11-14
deo.twimg.comIn scope2026-11-14
dev.twimg.comdevIn scope2026-11-14
dnt.twimg.comIn scope2026-11-14
dnt-o.twimg.comIn scope2026-11-14
dtc-internal.twimg.cominternalIn scope2026-11-14
ea.twimg.comIn scope2026-11-14
ea-o.twimg.comIn scope2026-11-14
eb.twimg.comIn scope2026-11-14
planetlab1.isi.jhu.edupbs.twimg.comIn scope2026-11-14
fastly-private-purge.twimg.cominternalIn scope2026-11-14
fastly-public-purge.twimg.comIn scope2026-11-14
fastly-purge.twimg.comIn scope2026-11-14
g.twimg.comIn scope2026-11-14
g-o.twimg.comIn scope2026-11-14
g-staging.twimg.comstagingIn scope2026-11-14
g2.twimg.comIn scope2026-11-14
gs.twimg.comIn scope2026-11-14
gu.twimg.comIn scope2026-11-14
h2.twimg.comIn scope2026-11-14
hca.twimg.comIn scope2026-11-14
geo2.hca.twimg.comIn scope2026-11-14
httpspbs.twimg.comIn scope2026-11-14
i3.twimg.comIn scope2026-11-14
ication.twimg.comIn scope2026-11-14
image-proxy-origin.twimg.comIn scope2026-11-14
ipv6.twimg.comIn scope2026-11-14
jp.twimg.comIn scope2026-11-14
bundle.settings.04202d54.jsabs.twimg.comIn scope2026-11-14
l.twimg.comIn scope2026-11-14
e.lv.twimg.comIn scope2026-11-14
ec.e.lv.twimg.comIn scope2026-11-14
p-ca-1.ec.e.lv.twimg.comIn scope2026-11-14
p-va-1.ec.e.lv.twimg.comIn scope2026-11-14
f.e.lv.twimg.comIn scope2026-11-14
ft.e.lv.twimg.comIn scope2026-11-14
p-ca-1.ft.e.lv.twimg.comIn scope2026-11-14
p-du-1.ft.e.lv.twimg.comIn scope2026-11-14
p-fr-1.ft.e.lv.twimg.comIn scope2026-11-14
p-sel-1.ft.e.lv.twimg.comIn scope2026-11-14
p-sg-1.ft.e.lv.twimg.comIn scope2026-11-14
p-syd-1.ft.e.lv.twimg.comIn scope2026-11-14
p-tyo-1.ft.e.lv.twimg.comIn scope2026-11-14
p-va-1.ft.e.lv.twimg.comIn scope2026-11-14
t-ca-1.ft.e.lv.twimg.comIn scope2026-11-14
ll.e.lv.twimg.comIn scope2026-11-14
p-ca-1.e.lv.twimg.comIn scope2026-11-14
p-du-1.e.lv.twimg.comIn scope2026-11-14

10,296 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

CyberSIXTSignal over noise
Sign inSign up free

Updated