Skip to content
Connect AISign inSign up free

Bug bounty program

XX

X / xAI

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
23
Disclosed reports
248
Subdomains
10,596

Most upvoted reports248

All reports
Most upvoted reports of X / xAI
ReportWeaknessDisclosedBountyVotes
Potential pre-auth RCE on Twitter VPNAnalysed#591295Command and Code Injection2019-08-10$20,1601,246
Bypassing Digits origin validation which leads to account takeoverAnalysed#129873Authentication2020-06-24–619
CRLF injectionAnalysed#446271No weakness recorded2019-12-25–439
Read-only application can publish/delete fleetsAnalysed#1032468Access Control2021-01-04–398
Blind XSS on Twitter's internal Big Data panel at █████████████Analysed#1207040Cross-site Scripting2021-07-09–357
Private list members disclosure via GraphQLAnalysed#885539Access Control2020-08-04–346
[Urgent] Invalidating OAuth2 Bearer token makes TweetDeck unavailableAnalysed#210779Denial of Service2019-04-25–323
Bypass Password Authentication for updating email and phone number - Security VulnerabilityAnalysed#770504Authentication2020-02-08–288
Insufficient OAuth callback validation which leads to Periscope account takeoverAnalysed#110293Authentication2019-04-10–277
Insufficient validation on Digits bridgeAnalysed#168116Authentication2020-08-20–263

Subdomains10,596

Root
Scope
Name suggests
First seen
Text file10,596 names
Subdomains of X / xAI
NameScopeFirst seen
oo.twimg.comIn scope2026-11-14
owildcard.twimg.comIn scope2026-11-14
p.twimg.comIn scope2026-11-14
p-0.twimg.comIn scope2026-11-14
p-dev.twimg.comdevIn scope2026-11-14
pb.twimg.comIn scope2026-11-14
pbm.twimg.comIn scope2026-11-14
pbs.twimg.comIn scope2026-11-14
pbs-0.twimg.comIn scope2026-11-14
pbs-ak.twimg.comIn scope2026-11-14
pbs-eb.twimg.comIn scope2026-11-14
pbs-ec.twimg.comIn scope2026-11-14
pbs-ft.twimg.comIn scope2026-11-14
pbs-gc.twimg.comIn scope2026-11-14
pbs-h1.twimg.comIn scope2026-11-14
pbs-h1-ec.twimg.comIn scope2026-11-14
pbs-h2.twimg.comIn scope2026-11-14
pbs-h2-ec.twimg.comIn scope2026-11-14
pbs-o.twimg.comIn scope2026-11-14
pbs-o-ak.twimg.comIn scope2026-11-14
pbs-o-ec.twimg.comIn scope2026-11-14
pbs-o-ft.twimg.comIn scope2026-11-14
pbs-t-1.twimg.comIn scope2026-11-14
pbs-t-2.twimg.comIn scope2026-11-14
pbs-t-3.twimg.comIn scope2026-11-14
pbs-t-4.twimg.comIn scope2026-11-14
pbs-t-5.twimg.comIn scope2026-11-14
pbs-ta.twimg.comIn scope2026-11-14
pbs-v6.twimg.comIn scope2026-11-14
pbs-zero.twimg.comIn scope2026-11-14
georeu.pbs.twimg.comIn scope2026-11-14
www.pbs.twimg.comIn scope2026-11-14
pbspbs.twimg.comIn scope2026-11-14
periscope-test.twimg.comtestIn scope2026-11-14
platform.twimg.comIn scope2026-11-14
pr.twimg.comIn scope2026-11-14
pr-ft.twimg.comIn scope2026-11-14
psb.twimg.comIn scope2026-11-14
pws.twimg.comIn scope2026-11-14
r.twimg.comIn scope2026-11-14
s.twimg.comIn scope2026-11-14
sa.twimg.comIn scope2026-11-14
sa-bs-o.twimg.comIn scope2026-11-14
si0.twimg.comIn scope2026-11-14
si1.twimg.comIn scope2026-11-14
si2.twimg.comIn scope2026-11-14
si3.twimg.comIn scope2026-11-14
si4.twimg.comIn scope2026-11-14
si5.twimg.comIn scope2026-11-14
star.twimg.comIn scope2026-11-14
cdn.svndication.twimg.comIn scope2026-11-14
sydndication.twimg.comIn scope2026-11-14
cdn.syndicaion.twimg.comIn scope2026-11-14
syndication.twimg.comIn scope2026-11-14
syndication-o.twimg.comIn scope2026-11-14
cdn.syndication.twimg.comIn scope2026-11-14
eb.syndication.twimg.comIn scope2026-11-14
httpscdn.syndication.twimg.comIn scope2026-11-14
n.syndication.twimg.comIn scope2026-11-14
u003ecdn.syndication.twimg.comIn scope2026-11-14
tailfeather.twimg.comIn scope2026-11-14
test.twimg.comtestIn scope2026-11-14
ton.twimg.comIn scope2026-11-14
ton-0.twimg.comIn scope2026-11-14
ton-ak.twimg.comIn scope2026-11-14
ton-ec.twimg.comIn scope2026-11-14
ton-ft.twimg.comIn scope2026-11-14
ton-o.twimg.comIn scope2026-11-14
ton-o-ak.twimg.comIn scope2026-11-14
ton-o-ec.twimg.comIn scope2026-11-14
ton-o-ft.twimg.comIn scope2026-11-14
ton-ta.twimg.comIn scope2026-11-14
ton-zero.twimg.comIn scope2026-11-14
tonton.twimg.comIn scope2026-11-14
ts.twimg.comIn scope2026-11-14
ttc.twimg.comIn scope2026-11-14
tweet.twimg.comIn scope2026-11-14
twitter.twimg.comIn scope2026-11-14
u0015syndication.twimg.comIn scope2026-11-14
u003e.twimg.comIn scope2026-11-14
u003epbs.twimg.comIn scope2026-11-14
v.twimg.comIn scope2026-11-14
video.twimg.comIn scope2026-11-14
video-0.twimg.comIn scope2026-11-14
video-ak.twimg.comIn scope2026-11-14
video-cf.twimg.comIn scope2026-11-14
video-eb.twimg.comIn scope2026-11-14
video-ec.twimg.comIn scope2026-11-14
video-ft.twimg.comIn scope2026-11-14
video-gc.twimg.comIn scope2026-11-14
video-h2.twimg.comIn scope2026-11-14
video-o.twimg.comIn scope2026-11-14
video-o-ak.twimg.comIn scope2026-11-14
video-o-ec.twimg.comIn scope2026-11-14
video-o-ft.twimg.comIn scope2026-11-14
video-s.twimg.comIn scope2026-11-14
video-staging.twimg.comstagingIn scope2026-11-14
video-t-1.twimg.comIn scope2026-11-14
video-t-2.twimg.comIn scope2026-11-14
video-t-3.twimg.comIn scope2026-11-14

10,296 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated