Loading video...

Video Failed to Load

Go Home

3,000$ Bug Bounty Reward from Microsoft Forms: Reflected XSS Vulnerability Writeup:

DarkWebInformer's profile picture

Dark Web Informer

158,408 subscribers

23,493 views • 4 months ago •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

‼️ Leaking the email of any YouTube user for $10,000 Bug Bounty Writeup:
0:20

‼️ Leaking the email of any YouTube user for $10,000 Bug Bounty Writeup:

Dark Web Informer

44,839 views • 3 months ago

Here's how to deliver reflected XSS through a HTTP request smuggling vulnerability! 👇 Try this Practitioner lab now:
0:51

Here's how to deliver reflected XSS through a HTTP request smuggling vulnerability! 👇 Try this Practitioner lab now:

Web Security Academy

45,941 views • 1 month ago

Leaking the phone number of any Google user ($5k bounty) This vulnerability was submitted to Google's VRP program and awarded a $5,000 bounty. It has since been patched. Writeup:
1:48

Leaking the phone number of any Google user ($5k bounty) This vulnerability was submitted to Google's VRP program and awarded a $5,000 bounty. It has since been patched. Writeup:

Dark Web Informer

96,880 views • 4 months ago

[Bug Bounty] $3,000 Instagram delete highlight cover IDOR Credit: Write-up:
2:17

[Bug Bounty] $3,000 Instagram delete highlight cover IDOR Credit: Write-up:

Dark Web Informer

32,576 views • 1 year ago

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,598 views • 2 years ago

What would you do with $16,000,000? Today, Usual is announcing the largest bug bounty in the history of the world: A $16,000,000 reward for discovering a single critical vulnerability in Usual's codebase. Hosted on Sherlock, in partnership with Nexus Mutual.
0:40

What would you do with $16,000,000? Today, Usual is announcing the largest bug bounty in the history of the world: A $16,000,000 reward for discovering a single critical vulnerability in Usual's codebase. Hosted on Sherlock, in partnership with Nexus Mutual.

SHERLOCK

3,818,581 views • 1 year ago

Exploiting a DOM-XSS vulnerability in a BBP with DorkixAI
1:15

Exploiting a DOM-XSS vulnerability in a BBP with DorkixAI

Gospel

15,055 views • 1 month ago

Integrity flow vulnerability in "microsoft teams" poll 3000$ bounty Sometimes, overlooked isuue can create significant vulnerability. In the "displayname" field, we send the name of the person we want the message to be send. #bugbounty
0:42

Integrity flow vulnerability in "microsoft teams" poll 3000$ bounty Sometimes, overlooked isuue can create significant vulnerability. In the "displayname" field, we send the name of the person we want the message to be send. #bugbounty

Moslem Haghighian

11,998 views • 2 years ago

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)
0:31

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

91,745 views • 1 month ago

If you're new to bug bounty hunting, Ben Sadeghipour has got your back! Check out his "Resources-for-Beginner-Bug-Bounty-Hunters" now:
1:27

If you're new to bug bounty hunting, Ben Sadeghipour has got your back! Check out his "Resources-for-Beginner-Bug-Bounty-Hunters" now:

Luke Stephens (hakluke)

12,142 views • 1 year ago

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:
2:17

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:

NullSecurityX

21,878 views • 1 month ago

Live Bug Bounty Hunting - My Recon Methodology !!!🐞
5:05

Live Bug Bounty Hunting - My Recon Methodology !!!🐞

Gospel

135,118 views • 1 year ago

BACK TO BACK TOP BOUNTY PULLS!? 🤯 PokerStars EPT $3,000 Mystery Bounty WHAT EVEN!? Speechless.
0:35

BACK TO BACK TOP BOUNTY PULLS!? 🤯 PokerStars EPT $3,000 Mystery Bounty WHAT EVEN!? Speechless.

PokerNews

61,446 views • 1 year ago

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:
3:26

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

Dark Web Informer

22,486 views • 1 year ago

New writeup from ꙅɿɘƚɔɘqꙅ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate. Full disclosure:
1:55

New writeup from ꙅɿɘƚɔɘqꙅ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate. Full disclosure:

Sam Curry

344,213 views • 1 year ago

I built ./SECORA : Bug Bounty Hunter's Terminal With SECORA, you don't have to open multiple pane in your terminal to run bug bounty automation tools, it helps you run multiple tools at the same time !!! Github :
2:06

I built ./SECORA : Bug Bounty Hunter's Terminal With SECORA, you don't have to open multiple pane in your terminal to run bug bounty automation tools, it helps you run multiple tools at the same time !!! Github :

Gospel

29,979 views • 1 year ago

Success in bug bounty is based on this feat. JS0N Haddix #bugbounty #bugbountytips #bugbountyhunter
0:59

Success in bug bounty is based on this feat. JS0N Haddix #bugbounty #bugbountytips #bugbountyhunter

Bug Bounty Reports Explained

46,022 views • 1 year ago

Using a Raspberry Pi to hide from my ISP Writeup:
9:08

Using a Raspberry Pi to hide from my ISP Writeup:

Dark Web Informer

12,119 views • 3 months ago