Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

3,000$ Bug Bounty Reward from Microsoft Forms: Reflected XSS Vulnerability Writeup:

DarkWebInformer's profile picture

Dark Web Informer

158,408 subscribers

23,493 Aufrufe • vor 4 Monaten •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

‼️ Leaking the email of any YouTube user for $10,000 Bug Bounty Writeup:
0:20

‼️ Leaking the email of any YouTube user for $10,000 Bug Bounty Writeup:

Dark Web Informer

44,839 Aufrufe • vor 3 Monaten

Here's how to deliver reflected XSS through a HTTP request smuggling vulnerability! 👇 Try this Practitioner lab now:
0:51

Here's how to deliver reflected XSS through a HTTP request smuggling vulnerability! 👇 Try this Practitioner lab now:

Web Security Academy

45,950 Aufrufe • vor 2 Monaten

Leaking the phone number of any Google user ($5k bounty) This vulnerability was submitted to Google's VRP program and awarded a $5,000 bounty. It has since been patched. Writeup:
1:48

Leaking the phone number of any Google user ($5k bounty) This vulnerability was submitted to Google's VRP program and awarded a $5,000 bounty. It has since been patched. Writeup:

Dark Web Informer

96,918 Aufrufe • vor 4 Monaten

[Bug Bounty] $3,000 Instagram delete highlight cover IDOR Credit: Write-up:
2:17

[Bug Bounty] $3,000 Instagram delete highlight cover IDOR Credit: Write-up:

Dark Web Informer

32,576 Aufrufe • vor 1 Jahr

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,598 Aufrufe • vor 2 Jahren

What would you do with $16,000,000? Today, Usual is announcing the largest bug bounty in the history of the world: A $16,000,000 reward for discovering a single critical vulnerability in Usual's codebase. Hosted on Sherlock, in partnership with Nexus Mutual.
0:40

What would you do with $16,000,000? Today, Usual is announcing the largest bug bounty in the history of the world: A $16,000,000 reward for discovering a single critical vulnerability in Usual's codebase. Hosted on Sherlock, in partnership with Nexus Mutual.

SHERLOCK

3,818,581 Aufrufe • vor 1 Jahr

Exploiting a DOM-XSS vulnerability in a BBP with DorkixAI
1:15

Exploiting a DOM-XSS vulnerability in a BBP with DorkixAI

Gospel

15,055 Aufrufe • vor 1 Monat

Integrity flow vulnerability in "microsoft teams" poll 3000$ bounty Sometimes, overlooked isuue can create significant vulnerability. In the "displayname" field, we send the name of the person we want the message to be send. #bugbounty
0:42

Integrity flow vulnerability in "microsoft teams" poll 3000$ bounty Sometimes, overlooked isuue can create significant vulnerability. In the "displayname" field, we send the name of the person we want the message to be send. #bugbounty

Moslem Haghighian

11,998 Aufrufe • vor 2 Jahren

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)
0:31

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

91,745 Aufrufe • vor 1 Monat

If you're new to bug bounty hunting, Ben Sadeghipour has got your back! Check out his "Resources-for-Beginner-Bug-Bounty-Hunters" now:
1:27

If you're new to bug bounty hunting, Ben Sadeghipour has got your back! Check out his "Resources-for-Beginner-Bug-Bounty-Hunters" now:

Luke Stephens (hakluke)

12,142 Aufrufe • vor 1 Jahr

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:
2:17

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:

NullSecurityX

21,878 Aufrufe • vor 1 Monat

Live Bug Bounty Hunting - My Recon Methodology !!!🐞
5:05

Live Bug Bounty Hunting - My Recon Methodology !!!🐞

Gospel

135,118 Aufrufe • vor 1 Jahr

BACK TO BACK TOP BOUNTY PULLS!? 🤯 PokerStars EPT $3,000 Mystery Bounty WHAT EVEN!? Speechless.
0:35

BACK TO BACK TOP BOUNTY PULLS!? 🤯 PokerStars EPT $3,000 Mystery Bounty WHAT EVEN!? Speechless.

PokerNews

61,446 Aufrufe • vor 1 Jahr

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:
3:26

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

Dark Web Informer

22,486 Aufrufe • vor 1 Jahr

New writeup from ꙅɿɘƚɔɘqꙅ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate. Full disclosure:
1:55

New writeup from ꙅɿɘƚɔɘqꙅ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate. Full disclosure:

Sam Curry

344,240 Aufrufe • vor 1 Jahr

I built ./SECORA : Bug Bounty Hunter's Terminal With SECORA, you don't have to open multiple pane in your terminal to run bug bounty automation tools, it helps you run multiple tools at the same time !!! Github :
2:06

I built ./SECORA : Bug Bounty Hunter's Terminal With SECORA, you don't have to open multiple pane in your terminal to run bug bounty automation tools, it helps you run multiple tools at the same time !!! Github :

Gospel

29,979 Aufrufe • vor 1 Jahr

Success in bug bounty is based on this feat. JS0N Haddix #bugbounty #bugbountytips #bugbountyhunter
0:59

Success in bug bounty is based on this feat. JS0N Haddix #bugbounty #bugbountytips #bugbountyhunter

Bug Bounty Reports Explained

46,022 Aufrufe • vor 1 Jahr

Using a Raspberry Pi to hide from my ISP Writeup:
9:08

Using a Raspberry Pi to hide from my ISP Writeup:

Dark Web Informer

12,119 Aufrufe • vor 3 Monaten