Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

3,000$ Bug Bounty Reward from Microsoft Forms: Reflected XSS Vulnerability Writeup:

DarkWebInformer's profile picture

Dark Web Informer

158,408 subscribers

23,493 görüntüleme • 4 ay önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

‼️ Leaking the email of any YouTube user for $10,000 Bug Bounty Writeup:
0:20

‼️ Leaking the email of any YouTube user for $10,000 Bug Bounty Writeup:

Dark Web Informer

44,839 görüntüleme • 3 ay önce

Here's how to deliver reflected XSS through a HTTP request smuggling vulnerability! 👇 Try this Practitioner lab now:
0:51

Here's how to deliver reflected XSS through a HTTP request smuggling vulnerability! 👇 Try this Practitioner lab now:

Web Security Academy

45,950 görüntüleme • 2 ay önce

Leaking the phone number of any Google user ($5k bounty) This vulnerability was submitted to Google's VRP program and awarded a $5,000 bounty. It has since been patched. Writeup:
1:48

Leaking the phone number of any Google user ($5k bounty) This vulnerability was submitted to Google's VRP program and awarded a $5,000 bounty. It has since been patched. Writeup:

Dark Web Informer

96,918 görüntüleme • 4 ay önce

[Bug Bounty] $3,000 Instagram delete highlight cover IDOR Credit: Write-up:
2:17

[Bug Bounty] $3,000 Instagram delete highlight cover IDOR Credit: Write-up:

Dark Web Informer

32,576 görüntüleme • 1 yıl önce

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,598 görüntüleme • 2 yıl önce

What would you do with $16,000,000? Today, Usual is announcing the largest bug bounty in the history of the world: A $16,000,000 reward for discovering a single critical vulnerability in Usual's codebase. Hosted on Sherlock, in partnership with Nexus Mutual.
0:40

What would you do with $16,000,000? Today, Usual is announcing the largest bug bounty in the history of the world: A $16,000,000 reward for discovering a single critical vulnerability in Usual's codebase. Hosted on Sherlock, in partnership with Nexus Mutual.

SHERLOCK

3,818,581 görüntüleme • 1 yıl önce

Exploiting a DOM-XSS vulnerability in a BBP with DorkixAI
1:15

Exploiting a DOM-XSS vulnerability in a BBP with DorkixAI

Gospel

15,055 görüntüleme • 1 ay önce

Integrity flow vulnerability in "microsoft teams" poll 3000$ bounty Sometimes, overlooked isuue can create significant vulnerability. In the "displayname" field, we send the name of the person we want the message to be send. #bugbounty
0:42

Integrity flow vulnerability in "microsoft teams" poll 3000$ bounty Sometimes, overlooked isuue can create significant vulnerability. In the "displayname" field, we send the name of the person we want the message to be send. #bugbounty

Moslem Haghighian

11,998 görüntüleme • 2 yıl önce

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)
0:31

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

91,745 görüntüleme • 1 ay önce

If you're new to bug bounty hunting, Ben Sadeghipour has got your back! Check out his "Resources-for-Beginner-Bug-Bounty-Hunters" now:
1:27

If you're new to bug bounty hunting, Ben Sadeghipour has got your back! Check out his "Resources-for-Beginner-Bug-Bounty-Hunters" now:

Luke Stephens (hakluke)

12,142 görüntüleme • 1 yıl önce

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:
2:17

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:

NullSecurityX

21,878 görüntüleme • 1 ay önce

Live Bug Bounty Hunting - My Recon Methodology !!!🐞
5:05

Live Bug Bounty Hunting - My Recon Methodology !!!🐞

Gospel

135,118 görüntüleme • 1 yıl önce

BACK TO BACK TOP BOUNTY PULLS!? 🤯 PokerStars EPT $3,000 Mystery Bounty WHAT EVEN!? Speechless.
0:35

BACK TO BACK TOP BOUNTY PULLS!? 🤯 PokerStars EPT $3,000 Mystery Bounty WHAT EVEN!? Speechless.

PokerNews

61,446 görüntüleme • 1 yıl önce

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:
3:26

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

Dark Web Informer

22,486 görüntüleme • 1 yıl önce

I built ./SECORA : Bug Bounty Hunter's Terminal With SECORA, you don't have to open multiple pane in your terminal to run bug bounty automation tools, it helps you run multiple tools at the same time !!! Github :
2:06

I built ./SECORA : Bug Bounty Hunter's Terminal With SECORA, you don't have to open multiple pane in your terminal to run bug bounty automation tools, it helps you run multiple tools at the same time !!! Github :

Gospel

29,979 görüntüleme • 1 yıl önce

New writeup from ꙅɿɘƚɔɘqꙅ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate. Full disclosure:
1:55

New writeup from ꙅɿɘƚɔɘqꙅ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate. Full disclosure:

Sam Curry

344,240 görüntüleme • 1 yıl önce

Success in bug bounty is based on this feat. JS0N Haddix #bugbounty #bugbountytips #bugbountyhunter
0:59

Success in bug bounty is based on this feat. JS0N Haddix #bugbounty #bugbountytips #bugbountyhunter

Bug Bounty Reports Explained

46,022 görüntüleme • 1 yıl önce

Using a Raspberry Pi to hide from my ISP Writeup:
9:08

Using a Raspberry Pi to hide from my ISP Writeup:

Dark Web Informer

12,119 görüntüleme • 3 ay önce