正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

3,000$ Bug Bounty Reward from Microsoft Forms: Reflected XSS Vulnerability Writeup:

Dark Web Informer

222,084 subscribers

24,247 次观看 • 7 个月前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

‼️ Leaking the email of any YouTube user for $10,000 Bug Bounty Writeup:

‼️ Leaking the email of any YouTube user for $10,000 Bug Bounty Writeup:

Dark Web Informer

44,839 次观看 • 6 个月前

How to deliver reflected XSS via HTTP request smuggling vulnerability! 👇 Try this Practitioner lab now:

How to deliver reflected XSS via HTTP request smuggling vulnerability! 👇 Try this Practitioner lab now:

Web Security Academy

59,913 次观看 • 2 个月前

Leaking the phone number of any Google user ($5k bounty) This vulnerability was submitted to Google's VRP program and awarded a $5,000 bounty. It has since been patched. Writeup:

Leaking the phone number of any Google user ($5k bounty) This vulnerability was submitted to Google's VRP program and awarded a $5,000 bounty. It has since been patched. Writeup:

Dark Web Informer

97,883 次观看 • 7 个月前

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,848 次观看 • 2 年前

What would you do with $16,000,000? Today, Usual is announcing the largest bug bounty in the history of the world: A $16,000,000 reward for discovering a single critical vulnerability in Usual's codebase. Hosted on Sherlock, in partnership with Nexus Mutual.

What would you do with $16,000,000? Today, Usual is announcing the largest bug bounty in the history of the world: A $16,000,000 reward for discovering a single critical vulnerability in Usual's codebase. Hosted on Sherlock, in partnership with Nexus Mutual.

SHERLOCK

3,818,700 次观看 • 1 年前

Integrity flow vulnerability in "microsoft teams" poll 3000$ bounty Sometimes, overlooked isuue can create significant vulnerability. In the "displayname" field, we send the name of the person we want the message to be send. #bugbounty

Integrity flow vulnerability in "microsoft teams" poll 3000$ bounty Sometimes, overlooked isuue can create significant vulnerability. In the "displayname" field, we send the name of the person we want the message to be send. #bugbounty

Moslem Haghighian

12,037 次观看 • 3 年前

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss

Today Cyber News

34,242 次观看 • 3 年前

Are you just starting out in your bug bounty journey? You're probably making the same mistake that everyone makes. Take this advice from Ben Sadeghipour, a veteran bug bounty hunter. 👇

Are you just starting out in your bug bounty journey? You're probably making the same mistake that everyone makes. Take this advice from Ben Sadeghipour, a veteran bug bounty hunter. 👇

HackingHub

15,444 次观看 • 2 个月前

Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup:

Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup:

nafiez

24,864 次观看 • 15 天前

Beef up the severity of a pentest or bug bounty report by demonstrating real security impact. I've put together a list of my favourite weaponised XSS payloads to help you turn alert(1) into P1. Link in thread 🧵👇

Beef up the severity of a pentest or bug bounty report by demonstrating real security impact. I've put together a list of my favourite weaponised XSS payloads to help you turn alert(1) into P1. Link in thread 🧵👇

Luke Stephens (hakluke)

20,776 次观看 • 2 年前

New writeup from ꙅɿɘƚɔɘqꙅ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate. Full disclosure:

New writeup from ꙅɿɘƚɔɘqꙅ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate. Full disclosure:

Sam Curry

344,936 次观看 • 1 年前

Responsible disclosure and community contributions to security are critical for safeguarding zkSync Era. We’re excited to announce that the @Immunefi bug bounty reward has been increased to $1.1M, with all L2 assets now in scope. Help secure zkSync Era:

Responsible disclosure and community contributions to security are critical for safeguarding zkSync Era. We’re excited to announce that the @Immunefi bug bounty reward has been increased to $1.1M, with all L2 assets now in scope. Help secure zkSync Era:

ZKsync

229,324 次观看 • 3 年前

Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security. This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version. This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.

Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security. This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version. This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.

NebuSec

106,081 次观看 • 2 个月前

Iranians from of Varamin (an hour drive from Tehran) have placed a bounty on the heads of Netanyahu and/or Trump. The reward is 100 kg of gold

Iranians from of Varamin (an hour drive from Tehran) have placed a bounty on the heads of Netanyahu and/or Trump. The reward is 100 kg of gold

Arya Yadegaar

65,098 次观看 • 2 个月前

Automatically extract URL and IP endpoints from Android app to a txt file using apk2url Fast and useful tool for pentesters, bug bounty hunters, or malware analyst

Automatically extract URL and IP endpoints from Android app to a txt file using apk2url Fast and useful tool for pentesters, bug bounty hunters, or malware analyst

Mobile Hacker

127,687 次观看 • 2 年前

Over $100,000💵 for reporting for a bug🔥⚡️ Cyber samurai, you are officially invited on a journey for a bug-free future of finance! Are you ready to take on your armour and battle with us? #CrossFi Foundation launches the Bug Bounty⚡️ The reward structure is in line with the Warrior Code 🔹Over $100,000 – critical bugs 🔹Over $50,000 – huge 🔹$5,000-$50,000 – medium 🔹Up to $7,500 – low 🔁There are no limits! You can report as many bugs as you can find!!! Read more about the Bug Bounty program on the official CrossFi Foundation website Have you already started your Way of the Crypto Samurai? 📣Submit the bug in this form and get your rewards! #money $XFI #crypto #defi #fintech #finance #blockchain #card #visa #cryptocard #decentralized #crosschain #token #technology #innovation #earn #reward #warrior

Over $100,000💵 for reporting for a bug🔥⚡️ Cyber samurai, you are officially invited on a journey for a bug-free future of finance! Are you ready to take on your armour and battle with us? #CrossFi Foundation launches the Bug Bounty⚡️ The reward structure is in line with the Warrior Code 🔹Over $100,000 – critical bugs 🔹Over $50,000 – huge 🔹$5,000-$50,000 – medium 🔹Up to $7,500 – low 🔁There are no limits! You can report as many bugs as you can find!!! Read more about the Bug Bounty program on the official CrossFi Foundation website Have you already started your Way of the Crypto Samurai? 📣Submit the bug in this form and get your rewards! #money $XFI #crypto #defi #fintech #finance #blockchain #card #visa #cryptocard #decentralized #crosschain #token #technology #innovation #earn #reward #warrior

CrossFi

10,255 次观看 • 2 年前

🏃‍♂️NEW CHALLENGE BOUNTY🏃‍♀️ VERDUDOUS BY CURSED 63% FROM 0, ID: 86522520 REWARD: $50 (Should be easy right?) SAME RULES AS ALWAYS GOOD LUCK DEMONS👿

🏃‍♂️NEW CHALLENGE BOUNTY🏃‍♀️ VERDUDOUS BY CURSED 63% FROM 0, ID: 86522520 REWARD: $50 (Should be easy right?) SAME RULES AS ALWAYS GOOD LUCK DEMONS👿

Hqmy

18,298 次观看 • 3 个月前

New video: dawgyg - WoH covered a lot, including: how AI-generated bug bounty reports are a burden on OSS (FFmpeg mentioned), transitioning from bug hunting to working in-house on an AppSec team, the early blackhat days, and multiple appearances of his cats. 30sec clip:

New video: dawgyg - WoH covered a lot, including: how AI-generated bug bounty reports are a burden on OSS (FFmpeg mentioned), transitioning from bug hunting to working in-house on an AppSec team, the early blackhat days, and multiple appearances of his cats. 30sec clip:

solst/ICE of Astarte

33,940 次观看 • 7 个月前