正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

3,000$ Bug Bounty Reward from Microsoft Forms: Reflected XSS Vulnerability Writeup:

Dark Web Informer

222,084 subscribers

24,247 次观看 • 9 个月前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

‼️ Leaking the email of any YouTube user for $10,000 Bug Bounty Writeup:

‼️ Leaking the email of any YouTube user for $10,000 Bug Bounty Writeup:

Dark Web Informer

44,839 次观看 • 8 个月前

How to deliver reflected XSS via HTTP request smuggling vulnerability! 👇 Try this Practitioner lab now:

How to deliver reflected XSS via HTTP request smuggling vulnerability! 👇 Try this Practitioner lab now:

Web Security Academy

60,343 次观看 • 3 个月前

Leaking the phone number of any Google user ($5k bounty) This vulnerability was submitted to Google's VRP program and awarded a $5,000 bounty. It has since been patched. Writeup:

Leaking the phone number of any Google user ($5k bounty) This vulnerability was submitted to Google's VRP program and awarded a $5,000 bounty. It has since been patched. Writeup:

Dark Web Informer

98,003 次观看 • 9 个月前

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

77,061 次观看 • 2 年前

What would you do with $16,000,000? Today, Usual is announcing the largest bug bounty in the history of the world: A $16,000,000 reward for discovering a single critical vulnerability in Usual's codebase. Hosted on Sherlock, in partnership with Nexus Mutual.

What would you do with $16,000,000? Today, Usual is announcing the largest bug bounty in the history of the world: A $16,000,000 reward for discovering a single critical vulnerability in Usual's codebase. Hosted on Sherlock, in partnership with Nexus Mutual.

Sherlock

3,818,863 次观看 • 1 年前

Exploiting a DOM-XSS vulnerability in a BBP with DorkixAI

Exploiting a DOM-XSS vulnerability in a BBP with DorkixAI

Gospel

15,425 次观看 • 6 个月前

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss

Today Cyber News

34,242 次观看 • 3 年前

Integrity flow vulnerability in "microsoft teams" poll 3000$ bounty Sometimes, overlooked isuue can create significant vulnerability. In the "displayname" field, we send the name of the person we want the message to be send. #bugbounty

Integrity flow vulnerability in "microsoft teams" poll 3000$ bounty Sometimes, overlooked isuue can create significant vulnerability. In the "displayname" field, we send the name of the person we want the message to be send. #bugbounty

Moslem Haghighian

12,037 次观看 • 3 年前

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

95,499 次观看 • 6 个月前

Are you just starting out in your bug bounty journey? You're probably making the same mistake that everyone makes. Take this advice from Ben Sadeghipour, a veteran bug bounty hunter. 👇

Are you just starting out in your bug bounty journey? You're probably making the same mistake that everyone makes. Take this advice from Ben Sadeghipour, a veteran bug bounty hunter. 👇

HackingHub

15,444 次观看 • 3 个月前

Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup:

Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup:

nafiez

25,164 次观看 • 2 个月前

Beef up the severity of a pentest or bug bounty report by demonstrating real security impact. I've put together a list of my favourite weaponised XSS payloads to help you turn alert(1) into P1. Link in thread 🧵👇

Beef up the severity of a pentest or bug bounty report by demonstrating real security impact. I've put together a list of my favourite weaponised XSS payloads to help you turn alert(1) into P1. Link in thread 🧵👇

Luke Stephens (hakluke)

20,776 次观看 • 3 年前

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:

NullSecurityX

23,179 次观看 • 6 个月前

Live Bug Bounty Hunting - My Recon Methodology !!!🐞

Live Bug Bounty Hunting - My Recon Methodology !!!🐞

Gospel

136,416 次观看 • 1 年前

BACK TO BACK TOP BOUNTY PULLS!? 🤯 PokerStars EPT $3,000 Mystery Bounty WHAT EVEN!? Speechless.

BACK TO BACK TOP BOUNTY PULLS!? 🤯 PokerStars EPT $3,000 Mystery Bounty WHAT EVEN!? Speechless.

PokerNews

61,446 次观看 • 2 年前

CLAUDE BUG-HUNTER PACKS 71 BUG-BOUNTY SKILLS, 15 COMMANDS, AND 681 DISCLOSED REPORT PATTERNS INTO ONE OPEN-SOURCE TOOL.

CLAUDE BUG-HUNTER PACKS 71 BUG-BOUNTY SKILLS, 15 COMMANDS, AND 681 DISCLOSED REPORT PATTERNS INTO ONE OPEN-SOURCE TOOL.

0xMarioNawfal

36,712 次观看 • 2 个月前

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

Dark Web Informer

22,498 次观看 • 1 年前