+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [4 XSS] Google + Hall of Fame + $3000 [UPDATED 06/02/12] (/showthread.php?tid=2012639)
* - dennomination - Dec 15, 2011
philkers that hacked ovp site on the ph im phil too hes nice huh
* - elvinguitar - Dec 15, 2011
(Dec 15, 2011 11:33 PM)Falken Wrote: im proud of this guy. he's a filipino by the way. co-philker member
Yow co-philker! 😁 honestly, i'm not really active anymore in philker. but i'm still proud to be a philker. ✌
By the way, how's philker bro?
(Dec 15, 2011 11:35 PM)dennomination Wrote: philkers that hacked ovp site on the ph im phil too hes nice huhAgree! 🙂 but i'm not yet a philker member when they defaced it. :)
* - F1erceX - Dec 15, 2011
bro add me on msn. [email protected]
madami ako kwento sau. LOL
* - olmetec - Dec 16, 2011
Excellent work there young man. ✌
* - Wheelz - Dec 16, 2011
Good Job Man, I hear Facebook pays like $500 for each vulnerability too.
* - elvinguitar - Dec 16, 2011
(Dec 15, 2011 11:49 PM)Falken Wrote: bro add me on msn. [email protected]
madami ako kwento sau. LOL
I don't have msn bro. sorry. :(
(Dec 16, 2011 12:59 AM)olmetec Wrote: Excellent work there young man. ✌
Thanks there mate! :)
(Dec 16, 2011 01:01 AM)Wheelz Wrote: Good Job Man, I hear Facebook pays like $500 for each vulnerability too.Yeah! I know about it. But unfortunately, i still can't find xss on facebook. :(
* - gaccount - Dec 16, 2011
Nice find mate, even i found a vulnerability in google but they said its not eligible for a reward
* - elvinguitar - Dec 16, 2011
(Dec 16, 2011 02:51 AM)gaccount Wrote: Nice find mate, even i found a vulnerability in google but they said its not eligible for a reward
Is that the one you posted on google code? It's really not eligible for the reward since it's only google sandbox.
By the way, I'm so lucky today. I've found another XSS on google about 30 mins ago. :)
* - xviiirus - Dec 16, 2011
awesome bro, ill give a try finding one too
(Dec 16, 2011 02:59 AM)elvinguitar Wrote: Is that the one you posted on google code? It's really not eligible for the reward since it's only google sandbox.
By the way, I'm so lucky today. I've found another XSS on google about 30 mins ago. :)
Do you find them using your regular IP like would they log my ip if i tried anything like this ?
* - saintcracker - Dec 16, 2011
bro thats totally awesome, congrats man, keep up the good work :)
* - elvinguitar - Dec 16, 2011
(Dec 16, 2011 04:05 AM)xviiirus Wrote: awesome bro, ill give a try finding one too
Do you find them using your regular IP like would they log my ip if i tried anything like this ?
Yeah! I'm just using a regular IP when finding them. 🙂 I think google automatically logs your IP. But i don't think they will hunt you down. 😁
(Dec 16, 2011 04:58 AM)saintcracker Wrote: bro thats totally awesome, congrats man, keep up the good work :)
thanks there mate! 🙂 I'm waiting for google's reply about my new report. ✌
* - ghsama - Dec 16, 2011
that's niiice !
How could I find xss n webs Please
could u explain how you find them ?
* - randomize - Dec 16, 2011
@elvinguitar
Gj :D
I have found two or three XSS vulns in google maybe a year ago but I keept it for myself stealing cookies from noobs at the time :D but now Im busting my ass off trying to find .txt documet I saved the links :D LOL
So just an email to security@google is enoug or where is the form for reporting the vuln to google?
* - gaccount - Dec 16, 2011
(Dec 16, 2011 02:59 AM)elvinguitar Wrote: Is that the one you posted on google code? It's really not eligible for the reward since it's only google sandbox.
By the way, I'm so lucky today. I've found another XSS on google about 30 mins ago. :)
Yeah, and do you use any tool or something else to find vulnerabilities
* - elvinguitar - Dec 16, 2011
(Dec 16, 2011 05:33 AM)ghsama Wrote: that's niiice !The very first thing you need to do is surf the web about xss tutorials. 🙂 that will help you a lot!
How could I find xss n webs Please
could u explain how you find them ?
(Dec 16, 2011 05:33 AM)randomize Wrote: @elvinguitar
Gj :D
I have found two or three XSS vulns in google maybe a year ago but I keept it for myself stealing cookies from noobs at the time :D but now Im busting my ass off trying to find .txt documet I saved the links :D LOL
So just an email to security@google is enoug or where is the form for reporting the vuln to google?
"a year ago"?? C'mon!! Is this a JOKE??!! If it's a year ago, I'm sure google has already fixed it because there are lot of people looking for xss on google. 😠
If what you've said is true, report them now to google and then show us your xss.
(Dec 16, 2011 05:41 AM)gaccount Wrote: Yeah, and do you use any tool or something else to find vulnerabilities
yes! I'm using a tool. It's brain.dll. 😁