+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [XSS] Google Vuln - Curious fact READ [XSS] (/showthread.php?tid=2288411)
[XSS] Google Vuln - Curious fact READ [XSS] - Pr3nK - Mar 9, 2012
Hi guys, i think i've found a XSS vulnerablity on Google.com, but strangely the popup appear without writing any XSS vector, but simply searching a particular word. I wanna know if i can see how the vector automatically start and make the popup appears.
Can we call it XSS vuln? Should I report the problem to Google?
Judge for yourself
Spoiler (Click to View)
* - 1337B345T3R - Mar 9, 2012
Yeah you should. People who have reported XSS's to google have gotten paid in excess of $500! Do it bro. Oh and give me 75% of the money lol.
* - Pr3nK - Mar 9, 2012
(Mar 9, 2012 05:28 PM)1337B345T3R Wrote: Yeah you should. People who have reported XSS's to google have gotten paid in excess of $500! Do it bro. Oh and give me 75% of the money lol.
How I said in my previous post, it doesn't appear with any XSS vector 😖
* - FastFive - Mar 9, 2012
the only way this happened IMO is that an advertisement, or search result contained an xss vector. can you please view the source, find the code which triggered this event by search for "alert(/1/)" and post the surrounding area of code so we can tell what the hell happened? this sounds interesting
* - Pr3nK - Mar 9, 2012
(Mar 9, 2012 05:32 PM)FastFive Wrote: the only way this happened IMO is that an advertisement, or search result contained an xss vector. can you please view the source, find the code which triggered this event by search for "alert(/1/)" and post the surrounding area of code so we can tell what the hell happened? this sounds interesting
In the source code there isn't any trace of any kind of vector. This is very strange....
* - FastFive - Mar 9, 2012
the only thing i can think of that could explain this is that one of the page previews/iframes that google has for every site contained code in it, and it was triggered
or you missed something in the source code... i would double check if i were you...
* - 010100111001 - Mar 9, 2012
If you send me the link I will look into what is causing this for you and get back to you.
Testing 123 Testing 123 Testing 123 Testing 123
* - Pr3nK - Mar 9, 2012
(Mar 9, 2012 05:44 PM)FastFive Wrote: the only thing i can think of that could explain this is that one of the page previews/iframes that google has for every site contained code in it, and it was triggeredAmong the results of my search there are some vectors, but if i input one of them the popup doesn't appear. So I'm undecided whether or not to report it...
or you missed something in the source code... i would double check if i were you...
(Mar 9, 2012 05:46 PM)010100111001 Wrote: If you send me the link I will look into what is causing this for you and get back to you.Sorry mate, but i prefer not to send you the syntax because it maybe is an important vuln. If you can give me some advice you're welcome
* - FastFive - Mar 9, 2012
look man idk, if you trust me send me the link and ill look at it. your right, it could be something big, it looks like persistant xss originated from another site, however if this is being caused by an outside source as i suspect you are not the creator or finder of this, and chances are a large amount of people know of it already
email the page to [email protected], then post the link here. they only reward the fist sender.
* - Pr3nK - Mar 10, 2012
I sent the email to GoogleSec about a hour ago. I heard they don't answer on the weekend, means that wait
* - RebornX - Mar 10, 2012
They will respond , make sure you used correct format.
* - cheatson - Mar 10, 2012
Cool, very odd indeed. Let's hope the bug is exploitable- a popup alone isn't a security risk but it's a shame you couldn't find the source of the problem to show that it is exploitable, I am sure they would fix it in any case as they would with any annoying bug like that, but not so sure they would investigate it to the point to prove its exploitable for your benefit. Figners crossed for you. And don't worry about the 'format' of your emal, it doesn't actually matter.
* - MaXoNe - Mar 10, 2012
Use burp suite and try to intercept you request and if it is inside get request try to change it . If it works you'll be $500 dollars richer :)
* - ๖ۣۜRazor - Mar 10, 2012
Dont share this to anyone,
Otherwise they will report it and they will get paid.
Nice found man keep going!
* - Sanch0 - Mar 10, 2012
congrats man, as umut said, dont give it out otherwise ppl will steal it. :s