+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Best use of random XSS vulns (/showthread.php?tid=6085044)
Best use of random XSS vulns - TheBrokenWasp - Jun 5, 2020
What would be the best use of XSS vulns?
I decided to see how easily I can find them, and holy shit... I wrote in a bunch of random three-letter name websites and smashed a .net, .org, or .com at the end and within 10 minutes I found 3 websites with 0 XSS protection. Now I just don't know what to do with it. Obviously, websites who have clearly never heard of security are unlikely to have a bug bounty, and I don't want to get sued for finding vulns as I read companies do all the time for no reason. Is there another way I could use this to make money? Please let me know, thanks for any info you can provide.