[Lozab]

Spoiler (Click to View)

Alexa rank: 4 


I don't like to share stuff, so that's why I blacked out most of the page, I'd love to see if anyone finds it though.

Thoughts?

[Lozab]

lol I doubt it, plus if they found it on there own, I don't mind, but using my picture is useless since they don't have the codes needed for the XSS.

[Lozab]

Finding the vector is the easy part.

well yeah if its the normal <script> alert stuff, but yeah idc, I have already reported it so yeah.

[‌‌‌‌‌Thr‌‌‌‌‌]

I don't think anyone saw this one coming.

[byRadial]

This thread is getting more interesting by the minute.

[Lozab]

This thread is getting more interesting by the minute.

I'm gonna post more cool XSS findings later, Bing is one of them. ;)

[smiegles]

bing, no problem
https://i.imgur.com/qlfb8XU.png

[Lozab]

bing, no problem
https://i.imgur.com/qlfb8XU.png

Spoiler (Click to View)
XSS^
@Gee4rce

I will keep this as a 0day, since Yahoo haven't responded to me if they reward peeps.

and Really nice find bro. :O

[Lozab]

Since, we all are bragging about our 1337 0-Dayz, here we go
Spoiler (Click to View)
Yup, its persistant XSS, got multiple of them, all are non reported :P

Isn't this XSS on 1337day?

actersss

[Lozab]

It is, and also in the Deepweb, but there are multiple ones, and soon there will be one for sale here, as I am in need for some cash

Oh, So its one of those stored XSS's in paypal right?

[HolyGates]

daym nice find man! yahoo got rocked.

[Lozab]

Nice find. Have you decided on reporting it yet?

Well I'm currently waiting for there Response.

but some people say Yahoo doesn't reward people who find Exploits, not sure about that.

[TheKingOfArabs]

Well I'm currently waiting for there Response.

but some people say Yahoo doesn't reward people who find Exploits, not sure about that.

I'm pretty sure they send you a yahoo shirt.

Google and Facebook reward $500.

[TheKingOfArabs]

Google's minimum is 100$, and Facebook's minimum reward is 500, you get more than 500$ for an XSS ;)

I know.
You just repeated what I said.

[smiegles]

Yahoo gives a 25$ code for there company store.