[elvinguitar]

Nice work.

Some told me that the main search is not vulnerable. 🤫

Thanks mate! 🙂

By the way, only "some" told you but not "all" 😁

See this mate: http://www.nilsjuenemann.de/2011/11/xss-...lecom.html

[Alienguy]

Cool man . Enjoy.
Can you explain the first one to me over PM ?
And good luck finding a few more .

[CR33T3N]

Good job on those.
But just out of curiosity , did google actually paid you yet?
And did you ask for paymet or did google just said that they will pay you?

[Crypter®]

Wow you are good in XSS and earn a lot of $$

[elvinguitar]

Cool man . Enjoy.
Can you explain the first one to me over PM ?
And good luck finding a few more .

No need to explain about this one mate since the link is already given. 🙂

Good job on those.
But just out of curiosity , did google actually paid you yet?
And did you ask for paymet or did google just said that they will pay you?

Honestly, i still don't have the money yet because it took 4-6 weeks before they release the money. Also, they are having a problem with my case because I used a different supplier name, it's because I don't have a bank account so I need to use my father's.

The last email i've received about the reward is that i will be able to get it on january. 🙂

[BeggFoMercy]

Nice damn great find lol how lucky are you xD

[Mr.Lazy]

hey man i would like to become pro as you..how can i learn XSS??

[elvinguitar]

Nice damn great find lol how lucky are you xD

thanks mate. :) maybe i'm really lucky because today, i've found an xss in mozilla. 😁

hey man i would like to become pro as you..how can i learn XSS??

the best way to learn XSS is first to read articles regarding it and then practicing. 🙂 also, don't forget that it really takes time to find xss on big companies so you need to be patient.

[~!White!~]

I was just wondering Google is weird with the way they award. I found a DOM-Based Xss vuln on Chrome and got $500 for it, but i found a Xss vuln on Accounts.google.com that was a Self-Xss but got $1000

[elvinguitar]

I was just wondering Google is weird with the way they award. I found a DOM-Based Xss vuln on Chrome and got $500 for it, but i found a Xss vuln on Accounts.google.com that was a Self-Xss but got $1000

I totally agree with you mate. The XSS I've found in fusion tables, which is in beta stage, worth $1000. While the XSS in google image, worh only $500. Maybe they have their own ways of determining how much will it be. 🙂

By the way, check my PM to you mate.

[Oxy]

Verry nice work there !!
do you mail them are is there a specified service for this on google?

[elvinguitar]

Verry nice work there !!
do you mail them are is there a specified service for this on google?

Yeah! Every time I have a new XSS, I just sent an email to [email protected]

[tmac13013]

this is very interesting...thanks for sharing

[RedBlade]

Awesome job! Keep up that xss work ;)

[elvinguitar]

this is very interesting...thanks for sharing

Awesome job! Keep up that xss work ;)

Thanks to both of you guys! 😁 I'm now starting finding new xss vulnerabilities. Wish me luck! 👍