Mar 9, 2012 05:27 PM
(This post was last modified: Mar 9, 2012 05:53 PM by Pr3nK.)
Hi guys, i think i've found a XSS vulnerablity on Google.com, but strangely the popup appear without writing any XSS vector, but simply searching a particular word. I wanna know if i can see how the vector automatically start and make the popup appears.
Can we call it XSS vuln? Should I report the problem to Google?
Judge for yourself
[img]http://img843.imageshack.us/img843/820/googlevuln.jpg[/img]
Yeah you should. People who have reported XSS's to google have gotten paid in excess of $500! Do it bro. Oh and give me 75% of the money lol.
(Mar 9, 2012 05:28 PM)1337B345T3R Wrote: Yeah you should. People who have reported XSS's to google have gotten paid in excess of $500! Do it bro. Oh and give me 75% of the money lol.
How I said in my previous post, it doesn't appear with any XSS vector 😖
the only way this happened IMO is that an advertisement, or search result contained an xss vector. can you please view the source, find the code which triggered this event by search for "alert(/1/)" and post the surrounding area of code so we can tell what the hell happened? this sounds interesting
Mar 9, 2012 05:35 PM
(This post was last modified: Mar 9, 2012 06:18 PM by Pr3nK.)
(Mar 9, 2012 05:32 PM)FastFive Wrote: the only way this happened IMO is that an advertisement, or search result contained an xss vector. can you please view the source, find the code which triggered this event by search for "alert(/1/)" and post the surrounding area of code so we can tell what the hell happened? this sounds interesting
In the source code there isn't any trace of any kind of vector. This is very strange....
the only thing i can think of that could explain this is that one of the page previews/iframes that google has for every site contained code in it, and it was triggered
or you missed something in the source code... i would double check if i were you...
DO NOT DEAL WITH THIS MEMBER
If you send me the link I will look into what is causing this for you and get back to you.
Testing 123 Testing 123 Testing 123 Testing 123
Mar 9, 2012 05:49 PM
(This post was last modified: Mar 9, 2012 05:51 PM by Pr3nK.)
(Mar 9, 2012 05:44 PM)FastFive Wrote: the only thing i can think of that could explain this is that one of the page previews/iframes that google has for every site contained code in it, and it was triggered
or you missed something in the source code... i would double check if i were you... Among the results of my search there are some vectors, but if i input one of them the popup doesn't appear. So I'm undecided whether or not to report it...
(Mar 9, 2012 05:46 PM)010100111001 Wrote: If you send me the link I will look into what is causing this for you and get back to you. Sorry mate, but i prefer not to send you the syntax because it maybe is an important vuln. If you can give me some advice you're welcome
look man idk, if you trust me send me the link and ill look at it. your right, it could be something big, it looks like persistant xss originated from another site, however if this is being caused by an outside source as i suspect you are not the creator or finder of this, and chances are a large amount of people know of it already
email the page to [email protected], then post the link here. they only reward the fist sender.
I sent the email to GoogleSec about a hour ago. I heard they don't answer on the weekend, means that wait
They will respond , make sure you used correct format.
Mar 10, 2012 04:21 AM
(This post was last modified: Mar 10, 2012 04:22 AM by cheatson.)
Cool, very odd indeed. Let's hope the bug is exploitable- a popup alone isn't a security risk but it's a shame you couldn't find the source of the problem to show that it is exploitable, I am sure they would fix it in any case as they would with any annoying bug like that, but not so sure they would investigate it to the point to prove its exploitable for your benefit. Figners crossed for you. And don't worry about the 'format' of your emal, it doesn't actually matter.
Use burp suite and try to intercept you request and if it is inside get request try to change it . If it works you'll be $500 dollars richer :)
Dont share this to anyone,
Otherwise they will report it and they will get paid.
Nice found man keep going!
congrats man, as umut said, dont give it out otherwise ppl will steal it. :s
|
![[Image: H4kDu.png]](https://i.imgur.com/H4kDu.png)
