Jun 5, 2020 10:02 PM
(This post was last modified: Jun 5, 2020 10:02 PM by TheBrokenWasp.)
What would be the best use of XSS vulns?
I decided to see how easily I can find them, and holy shit... I wrote in a bunch of random three-letter name websites and smashed a .net, .org, or .com at the end and within 10 minutes I found 3 websites with 0 XSS protection. Now I just don't know what to do with it. Obviously, websites who have clearly never heard of security are unlikely to have a bug bounty, and I don't want to get sued for finding vulns as I read companies do all the time for no reason. Is there another way I could use this to make money? Please let me know, thanks for any info you can provide.
I decided to see how easily I can find them, and holy shit... I wrote in a bunch of random three-letter name websites and smashed a .net, .org, or .com at the end and within 10 minutes I found 3 websites with 0 XSS protection. Now I just don't know what to do with it. Obviously, websites who have clearly never heard of security are unlikely to have a bug bounty, and I don't want to get sued for finding vulns as I read companies do all the time for no reason. Is there another way I could use this to make money? Please let me know, thanks for any info you can provide.