mah_one Posted February 16, 2013 Report Posted February 16, 2013 Am primit urmatorul email de la paypal si m-am gandit ca poate pe unii o sa va ajute.Hello-This message is to notify you of a current update to sites that are eligible for Bug Bounty Submissions.Our second party hosted sites (www.paypal-*.com) are mainly marketing based sites that are not part of the core paypal domains (*paypal.com) and are managed by hosting vendor companies. They do not retain as long a lifecycle as the core domains and can have a more volatile timeline as many are tied to projects and regional initiatives. Due to their many times frequent updates, the list will not be maintained on the terms and conditions page. For your own reference, I have provided you a list of sites currently in process of being decommissioned and therefore not eligible for Bug Bounty processing.Sites to be decommissioned in coming months:paypal-deutschland.depaypal-danmark.dkpaypal-promo.espaypal-europe.compaypal-france.fr paypal-nederland.nlpaypal-norge.nopaypal-marketing.pl paypal-sverige.sepaypal-turkiye.compaypal-business.co.ukpaypal-marketing.co.ukpaypal-shopping.co.ukpaypal-australia.com.aupaypal-biz.compaypal-business.com.hkpaypal-marketing.com.hkpaypal-offers.com.hkpaypal-shopasia.compaypal-japan.compaypal-apac.compaypal-plaza.comthepaypalblog.comwww.paypal-brasil.com.brpaypal-marketing.caThe sites in scope of the program are:· .*paypal.com domains· Other PayPal Companieso Zongo BillMeLatero Whereo Microplaceo Card.ioo Billsafe· Partner Siteso www.paypal-*.com domains (not including the deprecated sites list shared with you)o any Paypal branded sites including www.thepaypalblog.com and ppmts.custhelp.comThank You,PayPal Site SecurityO zi buna,mah_one Quote
nAb.h4x Posted February 16, 2013 Report Posted February 16, 2013 Salutare ! Tocmai am gasit un XSS dintr-un site din aceasta lista ? Deci este valabil pt un bug bounty ? Quote
TheTime Posted February 16, 2013 Report Posted February 16, 2013 Scrie clar in mail-ul acela ca nu e valabil. Quote
nAb.h4x Posted February 16, 2013 Report Posted February 16, 2013 (edited) Ah ! Ok Pacat !// " I have provided you a list of sites currently in process of being decommissioned and therefore not eligible for Bug Bounty processing. " Edited February 16, 2013 by nAb.h4x Quote
mah_one Posted February 16, 2013 Author Report Posted February 16, 2013 Eu zic sa il trimiti si in caz de nu il valideaza le spui si tu ca pe site la ei scrie ca domeniul ala e in scop. Quote
nAb.h4x Posted February 16, 2013 Report Posted February 16, 2013 (edited) Eu zic sa il trimiti si in caz de nu il valideaza le spui si tu ca pe site la ei scrie ca domeniul ala e in scop.Dar am auzit ca trebuie sa am contul verificat (daca e sa ma calific pt o recompensa) Si eu nu il am ! Imi trebuie card ! Am sa vad ce o sa fac ! Multumesc de informatie !//Apropo, tu ai mai facut asa si ti-or dat ceva pana la urma ? Edited February 16, 2013 by nAb.h4x Quote
mah_one Posted February 16, 2013 Author Report Posted February 16, 2013 Fratele meu a trimis un Dom XSS si nu avea cont, si-a facut abia dupa ce i-a fost validat. Quote
nAb.h4x Posted February 16, 2013 Report Posted February 16, 2013 Fratele meu a trimis un Dom XSS si nu avea cont, si-a facut abia dupa ce i-a fost validat.Pai si el nu a verificat contul ? Plus ca al meu e si limitat ca imi cere card sa imi fac ca sa il deblochez )Dar si el unde a gasit Dom XSS ? In paypal.com ? Quote
mah_one Posted February 16, 2013 Author Report Posted February 16, 2013 (edited) defapt eu l-am gasit, si i l-am facut cadou, am zis ca poate incepe sa ii placa sa caute probleme.In main domain l-am gasit.Oricum am vreo 7 XSS submited:)), 1 duplicated restul valideSunt cateva invalide din cauza ca nu au stiut sa le reproduca Edited February 16, 2013 by mah_one Quote
nAb.h4x Posted February 16, 2013 Report Posted February 16, 2013 (edited) defapt eu l-am gasit, si i l-am facut cadou, am zis ca poate incepe sa ii placa sa caute probleme.In main domain l-am gasit.Oricum am vreo 7 XSS submited:)), 1 duplicated restul valideSunt cateva invalide din cauza ca nu au stiut sa le reproducaWow ! Nice job Deci ce zici ? Sa il raportez chiar daca mi-e contul limitat ? Edited March 25, 2013 by nAb.h4x Quote
mah_one Posted February 16, 2013 Author Report Posted February 16, 2013 Nu ai ce sa pierzi..... Quote
nAb.h4x Posted February 16, 2013 Report Posted February 16, 2013 Nu ai ce sa pierzi.....Pai crezi ca poate sa imi faca plata daca mi-e limitat contul ? ) Intr-un fel ar putea Dar na nu stiu ce sa zic Mai astept unpic ! Si chiar daca il gaseste altcineva asta e ! Nu e ultimul .... Si in 10 min l-am gasit ! Mai mult nu mi-a luat !Oricum multumesc de incurajare si de informatii ! Mai putini vad care te incurajeaza pe aici Quote
mah_one Posted February 16, 2013 Author Report Posted February 16, 2013 Raporteaza-l repede, ca o sa se uite altii care au vazut acest topic, nu tre sa dai cont acum, dai mai tarziu. Fratele meu a dat bugul in decembrie anul trecut, acum o saptamana a primit mail de la ei ca e valid si si-a facut cont acum o satpamana + a pus card pe el ca sa le zica unde sa trimita banii. Quote
dekeeu Posted February 16, 2013 Report Posted February 16, 2013 Boss, am primit de la PP 1000$ cu contul neverificat. Raporteaza-l ! Quote
nAb.h4x Posted February 16, 2013 Report Posted February 16, 2013 (edited) Boss, am primit de la PP 1000$ cu contul neverificat. Raporteaza-l ! E limitat contu ! Mno, lasa ca il raportez ! )Multumesc de raspuns Edited February 16, 2013 by nAb.h4x Quote
