Active Members akkiliON Posted June 9, 2013 Active Members Report Posted June 9, 2013 ~ Exploit: *.Yahoo.net - XSS (Cross Site Scripting) Reflected~ Author: akkiliON~ Date: 05/09/2013~ Target: Yahoo~ PoC: Quote
Sega Posted June 9, 2013 Report Posted June 9, 2013 Target: yahoo.NETChiar daca nu era httponly t= de pe yahoo.COM, tot nu puteai sa iei cookie-urile cu un XSS de pe yahoo.NETOtherwise: Felicitari, e YAHOO pana la urma L-ai raportat ? Quote
Active Members akkiliON Posted June 9, 2013 Author Active Members Report Posted June 9, 2013 ?tiu c? nu se poate fura cookie ! L-am raportat !Am scris Yahoo ca ?int? doar + am scris ?i pagina lor principal? care este !Dac? m? în?elegi Quote
dekeeu Posted June 9, 2013 Report Posted June 9, 2013 Pot sa stiu ce vector ai folosit? Multumesc Cred ca e destul de evident . (ma rog pentru cine stie ce-i ala xss) Quote
Sdicky Posted June 9, 2013 Report Posted June 9, 2013 Cred ca e destul de evident . (ma rog pentru cine stie ce-i ala xss)Lol sorry nu ma uitasem atent la poza Quote
dirtycash Posted June 9, 2013 Report Posted June 9, 2013 Bravo ... stiu ca te-ai pus sa cauti si tu in subdomeniile alea. Eu am mai raportat dar nu mi-au raaspuns decat la unul... Quote
1337 Posted June 14, 2013 Report Posted June 14, 2013 *E intr-un swf, se vede si dupa vector, asta pt amatori. Quote
Active Members akkiliON Posted June 14, 2013 Author Active Members Report Posted June 14, 2013 Se pare c? e reparat !Era în Sea Advertising YahooRecompens? :@[cenzurat]We are going to resend you a tshirt and some new gear. Please note that all items are sent out on fridays. It should take a week or so.Regards,Yahoo! Security ContactOn Tue, Jun 11, 2013 Quote
starzz Posted June 21, 2013 Report Posted June 21, 2013 Se pare c? e reparat !Era în Sea Advertising YahooRecompens? :bravo,te imbraca astia de la yahoO ^^ Quote
awnly3jhc2g Posted June 21, 2013 Report Posted June 21, 2013 "and some new gear"Mor de curiozitate ce anume. Sa postezi te rog cand primesti si ce primesti ...P.S. felicitari Quote
Active Members akkiliON Posted June 21, 2013 Author Active Members Report Posted June 21, 2013 Pe langa tricou mai ceva. Quote
nacks Posted June 21, 2013 Report Posted June 21, 2013 Pe langa tricou mai ceva.Dar ai primit coletul ? ... "some new gear" mi au spus si mie, dar cred ca saptamana urmatoare o sa ajunga coletul. Nu face mai mult de 3 zile prin Fedex express ... Quote
Active Members akkiliON Posted June 21, 2013 Author Active Members Report Posted June 21, 2013 (edited) Astazi ar trebui sa primesc. Vinerea trecuta am trimis datele si din cate stiu 7 zile trebuie sa astepti ! Edited June 21, 2013 by akkiliON Quote
nacks Posted June 21, 2013 Report Posted June 21, 2013 De obicei pun coletele vineri, si la mine ajunge in maxim 3 zile ... adica marti sau maxim miercuri ... Quote
Active Members akkiliON Posted June 21, 2013 Author Active Members Report Posted June 21, 2013 De obicei pun coletele vineri, si la mine ajunge in maxim 3 zile ... adica marti sau maxim miercuri ...Eu cunosc pe cineva care a primit un tricou de la yahoo si la primit in maxim 7 zile ( el sta prin Suceava )Acum depinde Quote
cucuro Posted June 21, 2013 Report Posted June 21, 2013 Some new gear = catusi + sapun lichid + o turma de mascati la poarta Quote
SilenTx0 Posted June 21, 2013 Report Posted June 21, 2013 (edited) Nu-i adevarat.De ce majoritatea o ardeti cu "vaaii ai gasit o vulnerabilitate? pregaste sapun blablabla" .Nu va mai cacati atata pe voi ca nu vine nimeni pentru un rahat de xss raportat.In plus,daca nu ai facut prejudicii cu acea vulnerabilitate nici o sansa sa vina dupa tine pentru ca pe ei ii costa localizarea + alte cacaturi.Some new gear = o lanterna si un termos.(asta am primit eu) Edited June 21, 2013 by SilenTx0 Quote
dirtycash Posted June 21, 2013 Report Posted June 21, 2013 Am raportat doua , acum doua saptamani. Ce am primit? Nimic , am fost la posta sa intreb daca au trimis ceva pe numele meu , strada mea etc , dar nimic ... M*ie Yahoo. Quote
SilenTx0 Posted June 21, 2013 Report Posted June 21, 2013 Am raportat doua , acum doua saptamani. Ce am primit? Nimic , am fost la posta sa intreb daca au trimis ceva pe numele meu , strada mea etc , dar nimic ... M*ie Yahoo.Ti-l trimite prin curier nu prin posta. La mine de fiecare data cand am raportat ceva a venit. Quote
florin_darck Posted June 21, 2013 Report Posted June 21, 2013 Am raportat doua , acum doua saptamani. Ce am primit? Nimic , am fost la posta sa intreb daca au trimis ceva pe numele meu , strada mea etc , dar nimic ... M*ie Yahoo.In aceeasi situatie si eu Quote
nacks Posted June 21, 2013 Report Posted June 21, 2013 Am primit la tot ce am raportat - FedEx Express + FAN Courier ... In vinerea din saptamana in care iti cer datele de contact, pun ei coletul la FedEx si in rest este doar timpul de curierat ... Quote
SilenTx0 Posted June 21, 2013 Report Posted June 21, 2013 Am primit la tot ce am raportat - FedEx Express + FAN Courier ... In vinerea din saptamana in care iti cer datele de contact, pun ei coletul la FedEx si in rest este doar timpul de curierat ...La fel si la mine. Quote
Active Members akkiliON Posted June 21, 2013 Author Active Members Report Posted June 21, 2013 (edited) Tricoul o sa imi vina pe marti deoarece am ratat astazi ocazia Edited July 9, 2014 by akkiliON Quote
