Darkb0t Posted August 24, 2013 Report Posted August 24, 2013 (edited) Vulnerability cross site scripting on site coin digital perfectmoney,digital currency of the moment,: dType: [xss] cross site scripiting reflected [hig]Browser:mozila firefoxProof:View image: xss by Darkb0t11Situation: bug reported,[waiting reply from admin],$$$ Edited August 24, 2013 by hate.me Quote
Darkb0t Posted August 24, 2013 Author Report Posted August 24, 2013 Well,i do not know xdi sent this picture cited above,i sent no links or other images of bug, i asked a reward $ $, if they do not want to pay, and the problem of themi do not care to sell this vulnerability to explore hackers, thanks Quote
Darkb0t Posted August 27, 2013 Author Report Posted August 27, 2013 Au program de bug-bounty ?lol,REPLY FROM ADMIN PM, I THINK FINALLY SUCCESS AND MY FAVOURITE WORD XDSubject: Re: [Feedback] Bug reporthello DarkbotIt is a pleasure for us to receive a message from you. We are interestedin the Cooperation with you.We are interested in making our website a safer place for our members.We can fund your account with 1000 PM if you help us to close quevulnerability.Sincerely,Andrew DraperOn Sat, 24 Aug 2013 02:56:05 +0200PerfectMoney 0day XSS cross site scripting reflected Quote
dekeeu Posted August 27, 2013 Report Posted August 27, 2013 lol,REPLY FROM ADMIN PM, I THINK FINALLY SUCCESS AND MY FAVOURITE WORD XDSubject: Re: [Feedback] Bug reporthello DarkbotIt is a pleasure for us to receive a message from you. We are interestedin the Cooperation with you.We are interested in making our website a safer place for our members.We can fund your account with 1000 PM if you help us to close quevulnerability.Sincerely,Andrew DraperOn Sat, 24 Aug 2013 02:56:05 +0200PerfectMoney 0day XSS cross site scripting reflectedWhat means 1000 PM ? Quote
sebywarlord Posted August 27, 2013 Report Posted August 27, 2013 @Toshiba 1000 PM = 1000 dolari pe perfectmoney:) Quote
Darkb0t Posted August 27, 2013 Author Report Posted August 27, 2013 What means 1000 PM ?lol,1000 $ $ usd Quote
Darkb0t Posted August 27, 2013 Author Report Posted August 27, 2013 Congrats, Darkb0t .Thank TOSHIB4,MY RESPECT, I THINK THAT YOU WILL EARN MORE $ $ THAN I, [XSS PAYPAL] LOLUPDATE:perfectmoney.is actually has multiple vulnerabilities xssI found two sections cross site scripting, all reflected Quote
Brenin Posted August 27, 2013 Report Posted August 27, 2013 OF course they will pay you 1k USD, they have plenty from all the blocked accounts they are doing latelyNice find Quote
jeanrein Posted August 28, 2013 Report Posted August 28, 2013 perfectmoney is shit, they block random accounts. just lost mine with 550 usd... Quote
Active Members akkiliON Posted August 28, 2013 Active Members Report Posted August 28, 2013 I just found one. XSS Reflected Quote
Darkb0t Posted August 29, 2013 Author Report Posted August 29, 2013 (edited) I just found one. XSS Reflectedtrying to disrupt my report AKILLION?, LOLYOU ARE USING THE WRONG METHOD,, XSS METHODS HAVE INFINITEhas several xss in several sections xd, all reflectedstop sending reports xd,they're going to consider just who sent the first report anyway good luck akillion Edited August 29, 2013 by Darkb0t Quote
Darkb0t Posted August 29, 2013 Author Report Posted August 29, 2013 FINALLY RECOGNITION OF ADMIN PerfectMoney5 VULNERABILITY XSS Cross Site Scripting REPORTED, ALL BEEN FIXED, AND AM NOW SAFERREWARD RECEIVED, HAPPY DAY1.000 $$ in my account pm XD; Quote
Active Members akkiliON Posted August 29, 2013 Active Members Report Posted August 29, 2013 FINALLY RECOGNITION OF ADMIN PerfectMoney5 VULNERABILITY XSS Cross Site Scripting REPORTED, ALL BEEN FIXED, AND AM NOW SAFERREWARD RECEIVED, HAPPY DAY1.000 $$ in my account pm XD;Well, my xss reflected still works. Quote
Darkb0t Posted August 30, 2013 Author Report Posted August 30, 2013 1000$ for all 5 vulns. ?well, I ordered a reward of 2k plus he sent me only 1kanyway and a good reward, the more I think it is worth a lot more $ $ Quote
Darkb0t Posted August 30, 2013 Author Report Posted August 30, 2013 Well, my xss reflected still works. it might take a while to fix this vulnerability,you received some reward? Quote
Active Members akkiliON Posted August 30, 2013 Active Members Report Posted August 30, 2013 FINALLY RECOGNITION OF ADMIN PerfectMoney5 VULNERABILITY XSS Cross Site Scripting REPORTED, ALL BEEN FIXED, AND AM NOW SAFERREWARD RECEIVED, HAPPY DAY1.000 $$ in my account pm XD;You said all vulnerabilities are fixed !How can you explain my xss reflected works ? Quote
Darkb0t Posted August 31, 2013 Author Report Posted August 31, 2013 You said all vulnerabilities are fixed !How can you explain my xss reflected works ?well I was talking about the 5 xss I found, I remembered that I had not found 1xss for you xd, Quote
Brenin Posted August 31, 2013 Report Posted August 31, 2013 Besides that, Darkbot i think ur full of shit, and ur reported xss's are fake. Quote
Darkb0t Posted September 15, 2013 Author Report Posted September 15, 2013 Besides that, Darkbot i think ur full of shit, and ur reported xss's are fake.omg, you are crazy?here is my proof to youView image: xss by Botmaster55this vulnerability was fixed, Quote
iHouse Posted September 15, 2013 Report Posted September 15, 2013 omg, you are crazy?here is my proof to youView image: xss by Botmaster55this vulnerability was fixed,Did they paid you? Quote