[XSS] *.Google.com

[akkiliON]

# Exploit: *.Google.com - Cross-Site-Scripting Reflected

# Author: akkiliON

# URL Link: https://Google.com

# Status: Submitted

# PoC:

Am s? revin cu un video când e fixat

Edited September 3, 2013 by akkiliON

[Darkb0t]

huum, very interesting, congrats, reflected in the browser crhome

were you logged in?

[akkiliON]

Yep, You can see in the right corner my name !

I will come back with a video when is fixed.

// Works on: Firefox Mozilla, Google Chrome, Safari, Opera, etc.

[dekeeu]

Bravo. ! E de 3 sau 5k ?

[akkiliON]

Bravo. ! E de 3 sau 5k ?

E într-una din aplica?iile lor importante, care se încadreaz? la 5000 $

[tpad]

acum spera sa nu fie dup

[wildchild]

Ai uitat s?-?i cenzurezi numele

[akkiliON]

Ai uitat s?-?i cenzurezi numele

Nu îi stres.

Edited May 10, 2014 by akkiliON

[Darkb0t]

hmm, I'm interested,

I have some SQL INJECTION GOOGLE, I do not know more powder may enter the program rewards google

proof:View image: sqlinjection google

have a message box, since I typed cookiesinjection, then a dialog appeared, I think cookies, but I do not think I can do again, maybe I'm using the wrong parameter,

I think google maps has no rewards AKKILION;

[akkiliON]

hmm, I'm interested,

I have some SQL INJECTION GOOGLE, I do not know more powder may enter the program rewards google

proof:View image: sqlinjection google

have a message box, since I typed cookiesinjection, then a dialog appeared, I think cookies, but I do not think I can do again, maybe I'm using the wrong parameter,

I think google maps has no rewards AKKILION;

^ You're funny !

[dekeeu]

hmm, I'm interested,

I have some SQL INJECTION GOOGLE, I do not know more powder may enter the program rewards google

proof:View image: sqlinjection google

have a message box, since I typed cookiesinjection, then a dialog appeared, I think cookies, but I do not think I can do again, maybe I'm using the wrong parameter,

I think google maps has no rewards AKKILION;

Haha, auzi SQLi in Google. Mai venise cineva la un moment dat care se lauda ca a spart baza de date de la Google cu Havij.

Ce ai gasit tu acolo nu e niciun SQLi,e doar un bug de afisare (ai un parametru in link care se numeste `output` care default are valoarea `js`, dar probabil ai schimbat valoarea si ti-a aparut acel box)

[Darkb0t]

lol, you made ??me laugh,

[Darkb0t]

Haha, auzi SQLi in Google. Mai venise cineva la un moment dat care se lauda ca a spart baza de date de la Google cu Havij.

Ce ai gasit tu acolo nu e niciun SQLi,e doar un bug de afisare (ai un parametru in link care se numeste `output` care default are valoarea `js`, dar probabil ai schimbat valoarea si ti-a aparut acel box)

well, it seems that you understand

I used Webscanner and appeared several sql google xd

look at this link:"]https://books.google.com/local?err=1^source=s_d&saddr=&daddr=&f=q&source=s_q&output=js&hl=en&geocode=%20&abauth=51f1d3aeLSQzxdG_MVmBQfyVtK-Ji9AUe8o&f=%20[GOOGLE]

I found it interesting

[akkiliON]

Darkb0t sper sa iei ban cat de repede pentru double post si pentru cretinism.

Cat despre akillion, felicitari.

Thank you

Intru mai desear? pe forum.

[dekeeu]

well, it seems that you understand

I used Webscanner and appeared several sql google xd

look at this link:"]https://books.google.com/local?err=1^source=s_d&saddr=&daddr=&f=q&source=s_q&output=js&hl=en&geocode=%20&abauth=51f1d3aeLSQzxdG_MVmBQfyVtK-Ji9AUe8o&f=%20[GOOGLE]

I found it interesting

Use BRAIN-scanner and probably you will have more succes !

[lukas.luci19]

Sa ne zici si noua,akkiliON ,daca vrei ,cati bani iti da cei de la google pentru ce ai gasit ! Chiar sunt curios

[SilenTx0]

e vorba de xss-ul pe care il stiu eu?

[akkiliON]

e vorba de xss-ul pe care il stiu eu?

Yep.

[a1234]

Nice cruce bro, but i don't see where they list "cruce" in the bug bounties.

Maybe darkb0t can explain to us.

[akkiliON]

I just made a video now. I will upload the video when the bug is fixed.

[iuly1997]

Bravo akillon, ceva recompensa?

[FarSe]

De 4k dolari iti iei o masinuta frumoasa si de 1k iti iei de consum. Faci o excursie toata tara .

Good job.

[akkiliON]

Bravo akillon, ceva recompensa?

Înc? nu am primit r?spuns.

Dar nu e de 5000 $ .... am gre?it eu. Din câte v?d, de când or m?rit pre?urile, dou? site-uri or fost scoase de la Other highly sensitive services [1] Maxim a? putea s? primesc $3,133.7. E bun ?i atât.

[akkiliON]

S?-mi bag pula în el Bug Bounty-ul lor si tot.

Acum v?d c? numai func?ioneaz? xss-ul. Au reparat vulnerabilitatea ?i nu am primit r?spuns.

// Scuze de double-post.

[dekeeu]

S?-mi bag pula în el Bug Bounty-ul lor si tot.

Acum v?d c? numai func?ioneaz? xss-ul. Au reparat vulnerabilitatea ?i nu am primit r?spuns.

// Scuze de double-post.

Si la mine au facut la fel. Mai intai l-au reparat si apoi mi-au dat banii. So, chill .