Active Members akkiliON Posted September 4, 2013 Active Members Report Share Posted September 4, 2013 # Exploit: *.mozilla.org - Cross-Site-Scripting Reflected# Author: akkiliON# URL Link: https://mozilla.org# PoC: Reported 1 Quote Link to comment Share on other sites More sharing options...
Nytro Posted September 4, 2013 Report Share Posted September 4, 2013 Uuu, astia platesc bine nu? Quote Link to comment Share on other sites More sharing options...
Active Members akkiliON Posted September 4, 2013 Author Active Members Report Share Posted September 4, 2013 Da, platesc bine + tricou din câte am v?zut dau. Quote Link to comment Share on other sites More sharing options...
kalash1337 Posted September 4, 2013 Report Share Posted September 4, 2013 Da, platesc bine + tricou din câte am v?zut dau. O intrebare, cati bani ai scos din xss-urile gasite. Scoti de un suc? Oricum, bravo Quote Link to comment Share on other sites More sharing options...
TheTime Posted September 4, 2013 Report Share Posted September 4, 2013 Felicitari pentru gaselnita! Din pacate, daca este in support.mozilla.org, nu cred ca o sa primesti nimic. Quote Link to comment Share on other sites More sharing options...
Active Members akkiliON Posted September 4, 2013 Author Active Members Report Share Posted September 4, 2013 (edited) Felicitari pentru gaselnita! Din pacate, daca este in support.mozilla.org, nu cred ca o sa primesti nimic.What about sites which are notlisted?If you find an issue with a site which is not "officially" part under the web application bug bounty, we would still like to know. If the bug is extraordinary, we might still consider the bug to be nominated for a bounty. In the past we have paid for interesting bugs which are outside of normalpolicy.Nu se ?tie Edited September 4, 2013 by akkiliON Quote Link to comment Share on other sites More sharing options...
FarSe Posted September 4, 2013 Report Share Posted September 4, 2013 Bug Bounty nu erau pentru produsele lor? gen firefox,nu cred ca o sa iti iei $3000 pt un xssOricum bravo , pune ban pe ban si iati ceva frumos Quote Link to comment Share on other sites More sharing options...
Active Members akkiliON Posted September 4, 2013 Author Active Members Report Share Posted September 4, 2013 Bug Bounty nu erau pentru produsele lor? gen firefox,nu cred ca o sa iti iei $3000 pt un xssOricum bravo , pune ban pe ban si iati ceva frumosDe la 500$ - 3000$ !Nu am zis c? primesc 3000$ pe un XSS de la ei. Quote Link to comment Share on other sites More sharing options...
FarSe Posted September 4, 2013 Report Share Posted September 4, 2013 Ah,era scris mai jos,eu ma uitam la "Client Reward Guidelines", nu la "Web Application and Services Reward Guidelines"Oricum bravo . Quote Link to comment Share on other sites More sharing options...
dang3r1988 Posted September 4, 2013 Report Share Posted September 4, 2013 nu multi reusesc sa faca asta bravo;) Quote Link to comment Share on other sites More sharing options...
Active Members akkiliON Posted October 3, 2013 Author Active Members Report Share Posted October 3, 2013 No reward for this bug (csrf token) Patched. Quote Link to comment Share on other sites More sharing options...
daatdraqq Posted October 3, 2013 Report Share Posted October 3, 2013 No reward for this bug (csrf token) Patched.Pai n-ai cum sa interactionezi cu userul din cate vad .Daca n-ai cum sa interactionezi prin click direct e normal sa nu te premieze . Quote Link to comment Share on other sites More sharing options...
Active Members akkiliON Posted October 3, 2013 Author Active Members Report Share Posted October 3, 2013 (edited) Pai n-ai cum sa interactionezi cu userul din cate vad .Daca n-ai cum sa interactionezi prin click direct e normal sa nu te premieze .Dac? nu avea CSRF Token îl faceam în GET Method ?i cred c? nu mai aveam treab?. Asta e. Edited October 3, 2013 by akkiliON Quote Link to comment Share on other sites More sharing options...
daatdraqq Posted October 3, 2013 Report Share Posted October 3, 2013 Dac? nu avea CSRF Token îl faceam în GET Method ?i cred c? nu mai aveam treab?. Asta e.Ghinionu' coaie ,vorba unui prieten . Quote Link to comment Share on other sites More sharing options...
Active Members akkiliON Posted October 3, 2013 Author Active Members Report Share Posted October 3, 2013 Ghinionu' coaie ,vorba unui prieten .Nu e prima dat? când mi se întâmpl?. Quote Link to comment Share on other sites More sharing options...
