Shelo Posted February 11, 2014 Report Share Posted February 11, 2014 XSS-ul a fost raportat acum astept raspunsul de la ei.Cred ca ma incadrez la 200 $ 1 Quote Link to comment Share on other sites More sharing options...
Active Members dancezar Posted February 11, 2014 Active Members Report Share Posted February 11, 2014 De ce doar 200$? ca doar e .google.com Quote Link to comment Share on other sites More sharing options...
Shelo Posted February 11, 2014 Author Report Share Posted February 11, 2014 Sa vad raspunsul de la ei ... chiar n-am ideie unde ma incadrez.. Quote Link to comment Share on other sites More sharing options...
Active Members dancezar Posted February 11, 2014 Active Members Report Share Posted February 11, 2014 Daca este subdomeniu .google.com te incadrezi la Normal Aplications adica la 3000$ Quote Link to comment Share on other sites More sharing options...
Shelo Posted February 11, 2014 Author Report Share Posted February 11, 2014 Gata a fost reparataici erahttps://play.google.com/store/books/details/Morgan_Rice_A_Quest_of_Heroes_Book_1_in_the_Sorcer?id=%22%3E%3Cimg%20scr=x%20onerror=alert%28/XSS/%29%3E Quote Link to comment Share on other sites More sharing options...
poq Posted February 11, 2014 Report Share Posted February 11, 2014 Nu ?tiu c sa zic dar eu am c?utat pe acolo si nu era nimic... Quote Link to comment Share on other sites More sharing options...
Shelo Posted February 11, 2014 Author Report Share Posted February 11, 2014 Gata a fost reparataici erahttps://play.google.com/store/books/details/Morgan_Rice_A_Quest_of_Heroes_Book_1_in_the_Sorcer?id=%22%3E%3Cimg%20scr=x%20onerror=alert%28/XSS/%29%3ECiteste mai bine Quote Link to comment Share on other sites More sharing options...
poq Posted February 11, 2014 Report Share Posted February 11, 2014 Da, am v?zut ce ai scris. Dar eu am c?utat acum ceva vreme acolo si nu era nimic! Quote Link to comment Share on other sites More sharing options...
sensi Posted February 11, 2014 Report Share Posted February 11, 2014 XSS-ul a fost raportat acum astept raspunsul de la ei.L-au reparat, dar nu ti-au raspuns ? Quote Link to comment Share on other sites More sharing options...
Shelo Posted February 11, 2014 Author Report Share Posted February 11, 2014 Inca nu am primit nici un mail , dar astept cu sufletul la gura Quote Link to comment Share on other sites More sharing options...
Silviu Posted February 11, 2014 Report Share Posted February 11, 2014 Ciudat, si eu am cautat acolo si nimic.. Presupunand ca ar fi adevarat, te felicit! Quote Link to comment Share on other sites More sharing options...
P.O.C Posted February 11, 2014 Report Share Posted February 11, 2014 Misto eu zic ca te incadrezi la 3000 Quote Link to comment Share on other sites More sharing options...
Active Members dancezar Posted February 11, 2014 Active Members Report Share Posted February 11, 2014 Misto eu zic ca te incadrezi la 3000Daca este sa nu fie dublicate se incadreaza la 5000 pentru ca e in play Quote Link to comment Share on other sites More sharing options...
dekeeu Posted February 11, 2014 Report Share Posted February 11, 2014 Sunt putin cam sceptic in prinvinta xss-ului tau dat fiind faptul ca, inainte, pentru orice caracter introdus in parametrul "id" altul decat o litera sau o cifra inainte iti dadea "Not Found" . Si vectorul tau e atat de 1337 incat nu ma gandesc sa fi facut bypass la filtru. Poza necenzurata n-ai ? Eventual si cu sursa paginii ca sa vad unde anume s-a reflectat valoarea parametrului ? (ca sa nu mor prost..nu de altceva). Quote Link to comment Share on other sites More sharing options...
Shelo Posted February 11, 2014 Author Report Share Posted February 11, 2014 Am si necenzurata dar am pus si link-ul parametrului vulnerabil mai sus Quote Link to comment Share on other sites More sharing options...
poq Posted February 11, 2014 Report Share Posted February 11, 2014 Poti sa pui poza necenzurata? Quote Link to comment Share on other sites More sharing options...
Netscape Posted February 11, 2014 Report Share Posted February 11, 2014 Varianta de 13 ani a` lu RUTE e asta micu . Quote Link to comment Share on other sites More sharing options...
bajetzashu89 Posted February 11, 2014 Report Share Posted February 11, 2014 felicitari ! Quote Link to comment Share on other sites More sharing options...
tromfil Posted February 11, 2014 Report Share Posted February 11, 2014 Mailul este dovada c? s-a f?cut un report, nu c? a fost confirmat.Ok, deci la urm?torul update o s? apar? un român (sau nickname) în HoF. Vom verifica.Chiar sunt curios. Quote Link to comment Share on other sites More sharing options...
Oust Posted February 11, 2014 Report Share Posted February 11, 2014 Cu 3000$ mai pui 1500$ si-ti iei un golf 4 jm3k3r. Felicitari! ...bulangiule! Quote Link to comment Share on other sites More sharing options...
aelius Posted February 11, 2014 Report Share Posted February 11, 2014 chiar nu va prindeti ca omu doreste atentie ? Daca a gasit el acolo si cu l4m3 ala de vector cordit, eu sunt mitropolitul olteniei si patron peste biserici. Quote Link to comment Share on other sites More sharing options...
SilenTx0 Posted February 11, 2014 Report Share Posted February 11, 2014 chiar nu va prindeti ca omu doreste atentie ? Daca a gasit el acolo si cu l4m3 ala de vector cordit, eu sunt mitropolitul olteniei si patron peste biserici.Nu-i vorba de vector...poti sa gasesti si cu <script>alert(1)</script>. Faza e ca multi dintre noi am cautat pe acolo si nu era nimic. Nu prea vad cum s-ar produce acolo xss din moment ce nimic din ce introduci tu nu este afisat in sursa. Quote Link to comment Share on other sites More sharing options...
Htich Posted February 13, 2014 Report Share Posted February 13, 2014 Si ai primit ceva "maruntis" pentru ce ai facut sau te-au felicitat ?) Quote Link to comment Share on other sites More sharing options...
.darky Posted February 13, 2014 Report Share Posted February 13, 2014 Si ai primit ceva "maruntis" pentru ce ai facut sau te-au felicitat ?)OFF: L-au ingropat in bani! Quote Link to comment Share on other sites More sharing options...
Dr.Milf Posted February 13, 2014 Report Share Posted February 13, 2014 (edited) chiar nu va prindeti ca omu doreste atentie ? Daca a gasit el acolo si cu l4m3 ala de vector cordit, eu sunt mitropolitul olteniei si patron peste biserici.Ai uitat patron peste casele de toleranta(sau de amanet?) si preafericitul detinator panaramelor de lux din Braila. Parca asa te-ai prezentat. Edited February 13, 2014 by Dr.Milf Quote Link to comment Share on other sites More sharing options...
