BugBounty

[BugBounty] Decoding a $😱,000.00 htpasswd bounty

tldr; A Private Bug Bounty Program had a globally readable .htpasswd file. I cracked the DES hash, got access to development and staging environments and was rewarded a shitload of$. [Tools used] dirbuster https://www.owasp.org/index.php/Category:OWASP_DirBuster_Project John http://www.openwall.com/john/ [\Tools used] Today I want to share something with you that I recently discovered in a private Bug Bounty Program. Due […]

[BugBounty] Decoding a $😱,000.00 htpasswd bounty Read More »

[BugBounty] Sleeping stored Google XSS Awakens a $5000 Bounty

Uncategorized / By Patrik Fehrenbach

Dear Readers, Today I want to share a short write-up about a stored cross-site scripting (XSS) issue I found on the Google Cloud Console. I consider it a lucky find. Some of you may remember the tweet I sent to Frans Rosén after he discovered a vulnerability on Google Payments: As it turned out, among

[BugBounty] Sleeping stored Google XSS Awakens a $5000 Bounty Read More »

[BugBounty] Reflected Cross Site Scripting BillMeLater

Bug Bounty / By Patrik Fehrenbach

Dear followers, i recently found a reflected Cross Site Scripting issue on a Subdomain of BillMeLater (Paypal acquisition) it was possible to break the style attribute and add malicious Javascript Code into the Application. “–></style></ script >< script > alert (“XSS “)</ script > When ending the previous style and script element it was possible

[BugBounty] Reflected Cross Site Scripting BillMeLater Read More »

[BugBounty] Paypal stored XSS + Security bypass

Bug Bounty / By Patrik Fehrenbach

Dear followers, i recently discovered a stored cross site scripting vulnerability on Paypal’s core site. The scenario is a bit weird, but i hope to explain everything as good as possible. During my testings i often create accounts with malicious Javascript contet as the Name, Organization etc etc. While testing on Paypal i did the

[BugBounty] Paypal stored XSS + Security bypass Read More »

[BugBounty] The 5000$ Google XSS

Bug Bounty / By Patrik Fehrenbach

Dear followers, i recently searched for vulnerabilities on a Google service called tagmanager, this service is used for SEO operations. My main research was to look for any field that could be vulnerable to Cross Site Scripting, but every field was protected against special characters as you can see in the image below. So pretty

[BugBounty] The 5000$ Google XSS Read More »

[BugBounty] Decoding a $😱,000.00 htpasswd bounty

[BugBounty] Sleeping stored Google XSS Awakens a $5000 Bounty

[BugBounty] Reflected Cross Site Scripting BillMeLater

[BugBounty] Paypal stored XSS + Security bypass

[BugBounty] The 5000$ Google XSS

Start typing and press enter to search