+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: [♦][SHOW] XSS Finds (/Thread-%E2%99%A6-SHOW-XSS-Finds)
[♦][SHOW] XSS Finds - Jewel - 10-04-2012
Here is a small collection of my recent Cross Site Scripting finds. They are all
in relatively large websites or corporations and were found in the space of a
few days. The fact that they were all found so fast made me worried yet proud.
I posted these on Pastebin & HF and only there. Anyone else taking credit for
any of these is a complete failure. @M4Y (Twitter) or /u/lul (Pastebin)
1. BBC
Site: http://www.bbc.co.uk
Image: http://i.imgur.com/yeFfq.png
Ranking: 48 Globally.
2. European Parliament
Site: http://www.europarl.europa.eu/
Image: http://i.imgur.com/svcUK.png
Ranking: 911 Globally.
3. Adidas
Site: http://www.adidas.com
Image: http://i.imgur.com/xYHMF.png
Ranking: 4302 Globally.
4. Life's Good
Site: http://www.lg.com
Image: http://i.imgur.com/b5dHg.png
Ranking: 1905 Globally.
5. Manchester United FC
Site: http://www.manutd.com
Image: http://i.imgur.com/8u9IJ.png
Ranking: 2547 Globally.
6. Dollar Files
Site: http://www.dollarfiles.com
Image: http://i.imgur.com/xwLJr.png
Ranking: 2806707 Globally.
7. Mclaren
Site: http://www.mclaren.com/
Image: http://i.imgur.com/VXiVR.png
Ranking: 91003 Globally.
8. Hyundai
Site: http://www.hyundai.co.uk/
Image: http://i.imgur.com/oM2fl.png
Ranking: 359378 Globally.
9. LOC Gov
Site: http://www.loc.gov
Image: http://i.imgur.com/IuvJr.png
Ranking: 4116 Globally.
10. 192
Site: http://www.192.com/
Image: http://i.imgur.com/S0maP.png
Ranking: 3405 Globally.
11. Brazzers
Site: http://www.brazzers.com
Image: http://i.imgur.com/EUyu8.png
Ranking: 1074 Globally.
12. Adfocus
Site: http://www.adfoc.us
Image: http://i.imgur.com/Ro0j4.png
Ranking: 1347 Globally.
13. Adfly
Site: http://www.adf.ly
Image: http://i.imgur.com/ykSwY.png
Ranking: 88 Globally.
14. Enjin (All Boards)
Site: http://www.enjin.com
Image: http://i.imgur.com/3qUPe.png
Ranking: 7215 Globally.
15. Michigan University
Site: http://www.msu.edu
Image: http://i.imgur.com/FbpfK.png
Ranking: 6116 Globally.
16. Duke University
Site: http://www.duke.edu
Image: http://i.imgur.com/325p1.png
Ranking: 8517 Globally.
RE: [♦][SHOW] XSS Finds - kaiteisbait - 10-05-2012
Nice! And I think all the XSS founded should be posted here? Well I found one,but have not done xss in a while:
Site: Edmodo.com
Picture: http://s017.radikal.ru/i404/1209/12/b4f0dee9c93f.png <- Totally True
RE: [♦][SHOW] XSS Finds - Ultimatum - 10-05-2012
A lot of these were found already before your post. I found a few before too. But good job nevertheless. It doesn't matter if you're the first or not. Finding them yourself is the key
Good work!
RE: [♦][SHOW] XSS Finds - Jewel - 10-05-2012
(10-05-2012, 06:57 AM)Ultimatum Wrote: A lot of these were found already before your post. I found a few before too. But good job nevertheless. It doesn't matter if you're the first or not. Finding them yourself is the key
Good work!
This post was actually a combination of two threads I made on HF. I found
them a few weeks ago and sadly a few people have been taking credit of
new ones alike the Brazzers login XSS. Some were already found such as
the Manchester XSS but I'm not too concerned. They were quite large finds.