@dirtycoder0124
dirty0124
@dirtycoder0124
21 days
Just got a reward for a high vulnerability submitted on @yeswehack -- (XSS) - Stored (CWE-79). https://t.co/qUkEEJ1s6V #YesWeRHackers Steps: 1. Found misconfigured Algolia key 2. Escalate it into Stored XSS 3. Payload executed when searching for a specific keyword #bugbountytips
5
5
72

Replies

@rajeshsagar777
Rajesh sagar
@rajeshsagar777
21 days
@dirtycoder0124 @yeswehack congrats Bhai
1
0
2
@dirtycoder0124
dirty0124
@dirtycoder0124
21 days
@rajeshsagar777 @yeswehack Thank you
0
0
1
@smokie_7
Bhavya
@smokie_7
21 days
@dirtycoder0124 @yeswehack how did u did ? i also find one algolia key!!
2
0
1
@dirtycoder0124
dirty0124
@dirtycoder0124
20 days
@smokie_7 @yeswehack check what permissions it has
1
0
0
@yeswehack
YesWeHack ⠵
@yeswehack
20 days
@dirtycoder0124 Congratulations! 👏
0
0
0
@v3d_bug
Ved Parkash
@v3d_bug
19 days
@dirtycoder0124 @yeswehack Congratulation bhai
0
0
0
@Dan2010371
Dan
@Dan2010371
21 days
@dirtycoder0124 @yeswehack How did u find misconfigured Algolia key?
0
0
0