🚨ANNOUNCEMENT🚨
#TeamHunt2021 1st place winner: Retired Hackers🎉👇
@bsysop@mcipekci@restr1ct3d@sw33tLie@dogwhohacks and P3t3r_R4bb1t
Runner-up teams👏🔥
Monstars, Tamil Pasanga, JJJ, Tess's Squad
Congrats & great work to every team! We're so proud of each player!🧡
We are glad to share that we earned $70K+ from submissions and still have more rewards to come. We'd like to thank the @Bugcrowd team for hosting this fantastic #TeamHunt2021 event. Special thanks to @codingo_@vortexau@aflores2424, Bugcrowd ASE's and Support team.🥉💖🥷
Stored XSS in MyBB < 1.8.24 I found by abusing custom BBCode:
[font=Ariel"id="xyz"tabindex="0"onfocus=alert(1)//]XSS[/font]
It is executed within the textbox preview so any user looking at replying or editing it will trigger it.
Hey👋! I wrote a paper on Abusing Data Protection Laws For D0xing & Account Takeovers. This research lead to over 5 figures in bounties & affected companies including Shopify, Gitlab, Tesla.
Click here to check it out and let me know what you think!
😄
https://t.co/HMYwLcyolC