Garage4hackers Forum - Bug Bounty Listing

Menu
G4H Tutorial and Papers

G4H Tools and Scripts

G4H Exploits

CTF & Meet Writeups

Google Hall of Fame

Teensy

Bug Bounty Listing

Web Application Security

Exploitation Techniques

RWS Webcast Recording

Blogs

Bug Bounty Listing
How I was able to Read & Download Paypals X.com Users Private Email Attachments
by
ajaysinghnegi

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 03-08-2014 09:25 AM Number of Views: 2676
Paypals X.com Failure to Restrict Url Access Vulnerability

I want to share one of my finding on Paypals
...

Read More
Account Takeover Using Password Reset Vulnerability

by
ajaysinghnegi

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 03-08-2014 09:24 AM Number of Views: 13407

Account Takeover Using Password Reset Functionality

While researching and working on bug bounties I have found ...

Read More
File Uploading Issue in BillMeLater.com- paypal worth $5000

by
prakhar

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 03-13-2013 03:57 PM Number of Views: 5379

I want to share my finding on a recent issue I found in a subdomain of BillMeLater.com (a Paypal service).

...

Read More 1 Comment
Paypal Zong Service Credit card & Billing Info Update CSRF

by
[s]

View Profile

View Forum Posts

Private Message

View Blog Entries

View Articles

Published on 03-12-2013 04:20 PM Number of Views: 3500

Vendor product Brief Information : Zong aim Frictionless Mobile Payments to the world. Zong processing millions of payments ...

Read More
Facebook Mobile Open Redirection Vulnerability

by
prakhar

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 02-22-2013 05:27 PM Number of Views: 3255

Sometime back, I found an open redirect vulnerability in Facebook mobile site (http://m.facebook.com)

According ...

Read More
Linkedin's Clickjacking & Open Url Redirection Vulnerabilities

by
ajaysinghnegi

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 09-16-2012 11:17 AM Number of Views: 4988

# Vulnerability Title: Secondary Email Addition & Deletion Via Click Jacking in Linkedin
# Website Link: [Tried ...

Read More
Twitter Wipe Address Book CSRF Vulnerability

by
karniv0re

View Profile

View Forum Posts

Private Message

View Blog Entries

View Articles

Published on 05-16-2012 11:29 PM Number of Views: 3144

I disclosed a CSRF vulnerability with Twitter, that could allow a malicious attacker to wipe the address book of an unsuspecting ...

Read More
EBay Persistent Cross Site Scripting (Filter Bypass)

by
fb1h2s

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 08-18-2011 10:29 AM Number of Views: 5182

POC Code to Steel Cookies:

Vulnerability Effects:
1) User cookies could be retrieved ...

Read More 1 Comment
Vbulletin 4.0.x => 4.1.3 (messagegroupid) SQL injection Vulnerability 0-day

by
fb1h2s

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 07-21-2011 01:37 PM Number of Views: 9197

# Exploit Title: Vbulletin 4.0.x => 4.1.3 (messagegroupid) SQL injection Vulnerability 0-day
# Google Dork: intitle: ...

Read More 1 Comment
Blogger Critical Vulnerability, Gaining Administrative Privileges on any Blogger.com

by
goldshlager

View Profile

View Forum Posts

Private Message

View Blog Entries

View Articles

Published on 06-14-2011 10:17 PM

Hi Security Community,

I found a critical bug in Blogger, That allow an attacker to gain administrative control ...

Read More
Brief whitepaper detailing a malware epidemic that has broken out on Orkut.

by
D4rk357

View Profile

View Forum Posts

Private Message

View Blog Entries

View Articles

Published on 07-14-2010 12:16 AM Number of Views: 5213

Malware Epidemic on Orkut

By 4rk357

Contact: D4rk357@yahoo.in

Greetz to : b0nd, ...

Read More 3 Comments

All times are GMT +5.5. The time now is 03:50 PM.

The forum is frozen forever - but it won't die; it'll stay for long in search engine results and we hope it would keep helping newbies in some way or other - cheers!

Menu

Bug Bounty Listing

How I was able to Read & Download Paypals X.com Users Private Email Attachments

Account Takeover Using Password Reset Vulnerability

File Uploading Issue in BillMeLater.com- paypal worth $5000

Paypal Zong Service Credit card & Billing Info Update CSRF

Facebook Mobile Open Redirection Vulnerability

Linkedin's Clickjacking & Open Url Redirection Vulnerabilities

Twitter Wipe Address Book CSRF Vulnerability

EBay Persistent Cross Site Scripting (Filter Bypass)

Vbulletin 4.0.x => 4.1.3 (messagegroupid) SQL injection Vulnerability 0-day

Blogger Critical Vulnerability, Gaining Administrative Privileges on any Blogger.com

Brief whitepaper detailing a malware epidemic that has broken out on Orkut.

G4H Facebook

G4H Twitter