$16k Stealing secrets.yaml from GitLab using stored XSS - Hackerone bug bounty

Поделиться
HTML-код
  • Опубликовано: 21 авг 2024

Комментарии • 27

  • @BugBountyReportsExplained
    @BugBountyReportsExplained  2 года назад +4

    Hi! Welcome to the comment section. I hope you enjoyed the video. If you did, make sure to like it and leave a subscription!

  • @seifelsallamy620
    @seifelsallamy620 2 года назад +2

    A bypass after a bypass after a bypass after a bypass then an explosion. And each one of them is crazy on its own. That's one from the most interesting videos I have seen I will go to follow this awesome reporter.

  • @ahmadshami5847
    @ahmadshami5847 2 года назад +4

    man what a bug 😂, even keeping up with all the techniques used is a hustle. keep up the great work 👌

  • @simonkoeck
    @simonkoeck 2 года назад +3

    great vid! keep up your good work

  • @000t9
    @000t9 2 года назад +1

    Love your videos! Keep going!

  • @plasticgut
    @plasticgut 2 года назад +1

    This bug is beautiful... beautifully creative.

  • @digitzero3613
    @digitzero3613 2 года назад

    Thank you so much mate, I have been watching your videos just after I found your channel randomly (thanks to youtube). And this man must be a genius!

  • @auag666
    @auag666 2 года назад +1

    Instant sub! Please make more:D

  • @b-48_ajaypandit64
    @b-48_ajaypandit64 2 года назад

    Love you Sir

  • @_bergee_
    @_bergee_ Год назад

    🤯

  • @98paiseh31
    @98paiseh31 2 года назад

    👏

  • @hdphoenix29
    @hdphoenix29 2 года назад

    Wish my report be qualified to be in this channel someday

  • @airsky21
    @airsky21 2 года назад

    Hello, I tried to reproduce it. Although the data-original attribute can be constructed successfully, it seems that the script tag cannot be rendered. I want to know which version is the problem? The version I use is v13.12.1-ee

    • @BugBountyReportsExplained
      @BugBountyReportsExplained  2 года назад

      In the report we can see that the hunter used 13.12.1-ee so it's vulnerable. It was fixed in 14.2.2, 14.1.4 and 14.0.9

  • @puyatecla9903
    @puyatecla9903 2 года назад

    I want to report a bug in your video 😔 the video is cut in half, I can't see the whole thing just halves of the pictures and links I guess it must be a client-side thing

  • @jayden-kadzempire757
    @jayden-kadzempire757 2 года назад

    Hey could you make a video about Vimeo ssrf upload function