Which XSS payloads get the biggest bounties? - Case study of 174 reports

[@quad7375]

just found you. veeerrry interesting channel. as someone who learns by watching a massive amount of poc videos on one topic, i like how you take the analysis deeper. finally a channel that doesnt have the redundant "how to hack" videos.

[@dhyeychoksi5178]

Fantastic video. Highly informative!

[@_CryptoCat]

Great video! Do you compile the spreadsheet data manually during your research (13:30) or do you automate with some scripting/scraping?

[@BugBountyReportsExplained]

Thanks! I start off with reports from PentesterLand, then I add a Google webscrape from Hackerone and then I add a few more reports from my memory/Pocket/etc.

[@jatinnandwani6678]

Thanks!

[@yaseen7749]

This video is Diamond. Awesome mate very well explained. Gonna signup with BBRE soon.

[@diegor.mackenzie1593]

Love your vids. The other day I was messing around with a page and found an html injection, I was wondering if there was a way to escalate it to an XSS if the "=" sign is sanitized and leads me to a 403 Forbidden. Thanks!

[@MrSettler]

Awesome analysis!!

[@rysiacz]

is one of the shortest xss payloads, maybe that's why they are use more often

[@BugBountyReportsExplained]

good point!

[@anonymousx_x3842]

Is there any way to bypass = blacklisted? Svg runs fine even creates its structure in code base but script tag and = are blocked on a url I'm testing with.

[@BugBountyReportsExplained]

@@anonymousx_x3842 are you sure you are URL-encoding the = in the URL? If yes, then I'm not aware of a bypass.

[@trustedsecurity6039]

From my experience on the client i pentest img tag is better, 95% of the time svg doesnt work when img does

[@trustedsecurity6039]

Maybe try a javascript:alert(1)

[@brutexploiter]

Can you share the template...No need database

[@emilisha-in4xl]

This is Gold man 💥

[@ruttalaabhinav8105]

Correct me if i am wrong. Can we get XSS on 404 pages.

[@stevesharma6521]

What platform will u suggest for leaning bug bounty?

[@BugBountyReportsExplained]

I suggest to pick a program first and then the platform

[@محمّد.09]

LOVE YOUR VIDEOS I know HTML. Currently learning JavaScript. Then I'll put my hand on portswigger labs starting from xss then idor then business logic bugs. *My Questions are:* should I watch your channel from oldest or newest or most popular? should I continue with the approach I wrote above?

[@BugBountyReportsExplained]

I think XSS is actually quite a complex bug class to start with. I'd rather go with access control, IDORs, business logic etc. And yes, Portswigger lab is the resource to go. I think watch my channel from newest

[@OthmanAlikhan]

Thanks for the video =)

[@Al-rt3ec]

is there step how to do for bug bounty each report ?

[@BugBountyReportsExplained]

hm?

[@Al-rt3ec]

@@BugBountyReportsExplained Excuse me what do you mean? i mean when i subscribed is there what does i mean?

[@firzainsanudzaky3763]

​@@Al-rt3ec Bro he questioning your question, it doesn't make sense

[@_bergee_]

Ten film zawiera lokowanie produktu :)

[@BugBountyReportsExplained]

Ja nie zauważyłem🙄

[@akshaypandey4761]

Hello brother I am also doing bug bounty but not getting success

[@rix4uni]

Can you share the notion list

[@edoardottt]

i guess it's available for premium bbre users

[@BugBountyReportsExplained]

Exactly, the database is available in BBRE Premium

[@kalki-fo3ie]

Can You Share About the BB Automation !

[@BugBountyReportsExplained]

Yes but I'd have to invite someone for that because I don't do any automation

[@kalki-fo3ie]

@@BugBountyReportsExplained thanks, Waiting :)

[@ali-barznji]

I love you bro ❤

[@x.plorer]

Not 'E'mg tag but 'I'mg tag 😶‍🌫

[@BugBountyReportsExplained]

true, I was reading it more in polish than in english

[@yaseen7749]

😂 exactly i was too scratching my head for the payload which starts from Emg. later i followed his track

[@eyephpmyadmin6988]

Would be interested in using this info as a ML training set

[@Ajax-1432]

Every website would be vulnerable since you are injecting the script into the console yourself. This is not valid

[@akshaypandey4761]

Can you help me

[@vivekkhandagre9274]

i love you bro 🥰😍🤑

[@Abhi-yc6xs]

can you give this cheet sheet in pin comment

[@BugBountyReportsExplained]

I linked it in the description ;)

[@bag8208]

Bro you best!

[@trustedsecurity6039]

Better to use than the quoted one

[@BugBountyReportsExplained]

Good point actually