Facebook and twitter use Gmail! Wait, what?

I cannot guarantee 100% accuracy of what I claim, yet I found this occupying my thoughts and reckon it to be an interesting issue.

A simple tweak in GET request will let you know what services use google as their mailing service, and it's no black magic.

I was first astonished to see if what I saw was for real.

I found this URL while messing with the admin panel of mail manager provided by gmail.

https://www.google.com/a/cpanel/ensolnepal.com/images/logo.gif

This is what I got, as of now:

                                                    

so far, so good.    

This is where the logo of third party sites are hosted. If I just change the domain name,
https://www.google.com/a/cpanel/ioe.edu.np/images/logo.gif

Wow, I haven't even logged into my college's webmail and I can see the logo that was uploaded for the logged in users to see.


I requested webadmin of my college to set up an email for me after this and the logo that appeared before seemed to be the real thing.


This is the thing I am talking about:

                                         



Now, lets just play around
https://www.google.com/a/cpanel/facebook.com/images/logo.gif

This is what is seen as of now:

Well, well, what the heck!
Facebook uses google's mail service ?


I couldn't find a rational explanation for "No, they don't".



and twitter?
https://www.google.com/a/cpanel/twitter.com/images/logo.gif

You could just replace the URL to see if the site uses gmail as their mail service provider:

https://www.google.com/a/cpanel/YOUR_URL_HERE/images/logo.gif

Now, lets see whether some other sites use gmail:
https://www.google.com/a/cpanel/alexa.com/images/logo.gif

Nope, since gmail's default logo appears, they dont seem to use gmail.(That's my explanation)

I don't yet know if this is totally random but I checked for several domains I possess (and few of my friends) and it appears to be true in those particular cases.



If you have gmail as your mail service provider and you are seeing something different, (or even if you think this is b***s***,) feel free to mention in comments.

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Sniper 3D Assassin Hack Unlimited Coins Download [Android /iOS]

Gamezhacktool.com has launched a new game called Sniper 3D Assassin hack. If you're all having trouble finding  hack at some site or look it up on google.com and found no Sniper 3D Assassin, do not worry you can find what you are looking for here.
100% working and clean from viruses. We will provide Sniper 3D Assassin Hack No Surveys No Password to download for free. Get the Cheats Hack Tool and you�ll surely enjoy the game to the maximum. How to Hack Sniper 3D Assassin for iOS and Android? Do not worry You Can find here. With our  Trainer you can get unlimited Diamonds , coins Generator. Our soft works on all Android and iOS devices. It does not require any jailbreak or root. Our Sniper 3D Assassin cheat is very easy to use. Hacked tool is clean of viruses and very easy to use.

In this game Sniper Assassin 3D you play as a professional sniper. Here you can perch on the roof, in the streets and in every mission you will be given a target, background and photograph enemy targets. Well here you have to find a clever enemy in a crowd. And must shoot the target with one shot. In this game Sniper Assassin 3D you can also mix the mission of missions that will make the game more interesting. The target is very difficult to target in the crowd and difficult to shoot, in a moving car, forced to shoot on time even some target or a hostage situation.

• Unlimited Diamonds
• Unlimited Coins
• Anti Ban Protection

Sniper 3D Assassin Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

Download Sniper 3D Assassin Hack No Survey on here

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

World of Tanks Blitz Hack Unlimited Gold Download

If you're all having trouble finding  hack at some site or look it up on google.com and found no World of Tanks Blitz, do not worry you can find what you are looking for here.
100% working and clean from viruses. We will provide World of Tanks Blitz Hack No Surveys No Password to download for free. Get the Cheats Hack Tool and you�ll surely enjoy the game to the maximum. How to Hack World of Tanks Blitz for iOS and Android? Do not worry You Can find here. With our  Trainer you can get unlimited Diamonds , coins Generator. Our soft works on all Android and iOS devices. It does not require any jailbreak or root. Our World of Tanks Blitz cheat is very easy to use. Hacked tool is clean of viruses and very easy to use.

One of the war games is World of Tanks Blitz is a very exciting game, the gameplay you are required to increase your rank lowest rank to the top, but do not expect it to be easy to ride because it would be difficult to face the enemy of your enemy, but on the way you will get a super-sophisticated tanks. For that you have to find the money and the experience gained from the game randomly. Here there are more than 90 types of tanks that can you play in World of Tanks Blitz. Starting from US M4 Sherman, BT-7 Soviet Union, MKIII of German Panzer tanks and other vehicles.

Features

Unlimited Diamonds

Unlimited Coins

Anti Ban Protection

World of Tanks Blitz Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

Download World of Tanks Blitz Hack No Survey on here

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Monster Legends Hack Online Tool [Updated]

We will provide Monster Legends Hacks  Unlock All Levels No Surveys No Password to download for free. Get the Monster Legends Hack Cheats Hack Tool and you�ll surely enjoy the game to the maximum.  How to Hack Monster Legends   for iOS and Android? Do not worry You Can find here.
With our Trainer you can get gold, gems and Food unlimited . Our soft works on all Android and iOS devices. It does not require any jailbreak or root. Our Monster Legends Hack tool is very easy to use.  Hacked tool is clean of viruses and very easy to use. Alot sites for Monster Legends cheat tools given on the internet but you have to pay. The cheats and hacks provide a very valuable generator of resources that will be otherwise difficult to get and really time-consuming.

Monster Legends is a game for Faceook, iOS and Android. In this game you have an inhabited islands of the monster. The Monster can you get with real money or by raising. Monster Legends in so many combinations you can do for example a marriage between a panda with a fire dragon monster panda who produced the fire. Not only that you can also use a monster fight. Looks like this fight just like pokemon where each monster has a 4 step that can be used. I must admit the system is quite nice to play and fun.

Monster Legends Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

Download Monster Legends Hack No Survey on here

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Hill Climb Racing Hack [Updated Android /iOS]

We will provide Hill Climb Racing Hack Unlimited Coins , unlocked maps, unlock all vehicles No Surveys No Password to download for free. Get the Hill Climb Racing Hack Tool and you�ll surely enjoy the game to the maximum. How to Hackfor iOS and Android? Do not worry You Can find here.

With our Hill Climb Racing Trainer you can get unlimited Coins, unlocked maps, unlock all vehicles Generator. Our soft works on all Android and iOS devices. It does not require any jailbreak or root. Our Hill Climb Racing online Hack is very easy to use. Hacked tool is clean of viruses and very easy to use. Alot sites for cheat tools given on the internet but you have to pay.

A very popular game that Hill Climb Racing is a mechanical physics game that invites players to maintain the balance of the vehicle at a time through the rise which is the core of the challenge in this game. This game is one of the most addictive and entertaining game that has been based on physical laws ever created for android. This game has been set for the player climbs past the obstacles in the form of various terrain and conditions according to the level that you are walking. This is a challenge for players to play. Players are required to keep passing each field so as not to run out of fuel.

Hill Climb Racing Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

Download Hill Climb Racing Hack No Survey on here

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Castle Clash Hack Unlimited Gold Mana & Gems [UPDATED]

Welcome, If you are looking for Castle Clash hack tool but you are very difficult to find on the internet do not worry friends, you can get a Castle Clash hack the Unlimited Gold, Mana and Gems. This tool will create a generator that will produce unlimited items. Hack This tool is clean of viruses and you can use it safely. This tool will always be our updates. For that you do not hesitate to contact us if they find trouble.

Hi lovers Castle Clash here you can become a hero and built a large village and fighting to destroy the enemy village. This game has been downloaded over 70 million worldwide. This game is very addictive and you can linger a long time to play this game. For that do not hesitate to download it here.

Castle Clash Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

Download Castle Clash Hack No Survey on here

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Jetpack Joyride Hack Unlimited Coins Tool Download

Welcome, If you are looking for  Jetpack Joyride tool but you are very difficult to find on the internet do not worry friends, you can get a  Jetpack Joyride hack Unlimited Coins. This tool will create a generator that will produce unlimited items. Hack This tool is clean of viruses and you can use it safely. This  Jetpack Joyride hacks tool is very easy to use you can contact to android or IOS you and you will get unlimited coins. This tool will always be our updates. For that you do not hesitate to contact us if they find trouble.

Jetpack Joyride is a kind of runner end game, this game is great fun, and as a highly successful developer Halfbrick Studios to make this game. More than 500 million have downloaded this game with android and iOS as a system. With the character of Barry who brought a backpack behind his back to avoid obstacles that you encounter.

Jetpack Joyride Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

Download Jetpack Joyride Hack No Survey on here

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Stored XSS on facebook and twitter!

I and my colleague Prakash were testing random stuffs to find a target that would be worth looking into. We found a new feature on Facebook which allows a user to visit the website of page-owner.

The "Shop-now" feature looked interesting with different restrictions for different input fields.
The app-link field caught my eyes, because "deep-link" URL had particularly idiosyncratic example :

The field was sanitized for special characters like < , ", ' , > and didn't allow any tags to enter. The output for such characters would be:

I thought of trying ()  . Surprisingly, they weren't being sanitized, and of course : wouldn't be filtered for sure because it would always be used in a URL. I still wasn't sure if any javascript would be executed. I saved the details to test it out with the applink as javascript:alert(document.domain).



But then I realized I was only couple of clicks to see if the test was successful. In m.facebook.com, under the "shop now feature" was the script being stored. and then,

(Detailed exploit scenerio is shown in video)

Script was straightforward inserted into "a href" tag and anyone clicking on the button link would be exploited.

Now, along with client side filtering, it doesn't execute the script even if you managed to circumvent the client side protection in some way.

A very similar endpoint existed in twitter, too. You could define the action of a button click by yourself

but more on that later.

Both vulnerabilities have been patched by respective security teams.


                            

Thanks for the read!

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

GTA 5 Money Hack Tool [100% Working]

We will provide GTA 5 Money Hacks  Unlimited Gold No Surveys No Password to download for free. Get the Hack Cheats Hack Tool and you�ll surely enjoy the game to the maximum.  How to Hack GTA 5   for PC, Xbox, PS3, PS4? Do not worry You Can find here.
With our Trainer you can get Unlimited money, ammo and Unlocked all weapon . Our soft works on all Android and iOS devices. It does not require any jailbreak or root. Our GTA 5 money Hack tool is very easy to use.  Hacked tool is clean of viruses and very easy to use. Alot sites for cheat tools given on the internet but you have to pay. The cheats and hacks provide a very valuable generator of resources that will be otherwise difficult to get and really time-consuming.

Definitely we are sure you have noticed quite a long time about the game GTA 5 with a positive impression Sagat. We also do not hesitate to crown as the best open world game we've played, even able to offer a quality that has never existed even though the class game Watch Dogs though. With the story content and vrian mission bergitu much different from previous versions. GTA 5 we do not need to doubt is the best open world game today, he even said to redefine the genre as a whole and has been offering a new standard with the concept of the "Free World" with a quality that is not easy to beat. The presence of three main characters in this game not only offers a new gameplay innovations, but also a new storyline and also offers a new gameplay innovations. You will also be involved in the planning process and the selection of the crew in the GTA 5. This game has been throwing a large-scale crime formula film hollywood style in the palm of your hand. More great has been combined with the quality of detail, music and a myriad of activities that you can do and this game has facilitated the hopes and desires you to enjoy an open-world gaming.

GTA 5 Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

Check this for FAST GTA 5 money Hack Online for Best Performance, can use for PC, PS3, PS4, Xbox360, Xbox One

FOR FRANCE USER  (POUR LA FRANCE UTILISATEUR)

Si vous �tes en France, vous pourriez faire un Hack (triche) outil g�n�rateur en ligne GTA 5 ici pour obtenir de l'argent illimit�, et d�bloqu� toutes les armes ici 

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

MovieStarPlanet Hack Tool [Updated]

Gamezhacktool.com has launched a new game called Moviestarplanet hack. If you're all having trouble finding Moviestarplanet hack at some site or look it up on google.com and found no Moviestarplanet, do not worry you can find what you are looking for here. 100% working and clean from viruses. We will provide  Hack No Surveys No Password to download for free. Get the Cheats Hack Tool and you�ll surely enjoy the game to the maximum. How to Hack  for iOS and Android? Do not worry You Can find here. With our Trainer you can get unlimited Starcoins, diamond. Our soft works on all Android and iOS devices. It does not require any jailbreak or root. Our Moviestarplanet Hack is very easy to use. Hacked tool is clean of viruses and very easy to use.

MovieStarPlanet is a free social intuitive fantasy site made for kids matured somewhere around 8 and 15 years of age. Kids get the chance to look over a mixed bag of movie star characters, dress them up, pick their haircuts, make movies, play amusements and visit.

The purpose of the amusement is to gain acclaim and fortune by social communicating, making movies and watching other individuals' movies. In doing as such you can procure Fame Points and Star Coins which can be utilized to purchase more ensembles, settings for your movies, movements, home stylistic layout, and so forth. Players can likewise trade endowments, gather signatures and exchange things.

The more rivalries you enter, amusements you play, companions you have and communications you make, the more compensates you are given and as you advance you can go higher up the levels which permits you to have more character movements and different increments. 

Check this for FAST MovieStarPlanet Hack Online for Best Performance, can use for iOS and Android

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Clash of Kings Hack Online Tool

If you're all having trouble finding  hack at some site or look it up on google.com and found no Clash of Kings, do not worry you can find what you are looking for here.
100% working and clean from viruses. We will provide Clash of Kings Hack No Surveys No Password to download for free. Get the Cheats Hack Tool and you�ll surely enjoy the game to the maximum. How to Hack Clash of Kings for iOS and Android? Do not worry You Can find here. With our  Trainer you can get unlimited Diamonds , coins Generator. Our soft works on all Android and iOS devices. It does not require any jailbreak or root. Our Clash of Kings cheat is very easy to use. Hacked tool is clean of viruses and very easy to use.

Clash of Kings will start from you, king of the city that will take power from the occupiers, we do not know clearly their origin or how you will lose your loved city. but the only thing to do now is to rebuild your cities destroyed and there you will train a new army to ensure that nothing is lost. To do that all the players are obliged to build resources such as sawmills and farms. These resources are used to make infantry crank like militias and some great force as well as a myriad of upgrades such as agriculture, the ability to support larger armies.  

Features

Unlimited Gold

Unlimited Silver

Unlimited Wood

Anti Ban Protection

Clash of Kings Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

Download Clash of Kings No Survey on here

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Need for Speed No Limits Hack Unlimited Gold Cash Tool [Updated]

Welcome, If you are looking for  Need for Speed No Limits tool but you are very difficult to find on the internet do not worry friends, you can get a  Need for Speed No Limits hack Unlimited gold, cash, Gas and Unloked Cars. This tool will create a generator that will produce unlimited items. Hack This tool is clean of viruses and you can use it safely. This  Need for Speed No Limits hacks tool is very easy to use you can contact to android or IOS you and you will get unlimited coins. This tool will always be our updates. For that you do not hesitate to contact us if they find trouble.

Hi lovers NFS, do you miss with its new series Need for Speed No Limits, well, this game is definitely very you wait and it is true this game has a powerful graphics and effects. And in terms of gamepaly very easy to play. For that collect your favorite games and be the winner. Need for Speed No Limits you can play on Android and iOS, and you can also pit your car with your rival car on the world. Are you ready to be a champion, then try this game for sure you'll be hooked.

Need for Speed No Limits Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

Download Need for Speed No Limits Hack No Survey on here

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Angry Birds Transformers Hack Unlimited Gems, Coins Hack tool [UPDATED]

Welcome, If you are looking for  Angry Birds Transformers hack tool but you are very difficult to find on the internet do not worry friends, you can get a  Angry Birds Transformers hack Unlimited Coins and Gems. This tool will create a generator that will produce unlimited items. Hack This tool is clean of viruses and you can use it safely. This  Angry Birds Transformers hacks tool is very easy to use you can contact to Android or IOS you and you will get unlimited coins. For that you do not hesitate to contact us if they find trouble. This tool will always be our updates.

Angry Bird Transformers is a game with its latest series with themed robots like Optimus Prime and his friends. Angry bird is the game of all time that has been successful throughout the market share of Android and iOS and and including most games most downloaded enumerated by users worldwide. For that do not hesitate to try this game on your smartphone.

Angry Birds Transformers Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

Download Angry Birds Transformers Hack No Survey on here

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Darkness Reborn Hack Unlimited Gold, SOL, Mana [UPDATED]

We will provide Darkness Reborn Hacks Unlimited Gold No Surveys No Password to download for free. Get the Hack Cheats Hack Tool and you�ll surely enjoy the game to the maximum. How to Hack Darkness Reborn for iOS and Android? Do not worry You Can find here. With our Trainer you can get Unlimited gold, SOL, Mana . Our soft works on all Android and iOS devices. It does not require any jailbreak or root. Our Darkness Reborn Hack tool is very easy to use. Hacked tool is clean of viruses and very easy to use. Alot sites for cheat tools given on the internet but you have to pay. The cheats and hacks provide a very valuable generator of resources that will be otherwise difficult to get and really time-consuming.

 Darkness Reborn is paid games and includes games much sought after by lovers of RPG. This game is available for Android and iOS. Darkness Reborn is a game where you will play for the fight and as a knight to rescue from the curse of the evil dragon.

Darkness Reborn Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Security and privacy issues in facebook photos due to graph search

Even though facebook graph search is an interesting feature recently added in facebook, for some people , the first impression has been 'creepy'


In graph search you can search terms like
'Movies that movie actors like'
'People going to watch today's soccer match'
'People who like wine '

and this would refer to someone totally unrelated to you except that in your search query .

Graph search promises to show only the contents that are publicly accessible to you. That implies same search will produce different results for different people.


Due to this feature , people totally unconcerned with you can find you in results . This can make it necessary to make everything private on your timeline ,  a fear of 'being shown on other people's ' search results.

So, if you are wanting your Facebook to be a private place for you , where no one you don't know bothers you , you'd better make every of your post and interests private in privacy settings of your account.

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Bruteforce facebook using python and dictionary

(This is not a facebook hack tool , in fact, a facebook hack tool doesnot even exist , please read carefully that it is just  a script in python to bruteforce facebook for educational purposes only)


Here is a way to bruteforce facebook password of any account . The tool is coded in python . You need to have Python 2.7.3 and mechanize (a python library) installed on your PC.


1)- To download Python in windows goto http://python.org/download/  (download 2.7.x version)
Linux machine come with python as preinstalled developer's tools.

2)- To install mechanize goto http://wwwsearch.sourceforge.net/mechanize/download.html

just download zip if you are in windows and tar.gz, if you are running Linux machine.

3)-Now for windows, copy all files from C:/Python27 to C:/Windows/System32

Go to step 5 for linux

4)-Now goto directory of download mechanize in cmd . (the location where you extracted mechanize)


5)- Now run  python setup.py install cmd

like

Now YOU are ready to execute the program

Download the .py file from following link after skipping add

now just open the bruteforcer with idle . To open IDLE , just click 'windows' button and searh for 'idle'

Press Ctrl + N to open new window . To run the Program , Simply press F5.

You should obtain following output :

Happy cracking !!!

Warning : This Information is for educational purposes only!!! xD

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Iron Knights Hack Unlimited Gold, Gems Tool Online [UPDATED]

We will provide Iron Knights Hacks Unlimited Gold, Gems No Surveys No Password to download for free. Alot sites for cheat tools given on the internet but you have to pay. Get the Hack Cheats Hack Tool and you�ll surely enjoy the game to the maximum. How to Hack Iron Knights for iOS and Android? Do not worry You Can find here. With our Trainer you can get Unlimited gold & Gems . Our soft works on all Android and iOS devices. It does not require any jailbreak or root. Our Iron Knights Hack tool is very easy to use. The cheats and hacks provide a very valuable generator of resources that will be otherwise difficult to get and really time-consuming.

Do you want to become a hero in this game Iron Knights? If you really want, you can play this game on your Android or iOS. This game has a level of graphics and amazing effects. So you miss with this game and want to play with unlimitd items, please feel free to download it here

Iron Knights Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Injustice: Gods Among Us Hack Unlimited Power Credits

If you're all having trouble finding  hack at some site or look it up on google.com and found no Injustice: Gods Among Us, do not worry you can find what you are looking for here.
100% working and clean from viruses. We will provide Injustice: Gods Among Us Hack No Surveys No Password to download for free. Get the Cheats Hack Tool and you�ll surely enjoy the game to the maximum. How to Hack Injustice: Gods Among Us for iOS and Android? Do not worry You Can find here. With our  Trainer you can get unlimited power credits, energy Generator. Our soft works on all Android and iOS devices. It does not require any jailbreak or root. Our Injustice: Gods Among Us cheat is very easy to use. Hacked tool is clean of viruses and very easy to use.

Our first time you play the game Injustice: Gods Among Us you will be given three cards hero who will be the first capital for the first time you play. Furthermore, in the first battle, you will undergo training to know how to how to battle. In the battle of training you will learn the controls for attacking, defending. To attack an enemy, you can use the tap and swipe controls. And to survive you just tap on the screen with two fingers.

Features

Unlimited Power Credits

Unlimited Energy

Unlocked All Character

Anti Ban Protection

World of Injustice: Gods Among Us Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

Download Injustice: Gods Among Us Hack No Survey on here

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

How I feel about Internet Bug bounty !

Lately, I have been spending some time in some major bug bounties to have a new experience in a entirely new field, that I was completely unaware of few weeks ago!

Since then, I have gone through many kind of responses! In fact one of the most interesting part of bug bounty stuff is to see how the security engineers view your stuffs!

Here are some interesting responses, I received as a reply

This one made me feel LOL!

and of course I made some valid submissions too!(might be luckily)

Frankly, I've learned a lot testing well-reknowned and well reputed companies and eventually finding an attack vector is really fascinating. Its always fun to have a live target that could in some way, be exploited!

Black box testing is not always that easy! In general, One has to see how a system responds to a vector and change his strategy accordingly! However due to availibility of free and custom scanner tools, the process, system has always been tried to be replaced by custom scanner tools ,  a short-kurt! But this is very hard job because a tool merely understands the context and goes on trying to get a valid response after executing a  random payload. So, basically, tools are not the solution!

A big conflict is , Is bug bounty a field of security researching ? can bug bounty keep up that feel , that thurst , that enthusiasm of gaining knowledge who has a mindset of a so-called 'hacker'? (See here for what I refer to as a hacker "Who is a hacker?")

The first thing I'd say is when bug bounty is done solely for making money purposes, it gets worse! The person loses enthusiasm to learn new stuffs and gets back to searching for skid method to get on a whitehat page.

Having said this, the money the company would reward you on its sole decision, is also a representation of severity level of bug! Of course, an FPD wont be rewarded the same amount as OAUTH bypasses!

Almost every site over internet now has a bug bounty program and a white hat acknowledgement page! This is just because , they cant take the risk of getting hacked! They are actually using the sentiment for their benifit! Many of sites being built in custom framework , framework based vulnerabilites do exist in a site that uses it!

The point here is , involvement in bug bounty if isn't a big acheivement, finding new attack methodology is one. Finding a bug maynot be that important , developing a mindset on how to think like an attacker , is one important lessons that bug bounty teaches you!

Is bug bounty really worth it from the company's perspective ?

Well , In short , Yes! I would like to present recent examples. Mt. gox hadn't a department to respond security bugs. Bugs can really be expensive . Mt gox laid off(at least , it is what their website states) However similar kind of vendor coinbase is alive and strong, as it has one! Yahoo was breached several times before but after it launched the program , I haven't heard of it in quite a while!

You call that skid, a security researcher who actually runs a scanner , doesnt even know what the flaw means and reports it ?

Well , this is true to some extent. But how about this? The same goes for the companies as well. A skid gets a  $100 for reporting some random FPD. But A bug which could worth entire company's property and trust is rewarded 10,000$ by paypal 20k$ by google and 33,500$ by facebook. Is paypal just worth 10k$ ? 

So, I think basically the sides are even. One gets to the whitehat page with an vulnerability that would merely affect the server's CIA (confidentiality, integrity and Availability ) property and the other which could affect all the factors mentioned!

So, if they can pay very little (as compared to how devastating it could have been) , it is fair enough to report a xss. But what matters is, pasting payload on every search box you see without havin any knowledge of javascript doesn't train your mind in any way!

For an example , lets see this two findings by @joernchan in github

https://bounty.github.com/researchers/joernchen.html

The two issues he reported:

1)RCE 

2)2-factor authn. brute force

A severest possible bug is valued 5000$. Howver a 2-factor authn. which is merely an issue gets 1000$ because an attacker already needs to know the password of victim.

So for the first issue is reporter is in complete loss and for the second , the company is in loss.

So , I see the sides pretty evenly balanced with the great findings always suffering pretty much of losses!

Also, XSS always aint no skid stuff. Javascript experts actually see how each payloads are processed , which characters are blacklisted , which is being reflected and in overall, if the input is being validated and sanitized well. Bug bounty should be more than pasting payloads from your notepad to search forms!

Of course "money" will always be a driving factor in the field! It should be because a server side privilege escalation or an authentication bypass should always be on top priority than a xss bug. And the level of priority is shown by amount the company wills to spend to reward the researcher.

Moreover , viewed from one perspective , it is also about that "feeling" of  proudness for helping the community stay secure! Its always not about the money and shouldn't be!

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL

Spiderman Unlimited Hack Tool Energy, Health Unlimited

How to Hack Spiderman Unlimited for iOS and Android? Do not worry You Can find here. We will provide Spider-Man Unlimited Hack No Surveys No Password to download for free. With our Spiderman Unlimited Hack you can get unlimited energy, health, Spider points Generator. Our soft works on all Android and iOS devices.
It does not require any jailbreak or root. Our Hack tools is very easy to use. Hacked tool is clean of viruses and very easy to use. Alot sites for Spiderman Unlimited cheat tools given on the internet but you have to pay.

Here you fight to save the city of New York, will be increasingly felt great when you fight the boss in this Spider-Man Unlimited game. You will fight a boss in every 5000 meters once. With all-round attack suddenly, Green Goblin and the Vulture which is always ready to hamper you in saving the city of New York. To defeat them, you need to swipe swipe up or down to shield Shield are popping up on every track to run, swipe motion you will throw a shield towards Boss. Every Shield that you throw will always release their HP slowly. A boss needs about ten tosses shield to beat. Here you will be required to quickly defeat them, if within one and a half minutes can not beat the boss, then they will run away leaving you. But when you have defeated him, you will get a score bonus in the amount of 5000 points.

Features

Unlimited Energy

UnlimitedHealth

 Unlimited Spider Points

Anti Ban Protection

World of Spider-Man Unlimited Hack Instruction:

1. Click Download Button
2. Automatic link download to your PC
3. Install
4. Game has been hacked
5. Play game for Free Enjoy it!

Download Spiderman Unlimited Hack No Survey on here

DOWNLOAD MOD APK

DOWNLOAD CHEAT TOOL