Check Your Site Vulnerability if Listing on Bounty Site.

最新推荐文章于 2024-12-19 20:05:09 发布

原创最新推荐文章于 2024-12-19 20:05:09 发布 · 128 阅读

CC 4.0 BY-SA版权

只要网络应用发布到互联网，就可能面临黑客扫描。Open Bug Bounty是一个非营利平台，能让安全研究人员和网站所有者建立联系。可在该平台搜索要检测的网站，发现漏洞URL后，因现代浏览器有防护机制，需特定操作来验证XSS漏洞。

As long as your web application published on Internet, one day it will face the hackers scanning. There is no 100% security and you always want to find out the vulnerability first before it can be exploited. There are many bounty programs online to attract hackers to search those vulnerabilities and publish out, also notify web master. Open Bug Bounty is one of them and probably most popular one.

1. Open Bug Bounty Website
Started in June 2014, Open Bug Bounty is a non-profit platform designed to connect security researchers and website owners in a transparent, respectful and mutually valuable manner. Open Bug Bounty’s coordinated vulnerability disclosure platform allows any security researcher reporting a vulnerability on any website as long as the vulnerability is discovered without any intrusive testing techniques and is submitted following responsible disclosure guidelines.

Open_Bug_Bounty_Homepage.png?resize=800%2C622&ssl=1

2. Search the Website you want to check

Open_Bug_Bounty_search.png?resize=800%2C551&ssl=1

3. Check the finding

Open_Bug_Bounty_result.png?resize=724%2C800&ssl=1

There is a vulnerable URL:
http://www.osc.gov.on.ca/en/1247.htm?query=”/><script src=https://openbugbounty.org/1.js>

and the screenshot to prove this vulnerability.

It also tells you when this vulnerability found and if it is active, and what is the public disclosure date. In this example, you will see this vulnerability reported on April 1 2018. Public disclosure date is June 30 2018. On the same date it found, the vulnerability has been notified the website operator.

Another url relating Cross Site Scripting you can try is :
http://www.osc.gov.on.ca/en/1247.htm?query=”/><script>alert(/XSSPOSED/)</script>

4. Verify the vulnerability

Unfortunately, if you directly copy the url into web browser , it wont work since most of modern browser has a feature to block this type of XSS (Cross Site Scripting) attack.