The $12,000 Intersection between Clickjacking, XSS, and Denial of Service
samcurry.net | vulnerability | #bug-bounty | #denial-of-service | #web-security | #xss | #clickjacking | #gambling
Summary
On a bitcoin gambling site, chat autolinking, clickjacking and XSS chained into $12,000 in bounties—including a denial-of-service against users' browsers—rewarding patience on a limited surface.
- Published
- Collected
--- id: 6576 title: "The $12,000 Intersection between Clickjacking, XSS, and Denial of Service" source_domain: samcurry.net source_url: "https://samcurry.net/the-12000-intersection-between-clickjacking-xss-and-denial-of-service" published_at: "2018-07-04T00:00:00Z" tags: ["bug-bounty", "denial-of-service", "web-security", "xss", "clickjacking", "gambling"] phying_url: "https://phying.com/item/6576" lang: en --- # The $12,000 Intersection between Clickjacking, XSS, and Denial of Service ## Summary On a bitcoin gambling site, chat autolinking, clickjacking and XSS chained into $12,000 in bounties—including a denial-of-service against users' browsers—rewarding patience on a limited surface. ## Intelligence Metadata - **Sources:** samcurry.net - **Published:** 2018-07-04T00:00:00Z - **Original:** https://samcurry.net/the-12000-intersection-between-clickjacking-xss-and-denial-of-service - **Phying News:** https://phying.com/item/6576