---
id: 6576
title: "The $12,000 Intersection between Clickjacking, XSS, and Denial of Service"
source_domain: samcurry.net
source_url: "https://samcurry.net/the-12000-intersection-between-clickjacking-xss-and-denial-of-service"
published_at: "2018-07-04T00:00:00Z"
tags: ["bug-bounty", "denial-of-service", "web-security", "xss", "clickjacking", "gambling"]
phying_url: "https://phying.com/item/6576"
lang: en
---

# The $12,000 Intersection between Clickjacking, XSS, and Denial of Service

## Summary

On a bitcoin gambling site, chat autolinking, clickjacking and XSS chained into $12,000 in bounties—including a denial-of-service against users' browsers—rewarding patience on a limited surface.

## Intelligence Metadata

- **Sources:** samcurry.net
- **Published:** 2018-07-04T00:00:00Z
- **Original:** https://samcurry.net/the-12000-intersection-between-clickjacking-xss-and-denial-of-service
- **Phying News:** https://phying.com/item/6576