Coordinated and Responsible Vulnerability Disclosure Free Bug Bounty Program 456,365 coordinated disclosures
244,382 fixed vulnerabilities
604 bug bounties with 1224 websites
12,321 researchers, 962 honor badges

How create xml report file via Burp Suite

1. Reproduce the vulnerability using Burp Suite

2. Proxy - HTTP History tab should contain at least 3 HTTP requests

  • First request with page contents for CSRF exploitation
  • Second request – the actual exploitation of CSRF vulnerability
  • Third request with page contents after CSRF exploitation

3. Add comments to request, as shown below


4. Select the requests and save them into file


5. Send the saved file using report form.

  Latest Patched

 23.10.2019 gramha.net
 23.10.2019 deskgram.net
 22.10.2019 jpnn.com
 22.10.2019 iphoneitalia.com
 22.10.2019 biggo.com.tw
 22.10.2019 you2repeat.com
 21.10.2019 bfmtv.com
 21.10.2019 carbon38.com
 21.10.2019 register.it
 21.10.2019 business-standard.com

  Latest Blog Posts

17.10.2019 by 0xrocky
Stored XSS
17.10.2019 by geeknik
The "S" in IOT is for Security
16.10.2019 by darknetguy
Best XSS Vectors
01.10.2019 by Renzi25031469
#Security 100%
18.09.2019 by Leon
SSRF | Reading Local Files from DownNotifier server

  Recent Recommendations

    23 October, 2019
     rendkul:
thanks for informing us about xss vulnerability.
    23 October, 2019
     raviakp1004:
Thanks for letting us know about this XSS vulnerability. We appreciate the quick feedback.
    23 October, 2019
     Mrrain_1996:
Thank you a lot for the information and the support on fixing the issue! Very friendly and kind contact.
    23 October, 2019
     faizan_mark:
Thank you a lot for the information and the support on fixing the issue! Very friendly and kind contact.
    22 October, 2019
     BountyNeuvoo:
Dear,

Thank you for participating in our responsible disclosure program.

You helped us to solve a security vulnerability by informing us directly and delivering comprehensible examples.

We greatly appreciate your assistance in helping us maintain the security of our services.

Best regards