Report a Vulnerability
Submit, help fixing, get kudos.
Start a Bug Bounty
Run your bounty program for free.
748,118 coordinated disclosures
438,247 fixed vulnerabilities
1148 bug bounties with 2,200 websites
20,689 researchers, 1257 honor badges

How create xml report file via Burp Suite

1. Reproduce the vulnerability using Burp Suite

2. Proxy - HTTP History tab should contain at least 3 HTTP requests

  • First request with page contents for CSRF exploitation
  • Second request – the actual exploitation of CSRF vulnerability
  • Third request with page contents after CSRF exploitation

3. Add comments to request, as shown below

How create xml report file via Burp Suite
4. Select the requests and save them into file

How create xml report file via Burp Suite
5. Send the saved file using report form.

  Latest Patched

 23.01.2021 boohoo.com
 22.01.2021 garmin.com
 22.01.2021 ecu.edu.au
 21.01.2021 liveauction.am
 21.01.2021 esto.nasa.gov
 21.01.2021 french-bookys.org
 21.01.2021 dmm.com
 21.01.2021 polimi.it
 20.01.2021 4gamer.net
 20.01.2021 splunk.com

  Latest Blog Posts

25.12.2020 by _Y000_
How to bypass mod_security (WAF)
10.12.2020 by _Y000_
sql injection to bypass Mod_Security
10.12.2020 by _Y000_
Create encoded sql payloads
26.10.2020 by _r00t1ng_
Bypass Addslashes using Multibyte Character
26.10.2020 by _r00t1ng_
One Payload to Inject them all - MultiQuery Injection

  Recent Recommendations

@KodiMaster1     23 January, 2021
    Twitter KodiMaster1:
Good and professional report. I was a pleasure working with him!
@igucci     23 January, 2021
    Twitter igucci:
Thank you for the notification and quick & polite response.
Keep up the great work!
@randomthing4ev1     22 January, 2021
    Twitter randomthing4ev1:
Thank you for pointing out the vulnerability on our website! Very responsive.
@dtestitall     22 January, 2021
    Twitter dtestitall:
Thank you for finding the information disclosure vulnerability! Praveen was very responsive!
@hoshitabeman     21 January, 2021
    Twitter hoshitabeman:
It was very helpful for me to point out that I forgot to delete php.info!