Hello all. Suppose you encounter a reflected XSS vulnerability on a State of Florida website. You email details of it to webmaster@somedepartmentorwhatever.org and the email bounces. You then tweet to the department asking who to disclose the vulnerability to and receive no response. What would you do?
- Keep digging for a technical contact?
- Tweet the vulnerable URL with an example payload?
- Forget about it and move on?
- Open a support ticket with a department employee, send them the URL with a cookie-stealing payload, use their cookies to gain privileged access to the site, and deface…