Vivek Blogs | Security Researcher

<style>/*<meta name='google-adsense-platform-account' content='ca-host-pub-1556223355139109'/>
<meta name='google-adsense-platform-domain' content='blogspot.com'/>

</head><body>*/</style>

Download Burp Suite v1.6.18

Download Burp Suite v1.6.18

Hi Guys, hope you all are doing well... Here is something for you all. Hope you all like it. And I know this tool is loved by all research...

Admin 19 Jun, 2015

XSS On Magento Commence

XSS On Magento Commence

I have reported the Cross Site Scripting Vulnerability on Magento.com, and the issue was on the Account SignUp page. I had reported the iss...

Admin 15 Jun, 2015

Cross Site Scripting Vulnerability on Indeed

Cross Site Scripting Vulnerability on Indeed

This is my another Cross Site Scripting (XSS) findings on Indeed.com . I had reported the issue to the indeed team, but unfortunately My r...

Admin 13 Jun, 2015

XSS Vulnerability on Getpantheon.com

XSS Vulnerability on Getpantheon.com

This was my old finding on Pantheon domain. I remembered that there were some filtered active on the GetPantheon domains, but after some t...

Admin 13 Jun, 2015

Google Acquisition TimeFul XSS Writeup

Google Acquisition TimeFul XSS Writeup

Hi guys, This is my first writeup of my findings, and I just thought why note to start with Google only. I hope you all know that last mo...

Admin 12 Jun, 2015

Welcome to My Blog

Welcome to My Blog

Hi guys, Vivek here from Cyber Kendra. This is my personal blog and here I will write about what i have learnt from my friends and mentor...

Admin 3 Feb, 2015

<style>/*
<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/523887051-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY6m4bpjWfxVMKYjVC-tT_b_7LUh2g:1716038221865';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d2274759449871195687','//vivekgurung.blogspot.com/','2274759449871195687');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '2274759449871195687', 'title': 'Vivek Blogs | Security Researcher', 'url': 'http://vivekgurung.blogspot.com/', 'canonicalUrl': 'http://vivekgurung.blogspot.com/', 'homepageUrl': 'http://vivekgurung.blogspot.com/', 'searchUrl': 'http://vivekgurung.blogspot.com/search', 'canonicalHomepageUrl': 'http://vivekgurung.blogspot.com/', 'blogspotFaviconUrl': 'http://vivekgurung.blogspot.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': false, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': '', 'encoding': 'UTF-8', 'locale': 'en-GB', 'localeUnderscoreDelimited': 'en_gb', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Vivek Blogs | Security Researcher - Atom\x22 href\x3d\x22http://vivekgurung.blogspot.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22Vivek Blogs | Security Researcher - RSS\x22 href\x3d\x22http://vivekgurung.blogspot.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Vivek Blogs | Security Researcher - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/2274759449871195687/posts/default\x22 /\x3e\n', 'meTag': '', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': false, 'adsenseAutoAds': false, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/8a8c39e8754b0ef7', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Get link', 'key': 'link', 'shareMessage': 'Get link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Share to Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'Twitter', 'key': 'twitter', 'shareMessage': 'Share to Twitter', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Share to Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27en_GB\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': 'Read more', 'pageType': 'index', 'pageName': '', 'pageTitle': 'Vivek Blogs | Security Researcher'}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Link copied to clipboard', 'ok': 'Ok', 'postLink': 'Post link'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Custom', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'Vivek Blogs | Security Researcher', 'description': '', 'url': 'http://vivekgurung.blogspot.com/', 'type': 'feed', 'isSingleItem': false, 'isMultipleItems': true, 'isError': false, 'isPage': false, 'isPost': false, 'isHomepage': true, 'isArchive': false, 'isLabelSearch': false}}, {'name': 'widgets', 'data': [{'title': 'Upload Image', 'type': 'Image', 'sectionId': 'upload-image', 'id': 'Image10'}, {'title': 'Logo', 'type': 'HTML', 'sectionId': 'header-main', 'id': 'HTML10'}, {'title': 'Icons, Dark, Search', 'type': 'LinkList', 'sectionId': 'header-main', 'id': 'LinkList10'}, {'title': 'Menu', 'type': 'LinkList', 'sectionId': 'header-main', 'id': 'LinkList11'}, {'title': '#Advertisement', 'type': 'HTML', 'sectionId': 'before-blog', 'id': 'HTML11'}, {'title': 'Featured Post', 'type': 'FeaturedPost', 'sectionId': 'before-blog', 'id': 'FeaturedPost1', 'postId': '5410342518015542638'}, {'title': '#Advertisement', 'type': 'HTML', 'sectionId': 'before-post', 'id': 'HTML12'}, {'title': 'Blog Posts', 'type': 'Blog', 'sectionId': 'blog-post', 'id': 'Blog1', 'posts': [{'id': '5410342518015542638', 'title': 'Download Burp Suite v1.6.18', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJE8gnMgRTn8SP7UMhom2H7Uj0i5V8TATAzwVDSCO-ze-RK4rBExgrnWzWgSyfrY2ev9bTtEY0ye7bWUndl8KelgoZtKuH5HGSomvXoN7HBIYPb77sZrLtRvtLpUq7nsaD22PdZRgtiu1K/s200/bse_1024x1024.png', 'showInlineAds': false}, {'id': '7794069227085464985', 'title': 'XSS On Magento Commence ', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTGYlytzoXFll4f_2imkmEKRXyARZztjsJWdyb8eb17A0WzAbxiNuNqmYy9N3ppCATV6c6TX1qx65CNlJYQg6AxC2moBppQ_j_guGqpHUrVOYDhM9OMM0ESKBKOpMd4cLGmeSQCKLSU6rJ/s200/magento.jpg', 'showInlineAds': false}, {'id': '5992436901539598565', 'title': 'Cross Site Scripting Vulnerability on Indeed', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIT-gyYmj0tFzzgCOtnF0SYZ9PXmJIkVue_gC3jgJQajHxfVT65ZxGnM9H_THLTe2LCcUhDMEUbo9B1fO_4sblbxhwvxFh9NKEBF6dGCgsp-ppBdIWiBbIZ8G7VH8j4I-GJuXBcDALPMDr/s1600/recruit-indeed-315x204.jpg', 'showInlineAds': false}, {'id': '1149070706087730885', 'title': 'XSS Vulnerability on Getpantheon.com', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUJt4ddQcXfPLDwHfctzp-aQ5nuknXmG1xoRUWAF6_jI4jlt7_Xw0XT1LapXT8pJ4hXl7tcXLHElkADls2xM6TNKNaXrgCHp2qkFJpq-DrZh56EQIISFBxVYXDYHBl1rs3ImmTEZhndPKb/s400/pantheon.jpg', 'showInlineAds': false}, {'id': '3607125555230718296', 'title': 'Google Acquisition TimeFul XSS Writeup', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIGbFPvGii6l650y2H_DYqKhIUSwrmk-fk50cJlz_QaPQGEWPDQVo-fI8HOGwJ_PFWIBzJy0OiKBiIAVNvN2u1dBh2hL34hoHffWAGxgHL2cPvPDEbazhK9a7dFTZbAcP_hGZ6Wu75hcrk/s1600/149074eb8384.png', 'showInlineAds': false}, {'id': '315588858466663108', 'title': 'Welcome to My Blog', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhluXsoPC_f8mK0ih29O7msXS4agko04gy7otA7s2FnXHHTyxmmfHTe9HxPMiU8nCTh6JSHD7lV16bFYSgbWkR054aCLKuwA8bdoNq3LT_lhPuf_9Qwz_aql-LToSBDrxDiuJy8XO_yfnSU/s320/Welcome_to_my_Blog_Screen_20_02_2011_en.jpg', 'showInlineAds': false}], 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'author', 'label': 'Oleh'}, {'name': 'timestamp', 'label': 'd MMM, yyyy'}, {'name': 'comments', 'label': 'Comment'}, {'name': 'share', 'label': ''}]}, {'regionName': 'footer2', 'items': [{'name': 'labels', 'label': 'in'}]}], 'allBylineItems': [{'name': 'author', 'label': 'Oleh'}, {'name': 'timestamp', 'label': 'd MMM, yyyy'}, {'name': 'comments', 'label': 'Comment'}, {'name': 'share', 'label': ''}, {'name': 'labels', 'label': 'in'}]}, {'title': '#Advertisement', 'type': 'HTML', 'sectionId': 'ads-post', 'id': 'HTML13'}, {'title': '#Advertisement', 'type': 'HTML', 'sectionId': 'ads-post', 'id': 'HTML14'}, {'title': '#You may also like', 'type': 'HTML', 'sectionId': 'ads-post', 'id': 'HTML15'}, {'title': '#Advertisement', 'type': 'HTML', 'sectionId': 'ads-post', 'id': 'HTML16'}, {'title': '#Advertisement', 'type': 'HTML', 'sectionId': 'ads-post', 'id': 'HTML17'}, {'title': 'Popular Posts', 'type': 'PopularPosts', 'sectionId': 'sidebar-static', 'id': 'PopularPosts10', 'posts': []}, {'title': '#Advertisement', 'type': 'HTML', 'sectionId': 'sidebar-sticky', 'id': 'HTML20'}, {'title': 'About Us', 'type': 'HTML', 'sectionId': 'footer-widget', 'id': 'HTML21'}, {'title': 'Learn More', 'type': 'LinkList', 'sectionId': 'footer-widget', 'id': 'LinkList13'}, {'title': 'Follow Us', 'type': 'LinkList', 'sectionId': 'footer-widget', 'id': 'LinkList14'}, {'title': 'Newsletter', 'type': 'HTML', 'sectionId': 'footer-widget', 'id': 'HTML22'}, {'title': 'Copyright', 'type': 'HTML', 'sectionId': 'copyright', 'id': 'HTML23'}, {'title': 'SVG Icons', 'type': 'HTML', 'sectionId': 'jet-options', 'id': 'HTML24'}]}]);
_WidgetManager._RegisterWidget('_ImageView', new _WidgetInfo('Image10', 'upload-image', document.getElementById('Image10'), {'resize': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML10', 'header-main', document.getElementById('HTML10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList10', 'header-main', document.getElementById('LinkList10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList11', 'header-main', document.getElementById('LinkList11'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML11', 'before-blog', document.getElementById('HTML11'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_FeaturedPostView', new _WidgetInfo('FeaturedPost1', 'before-blog', document.getElementById('FeaturedPost1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML12', 'before-post', document.getElementById('HTML12'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'blog-post', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/1132154221-lbx__en_gb.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/13464135-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML13', 'ads-post', document.getElementById('HTML13'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML14', 'ads-post', document.getElementById('HTML14'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML15', 'ads-post', document.getElementById('HTML15'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML16', 'ads-post', document.getElementById('HTML16'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML17', 'ads-post', document.getElementById('HTML17'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts10', 'sidebar-static', document.getElementById('PopularPosts10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML20', 'sidebar-sticky', document.getElementById('HTML20'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML21', 'footer-widget', document.getElementById('HTML21'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList13', 'footer-widget', document.getElementById('LinkList13'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList14', 'footer-widget', document.getElementById('LinkList14'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML22', 'footer-widget', document.getElementById('HTML22'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML23', 'copyright', document.getElementById('HTML23'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML24', 'jet-options', document.getElementById('HTML24'), {}, 'displayModeFull'));
</script>
</body>*/</style>