Author: Osanda Malith Jayathissa

An Interview from BugCrowd

Last week I got a email from Olivia Maree for an interview from the BugCrowd blog. So you can find the questions and the answers in here:

http://blog.bugcrowd.com/osanda-malith-jayathissa-osandamalith/

Special Thanks to Olivia for giving me this opportunity. Greetings to all to my true friends 😉

Acknowledged by Nokia Solutions and Networks

I was acknowledged by Nokia Solutions and Networks for reporting 3 flash based XSS and 2 content spoofing vulnerabilities.
 Image
I wish I had the screenshot of the flash XSS bugs but unfortunately I have forgotten to get a screenshot.  Once again the first Sri Lankan to be mentioned.  Anyway Thank you guys 🙂

Thanks from hacker Accedemy

Recently I was able to find multiple vulnerabilities in their blog and the website. So I made a responsible disclosure to Brad Geesaman. Well he thanked me via twitter 🙂

Image

https://twitter.com/hackeracademy/status/378854979458838528

Thank you guys 🙂

Acknowledged by Ebay

Ebay had some issues with there blog. After responsible disclosure my name got published!

http://pages.ebay.com/securitycenter/ResearchersAcknowledgement.html

Image

Thank you Ebay Security Team! 🙂

Free Antivirus by Panda Security

Recently I was able to find two reflected cross site scripting issues in the Panda website. So I responsibly disclosed them the issues. As a reward them gave me Panda Antivirus 2014 for free (>??)? Special thanks to the Panda Security Team !

Image

(more…)

Acknowledged by BugSheet

I got acknowledged by BugSheet for pointing them out a vulnerable version of a server.

http://www.bugsheet.com/bug-bounties#special_thanks

bugsheet

They will have another separated page for security researchers soon till then they published in the normal contribution list as I both found a vulnerability and contributed to their page.

1231637_10202082395768037_388187669_n

Thank you all `!

Acknowledged by Avira

Avira had few bugs and I reported them. They had a security policy http://www.avira.com/en/support-vulnerability so I reported them about the issue. They acknowledged me through e-mail.

Image

Acknowledged by MediaFire

I recently found a major SSL issue which was a big security flaw when it comes crafting attacks and few critical bugs in the blog of MediaFire. This was a logical bug in which we could change SSL settings remotely in any user.  So they acknowledged me with a digitally signed Certificate 🙂

Image

(more…)