Just found an XSS in Habbo, what to do?

[Samantha]

When did the sulake staff get here . Nice one.

Thanks for the break down @Breeze however I think it could be dangerous to bribe too.

[vito201-:D]

Hey guys, I just found an XSS in Habbo, it's persistent. I've reported it to Habbo but as always there is no reply. I'm wondering what to do?

What are your thoughts?

You should give it to me... not sell it to me, just give it to me so I can try and do something creative with it (Assuming it's a full XSS exploit that allows code etc and not a minor one that just allows HTML like most are) before Sulake patch it... since you've already told them about it...
- Alex (Shenk).

Edited by Chris (Forum Super Moderator): Please do not abuse moderator features!

[Jazz]

no idea what xss is but yeah, i would sell it you will gett in so much ****

[Breeze]

i can take care of this.

Here comes Mr.Killjoy, @noobdoob give it to Alex/Vito/Shenk, he knows what to do with it.

[noobdoob]

Okay, I'll see what I can do.*REMOVED*

The so called Habbo staff contacted me. I haven't reported it yet, until I get with a settlement with them. They've been a ***** to me lately.

---------- Post added 19-03-2012 at 04:50 PM ----------

This is a good example why I shouldn't give them the XSS. I've wrote them in clear English and explained the situation.

Thank you for contacting Habbo.

Unfortunately we are unable to assist you as we could not understand your query. Please reply with a longer explanation of your problem, in clear English, so that we can provide you with support.

Edited by Martin (Forum Moderator): Please do not be rude towards other forum members!

[GoldenMerc]

So you now get a "settlement" for threatning to hack and release users data, what is this business coming to

[Red]

Okay, I'll see what I can do.*REMOVED*
The so called Habbo staff contacted me. I haven't reported it yet, until I get with a settlement with them. They've been a ***** to me lately.

---------- Post added 19-03-2012 at 04:50 PM ----------

This is a good example why I shouldn't give them the XSS. I've wrote them in clear English and explained the situation.

Thank you for contacting Habbo.

Unfortunately we are unable to assist you as we could not understand your query. Please reply with a longer explanation of your problem, in clear English, so that we can provide you with support.

Lmao, guessing you had katharina? Said the exact same to me. Stupid dkfjdkfd

So you now get a "settlement" for threatning to hack and release users data, what is this business coming to

Yea but they seem to be rewarding a lot of hackers who pass on security exploits with names and stuff :rolleyes:

[noobdoob]

It's not like I've hacked Habbo. I just want a reward for my hard work. That's all.

[Mathew]

Here comes Mr.Killjoy, @noobdoob give it to Alex/Vito/Shenk, he knows what to do with it.

How on earth is he being a killjoy? He's doing his job. How can you endorse and encourage hacking? :rolleyes: I'm surprised this thread is still open tbh...

Okay, I'll see what I can do. *REMOVED*
The so called Habbo staff contacted me. I haven't reported it yet, until I get with a settlement with them. They've been a ***** to me lately.

---------- Post added 19-03-2012 at 04:50 PM ----------

This is a good example why I shouldn't give them the XSS. I've wrote them in clear English and explained the situation.

Thank you for contacting Habbo.

Unfortunately we are unable to assist you as we could not understand your query. Please reply with a longer explanation of your problem, in clear English, so that we can provide you with support.

Stop being so childish. I can't believe people in this thread have the cheek to ask for a "settlement" and endorse / encourage hacking. You're not important or special just because you know something, so stop acting so pretentious. Sulake is a multi-million dollar company, so you'd be stupid to think you'd get your own way. I take it you've been a member of Habbo for a good few years: they've provided you with hours of entertainment, yet you still feel the need to test their limits. The lack of respect for Habbo in this thread is crazy.

[noobdoob]

They've never treated me well. I'm not being an attention *****, I'm just asking what to do. They banned me for the following reason "Intention of scamming" Do you think that's a good enough reason to permanently ban someone? I'm not threatening to hack anyone, if they really were such a good company, they'd fix there ticket system first. I'm not encouraging hacking, I found an glitch/bug/exploit in there system.

Please do not come in here making accusations, I'm not disrespecting Habbo, I'm just showing them how bad there service is. I've worked hard to find that bug, I'm not just giving it away without being accredited for it.