Report it to the owner to get What they give.
LIST:
Posting msn vulnerability to microsoft will paste your name on their Hall of fame page.

msn.com
http://vaibs.comuv.com/msnxss.jpg
http://vaibs.comuv.com/1.jpg

Yahoo will appreciate and send you T-shirts :P
yahoo.net
http://vaibs.comuv.com/1.jpg

Mozilla Pays 500$ on reporting.
mozilla.org
http://vaibs.comuv.com/mozilla.jpg

Baidu too pays .
baidu.com->http://vaibs.comuv.com/msn22.jpg

I have 2 to 4 Xss on each listed website listed above.
These were the top site i Xssed.
You can request me for other sites too.
I will find xss for on the sites ranking above 100 on alexa.
Also I will disclose it publicly to all here for these sites.

I sqlied msn.com
Reporting to microsoft will put your name on Hall of fame like Google but they dont pay.
http://vaibs.comuv.com/msn.png
Guess my name :
http://vaibs.comuv.com/MS.jpg

Vaibs

To get the rewards, you would have to reveal your name. Doesn't that open you up to prosecution?

EDIT: Cancel the above. Microsoft and Mozilla have said they won't prosecute researchers who responsibly disclose bugs.



Edited 1 time(s). Last edit at 04/05/2012 10:45PM by Juggernaut.

Revaling my name does not matter.This group is slow.
I reported mozilla and earned 1000$ already.

Vaibs