Friday, October 11, 2013

Google Mail Hacking - Stored XSS in GMail for iOS



Hi! Just want to share my finding, I have found Stored XSS Vulnerability in GMail for iOS. With no user interaction, enjoy ;-)

GMail for iOS contained an XSS vulnerability in its “Mail Attachment” feature. This bug was reported to Google Security Team, fixed immediately.


About

Title: Stored XSS in GMail for iOS
Business Risk: High
Discovery Date: October 8, 2013
Payload: <img src=x onerror=alert(0)>
Author: Roy Castillo (me)

Steps to Reproduce


1. Login to Google Analytics
2. Create an account and name it <img src=x onerror=alert(0)>
3. Go to Reporting -> Real Time -> Overview -> Email
4. Send an email to the victim GMail address.


5. Open your GMail for iOS
6. Open the received email.
7. XSSED



Stored XSS in GMail for iOS

The filename of the attachment was not escaped correctly and I was able to get the Stored XSS triggered. By using the generated report from Google Analytics I could inject script code that was executed on mail.google.com. The XSS is stored just simply reopen the mail anytime you want.

Google Security Team was pretty fast to address this issue and resolved this the next day itself. Google Security team awarded this bug with $5000.



Achievement unlocked: $5000 reward for XSS at google.com ;)

Thank you Google Security Team!

Disclosure Timeline

October 8, 2013 at 6:14 AM (GMT +08:00): Vulnerability Discovered
October 8, 2013 at 2:59 PM (GMT +08:00): Initial Report
October 8, 2013 at 2:59 PM (GMT +08:00): Autorespose from Security bot
October 9, 2013 at 12:17 AM (GMT +08:00): First response from Security Team
October 9, 2013 at 7:45 AM (GMT +08:00): Bounty Rewarded.
October 10, 2013: Vulnerability Fixed
October 12, 2013: Full Disclosure Published



Best,

Roy Castillo

499 comments:

  1. :D nice one, congratulations on the bounty.

    ReplyDelete
    Replies
    1. Hello everyone..Welcome to my free masterclass strategy where i teach experience and inexperience traders the secret behind a successful trade.And how to be profitable in trading I will also teach you how to make a profit of $12,000 USD weekly and how to get back all your lost funds feel free to email me on(brucedavid004@gmail.com) or whataspp number is +22999290178

























      Delete
  2. Man your bugs are cool . I like the way you think :D

    ReplyDelete
  3. Amazing! I never image onError can run. Really smart! But is run just because you send through Google Analytics, right?

    ReplyDelete
  4. The personal items are always important to be stored in the first place. So, if you’ve rented a storage space or thought about it, the time is right now for you to consider insurance options since some renting facilities will not cover your stuff.
    Storage in Vancouver, WA

    ReplyDelete
  5. Copied your bug report blog post into http://bughunters.thebestbug.com/index.php?title=Bug3-Google_Mail_Hacking_-_Stored_XSS_in_GMail_for_iOS (trying a wiki with bugs rewarded). hope you are ok with it and maybe you can add entries there yourself

    ReplyDelete
  6. Thanks for the blog...very nice description about Online Tech Support...Good luck!!!
    For Online Tech Support,please follow the website: Gmail Technical Support

    Thankyou
    Lacy Brown

    ReplyDelete
  7. Thanks to post this article. Mobile Application Development is play great role in business.Great job.keep it up.

    ReplyDelete
  8. There are also other options you can choose here too, but the ones I use the most are Skip the Inbox and Apply the Label. https://www.behance.net/gallery/40444073/Change-Or-Reset-Your-Google-Account-Password?

    ReplyDelete
  9. wow give me training..hey please sent me some auto approval backlinks.
    www.umangseo5008@gmail.com

    ReplyDelete
  10. Thank you for taking the time and sharing this information with us. It was indeed very helpful and insightful while being straight forward and to the point.
    Mcdonalds gutscheine | Startlr | salud limpia

    ReplyDelete
  11. Wow very nice blog and got great idea about gmail hacking....
    IOS course in chennai

    ReplyDelete
  12. Great content thanks for sharing this informative blog which provided me technical information keep posting.
    python course in pune
    python course in chennai
    python course in Bangalore

    ReplyDelete
  13. Superb. I really enjoyed very much with this article here. Really it is an amazing article I had ever read. I hope it will help a lot for all. Thank you so much for this amazing posts and please keep update like this excellent article.thank you for sharing such a great blog with us. expecting for your.
    German Classes in Chennai
    Big Data Training in Chennai
    Android Training in Chennai
    Selenium Training in Chennai
    Digital Marketing Training in Chennai
    JAVA Training in Chennai
    PHP Training in Chennai
    PHP Training Institute in Chennai

    ReplyDelete
  14. I found your blog while searching for the updates, I am happy to be here. Very useful content and also easily understandable providing.. Believe me I did wrote an post about tutorials for beginners with reference of your blog. 
    Power bi training in Chennai

    ReplyDelete

  15. This is quite educational arrange. It has famous breeding about what I rarity to vouch. Colossal proverb. This trumpet is a famous tone to nab to troths. Congratulations on a career well achieved. This arrange is synchronous s informative impolite festivity to pity. I appreciated what you ok extremely here.
    Data Science training in rajaji nagar
    Data Science with Python training in chennai
    Data Science training in electronic city
    Data Science training in USA
    Data science training in pune
    Data science training in bangalore

    ReplyDelete
  16. Thanks for posting useful information.You have provided an nice article, Thank you very much for this one. And i hope this will be useful for many people.. and i am waiting for your next post keep on updating these kinds of knowledgeable things...Really it was an awesome article...very interesting to read..please sharing like this information......
    mobile service centre
    mobile service center in chennai
    mobile service center chennai
    mobile service centre near me
    mobile service centre chennai
    best mobile service center in chennai
    best mobile service center in chennai
    mobile service center in velacherry
    mobile service center in vadapalani
    mobile service center in porur
    best mobile service center

    ReplyDelete
  17. Thanks for posting useful information.You have provided an nice article, Thank you very much for this one. And i hope this will be useful for many people.. and i am waiting for your next post keep on updating these kinds of knowledgeable things...Really it was an awesome article...very interesting to read..please sharing like this information......
    samsung mobile service center in chennai
    samsung mobile service center
    samsung mobile service chennai
    samsung mobile repair
    samsung mobile service center near me
    samsung service centres in chennai

    ReplyDelete
  18. Great post. I was once checking constantly this weblog and I'm impressed! Extremely useful information specially the closing part. I maintain such information much. I was once seeking this specific information for a very long time. Many thanks and best of luck.
    honor service centre chennai
    honor service centre
    honor mobile service center in chennai
    honor mobile service center
    honor mobile service centre in Chennai
    honor service center near me

    ReplyDelete

  19. Nice Article… I love to read your articles because your writing style is too good, its is very very helpful for all of us and I never get bored while reading your article because, they are becomes a more and more interesting from the starting lines until the end.

    best hadoop training in chennai
    hadoop big data training in chennai
    best institute for big data in chennai
    big data course fees in chennai

    ReplyDelete
  20. Let's share the most impotant Eid Mubarak Greetings to our friends...

    ReplyDelete
  21. if you are searching for free unlimted tricks then visit now on Uvoffer.com and get unlimited offers and informations.
    film ka naam whatsapp puzzle answer film ka naam whatsapp puzzle

    ReplyDelete
  22. Happy fathers day wishes is here. Just copy and send it to your father...

    ReplyDelete
  23. amazing blog layout! How long have you been blogging for? Join Free Indian Whatsapp Group Links Latest 2019 you make blogging look easy.

    ReplyDelete
  24. Fascinating, this could not be written better. Please Keep up the good work.

    Thank you,

    Python training in kalyan nagar

    ReplyDelete
  25. Nice post it is very helpful for me I have some important information in your blog its very helpful for me.
    One Plus Two Service Center in Chennai


    ReplyDelete
  26. I think things like this are really interesting. I absolutely love to find unique places like this. It really looks super creepy though!!

    Check out : hadoop certification in chennai | hadoop training institute in chennai with placement | best bigdata hadoop training in chennai

    ReplyDelete
  27. ok i will care it thanks for the awesome article
    affiliategoldcoin.com
    moneytoearnit.com

    ReplyDelete


  28. Nice Blog, When i was read this blog i learnt new things & its truly have well stuff related to developing technology, Thank you for sharing this blog.
    iPhone app training course in bangalore
    Mobile app training institutes bangalore
    iPhone job oriented course in bangalore
    iPhone training classes in bangalore

    ReplyDelete
  29. This comment has been removed by the author.

    ReplyDelete
  30. Attend The Python Training in Hyderabad From ExcelR. Practical Python Training Sessions With Assured Placement Support From Experienced Faculty. ExcelR Offers The Python Training in Hyderabad.
    python training in bangalore

    ReplyDelete
  31. Attend The Python training in bangalore From ExcelR. Practical Python training in bangalore Sessions With Assured Placement Support From Experienced Faculty. ExcelR Offers The Python training in bangalore.
    python training in bangalore

    ReplyDelete
  32. This blog aware me about different programs which can become very useful for our friends and kids. Few websites provide combined courses and few of the are separately for single subject. Glad to get this information.
    ศูนย์บริการรถยก

    ReplyDelete
  33. This comment has been removed by the author.

    ReplyDelete
  34. Global Shopaholics is a Package forwarding company based in Delaware USA. We are proud to offer the cheapest International shipping rates from the USA to anywhere in the world to your Doorstep. Global Shopaholics core value is based on excellent customer experience while shopping internationally. Our main goal is to make international shopping shipping experience smooth, economical and easy. For more information keep visiting our website: globalshopaholics.com

    shop and ship
    myus
    viabox

    ReplyDelete
  35. This comment has been removed by the author.

    ReplyDelete
  36. This comment has been removed by the author.

    ReplyDelete
  37. I appreciate this informative article for the student who seeking help in the essay writing. We also provide same there you may have the best online essay writing service with the largest database of writers. here: www.5staressays.com
    Write my essay

    ReplyDelete
  38. Awesome Content. Thanks for sharing this with us.

    ReplyDelete
  39. Hello, I read your blog occasionally, and I own a similar one, and I was just wondering if you get a lot of spam remarks? If so how do you stop it, any plugin or anything you can advise? I get so much lately it’s driving me insane, so any assistance is very much appreciated.
    Data science Course Training in Chennai |Best Data Science Training Institute in Chennai
    RPA Course Training in Chennai |Best RPA Training Institute in Chennai
    AWS Course Training in Chennai |Best AWS Training Institute in Chennai
    Devops Course Training in Chennai |Best Devops Training Institute in Chennai

    ReplyDelete
  40. Chauffeur service London, offering executive chauffeur driven car hire services London's largest executive company. Be ready to expect more Services Chauffeur service specializing in London. Visit Here: https://www.smartcityprestige.com/
    E Class Chauffeur

    ReplyDelete
  41. Thanks for Sharing this useful information. Get sharepoint apps development from veelead solutions

    ReplyDelete
  42. It’s not dull when you write about it.. Out of every blog on this, yours worth following. Majhi naukri

    ReplyDelete
  43. Adsense is an advertising program managed by Google. It's a revolutionary way to drive traffic to a website and is considered one of the most powerful tools in an arsenal of publishers. Google Buy google adsense accounts has played a particularly important role in providing advertising revenue to small websites that do not have the resources to develop ad sales programs and sellers.

    Many sites use Best Google Adsense Seller to monetize their content and some webmasters are striving to maximize their revenue. Buy pin verified adsense accounts revenue is generated when a visitor clicks on an ad you have seen. When the user clicks on the image, they are redirected to the advertiser's site in the same manner as regular Buy Google Adsense Account ads.

    All Buy Google Adsense Account revenue comes from the AdWords program, which in turn contains a complex pricing model based on the second-tier Vickrey auction, because an advertiser is required to submit a sealed offer (invisible to competitors). ). You can combine it with affiliate products, for example by selling two of your products and paying for blogging carts, and yes, $ 500 - $ 1,000 a week possible.

    Content of the site

    Google Buy pin verified adsense accounts for mobile devices opens the possibilities of the mobile advertising market. As part of its ongoing effort to develop new ways for users to find the information they need anytime, anywhere, Google today announced the availability of Buy Google Adsense Account for Mobile, a content ad targeting the contents. From mobile sites. Just like the traditional Buy Adsense Accounts program, this will add ads to the content of your mobile website. The system automatically reviews the content of mobile publishers' websites and publishes text ads that are relevant to the public and the content of the website. "With this program, advertisers can communicate with the growing number of mobile publishers who offer users an advanced mobile experience that helps them find what they're looking for faster and more efficiently, anywhere." Google, as announced yesterday for Buy Google Adsense Account for mobile devices, a program that places ads in the content of a mobile website.

    ReplyDelete
  44. Thank you for providing the valuable information …

    If you want to connect with AI (Artificial Intelligence) World
    as like
    Python Training
    ML(Machine Learning)

    Course related more information then meet on EmergenTeck Training Institute .

    Thank you.!

    ReplyDelete
  45. Nice blog. I Love reading all your blog post. it feels so nice and enjoying reading your blogs.

    if you want to travel Nepal, visit us at:

    Adventure Discovery Travel
    everest Base Camp Helicopter Tour
    EBC Heli Tour
    Helicopter Tour to Everest

    ReplyDelete
  46. Nice blog. I Love reading all your blog post. it feels so nice and enjoying reading your blogs.

    if you want to travel Nepal, visit us at:

    Adventure Discovery Travel
    everest Base Camp Helicopter Tour
    EBC Heli Tour
    Helicopter Tour to Everest

    ReplyDelete
  47. Nice Presentation and its hopefull words..
    if you want a cheap web hostinng in web
    cheap web hosting company chennai

    ReplyDelete
  48. I like the helpful info you provide in your articles. I’ll bookmark your weblog and check again here regularly. I am quite sure I will learn much new stuff right here! Good luck for the next!
    Google ads services
    Google Ads Management Services
    Google Ads Management Company
    Google advertising agency
    Google Ads Management agency
    Google ad services on phone
    Google advertising company
    Google advertising agency

    ReplyDelete
  49. Very interesting, good job and thanks for sharing such a good blog. Your article is so convincing that I never stop myself to say something about it. You’re doing a great job. Keep it up. Plaese update for Artificial Intelligence Course.

    ReplyDelete
  50. Thanks for posting useful information.You have provided a nice article, Thank you very much for this one. And I hope this

    will be useful for many people.. and I am waiting for your next post keep on updating these kinds of knowledgeable

    things...Really it was an awesome article...very interesting to read..please sharing this information......I think your

    suggestion would be helpful for me. I will let you know if its work for me too. Thanks and keep post such an informative

    blogs.
    Askmetraveller

    ReplyDelete

  51. Thank You for nice article. This is very helpful for me. I will learning a lot from you and your website, it is so inspiring!!!

    Best regards from India

    View My Free HEX to RGBA Tool and give me some feedback please.

    ReplyDelete
  52. Hello everyone..Welcome to my free masterclass strategy where i teach experience and inexperience traders the secret behind a successful trade.And how to be profitable in trading I will also teach you how to make a profit of $12,000 USD weekly and how to get back all your lost funds feel free to email me on(brucedavid004@gmail.com) or whataspp number is +22999290178

    ReplyDelete
  53. Business Analytics or Data Analytics or data science training in hyderabad is an extremely popular, in-demand profession which requires a professional to possess sound knowledge of analysing data in all dimensions and uncover the unseen truth coupled with logic and domain knowledge to impact the top-line (increase business) and bottom-line (increase revenue). ExcelR’s Data Science curriculum is meticulously designed and delivered matching the industry needs and considered to be the best in the industry.

    ReplyDelete
  54. BRO THANKS FOR THIS AWESOME POST, I REALLY FOUND THE ARTICLE WHAT I AM SEARCHING FOR, YOU ARE PROVIDING GREAT KNOWLEDGE THROUGH YOUR WEBSITE, ALSO YOU CAN READ MY ARTICLE AS WELL NEW WHATSAPP GROUP LINKS

    ReplyDelete
  55. Anushka Sen:- She is an actress from India. she works on many roles in his tiny age. The main role of his carrier was Balveer as Mehar. Peoples calls him The purple star of India. His age in this time for about 17 years and she gets about three big roles in his acting carrier. And now she is working on Manikarnika(Jhansi ki Rani).

    Anushka Sen

    ReplyDelete
  56. Hindisales provide you most productive Offers notification for you. If you Want to buy any products for you. Just check offers on that products in hindisales and check it out from here
    Hot offers on Amazon]

    ReplyDelete
  57. IIT JEE Coaching in Patna | IIT JEE Institute in Patna | NEET Coaching in Patna | Medical Coaching in Patna | JEE Mains, JEE Advance Coaching in Patna | Europa Classes

    JEE Mains, JEE Advance Coaching in Patna

    ReplyDelete
  58. This is an great post. Thanks for the hard work.
    Mouni Roy

    ReplyDelete
  59. I really liked and I got some innovative ideas for improving my thoughts from well defined content. So thanks for information how to change gmail password on iphone 6

    ReplyDelete
  60. I really liked and I got some innovative ideas for improving my thoughts from well defined content. So thanks for information how to change gmail password on iphone 6

    ReplyDelete
  61. Business Analytics or data science training in hyderabad is an extremely popular, in-demand profession which requires a professional to possess sound knowledge of analysing data in all dimensions and uncover the unseen truth coupled with logic and domain knowledge to impact the top-line (increase business) and bottom-line

    ReplyDelete
  62. Interestep post ! Keep it up
    https://www.healthbuks.com/

    ReplyDelete
  63. Interestep post ! Keep it up
    https://www.healthbuks.com/

    ReplyDelete
  64. vodafone customer care number On the off chance that you have any sort of issues, the worry, you can mail them specifically. Here is an Ola Cab Email Id For Complaint security@olacabs.com. You can likewise give the Feedback, recommendation. Clients can likewise get data about Ola cabs through media@olacabs.com. https://www.vodafone-customer-care-number.in/gujarat/

    ReplyDelete
  65. nice blog
    get best placement at VSIPL

    get digital marketing and web development service
    seo network point

    ReplyDelete
  66. We Innovate IT Solutions by offering end-to-end solutions for all of your IT challenges. Best IT Consulting Company In USA With one call or click, learn how we can help you with IT Consulting, IT Recruiting, Software Developers, Data Management and Mobile App Development. Regulus Technologies has been the trusted source for IT services to some of the most recognized companies in the North America. Learn how we can help you Innovate IT Solutions!

    ReplyDelete
  67. well informative....
    https://interresult.info/final-result/
    https://interresult.info/bise-lahore/
    https://interresult.info/bise-multan/
    https://interresult.info/bise-sahiwal/
    https://interresult.info/bise-rawalpindi/
    https://interresult.info/bise-sarghoda/
    https://interresult.info/bise-dg-khan/

    ReplyDelete
  68. Nice blog..! I really loved reading through this article. Thanks for sharing such a amazing post with us and keep blogging...Well written article
    salesforce Training in Bangalore
    uipath Training in Bangalore
    blueprism Training in Bangalore

    ReplyDelete
  69. your web site today and found it very interesting and well done. I can tell you have put a lot of work into it.
    Thank you for the listing on your web page. You have a good looking web site
    Your site is exactly what I have looking for!! Keep up with the good work.

    PS4 External Hard Drive – Top Product Of 2019

    ReplyDelete
  70. your web site today and found it very interesting and well done. I can tell you have put a lot of work into it.
    Thank you for the listing on your web page. You have a good looking web site
    Your site is exactly what I have looking for!! Keep up with the good work.

    PS4 External Hard Drive – Top Product Of 2019

    ReplyDelete
  71. good post its very useful
    https://socialprachar.com/artificial-intelligence-training-in-bengaluru/

    ReplyDelete
  72. helpful post thank you
    https://socialprachar.com/artificial-intelligence-training-in-bengaluru/

    ReplyDelete
  73. So today I thought why should you make people aware of all things about Moviescounter Bollywood, which makes it particularly dangerous as well.

    ReplyDelete
  74. This comment has been removed by the author.

    ReplyDelete
  75. I am so happy to read this. This is the type of manual that needs to be given and not the random misinformation that’s at the other blogs. Appreciate your sharing this best doc.http://www.pialaeropa2016.web.id

    ReplyDelete
  76. The article posted was very informative and useful
    thanks for sharing.
    clash of clans mod apk

    ReplyDelete
  77. Thank You So much for sharing informtion on your website.Your website is very informative to people.
    Garena Free Fire Download

    ReplyDelete
  78. A lot of blogs I see these days don't really provide anything that I'm interested in, but I'm most definately interested in this one.SBOBET88 INDONESIA

    ReplyDelete
  79. Technical Bagle a best resource to get all kinds of Knowledge about Wordpress, Blogging, SEO, Social Media, YouTube and Make Money Online.

    ReplyDelete
  80. Thnks For thsi Knowlage information Hey if you want tap tap apk then visit my blog for tap tap apk Tap tap Apk

    ReplyDelete
  81. Thnks For thsi Knowlage information Hey if you wantPof Dating app so visit my blog for pof dating mod apk Pof dating mod apk

    ReplyDelete
  82. If you want download Background Png Free Visit My Site
    yourpngcom

    ReplyDelete
  83. If you want download Background Png Free Visit My Site
    yourpngcom

    ReplyDelete
  84. Hey very nice blog!! Man... Excellent.. Amazing.. I will bookmark your site and take the feeds also…I’m happy to find a lot of useful info here in the post, we need work out more strategies in this regard, thanks for sharing. . . . . . Coupan Baba

    ReplyDelete
  85. I haven’t any word to appreciate this post.....Really i am impressed from this post....the person who create this post it was a great human..thanks for shared this with us. Buy Old Gmail Accounts

    ReplyDelete
  86. Many thanks for sharing this very good article. s128 Very interesting ideas!

    ReplyDelete
  87. Thanks For sharing a nice post about python Training Course.It is very helpful and python useful for us.python training in bangalore

    ReplyDelete
  88. shit not again. sheck my photos bit.ly/32c98po

    ReplyDelete
  89. I really enjoy reading this article.Hope that you would do great in upcoming time.A perfect post.Thanks for microsoft azure sharing.microsoft azure training in bangalore

    ReplyDelete
  90. Very useful and information content has been shared out here, Thanks for sharing it.python training in bangalore

    ReplyDelete
  91. Very useful and information content has been shared out here, Thanks for sharing it.python training in bangalore

    ReplyDelete
  92. Very useful and information content has been shared out here, Thanks for sharing it.python training in bangalore

    ReplyDelete
  93. Very useful and information content has been shared out here, Thanks for sharing it.python training in bangalore

    ReplyDelete
  94. nice article bro, thanks for sharing better informaton. keep doing the great work bro. thanks again for this article. tamil movies

    ReplyDelete
  95. Thanks for the nice blog. It was very useful for me. I'm happy I found this blog. Thank you for sharing with us,I too always learn something new from your post. Buy PVA Gmail Accounts

    ReplyDelete
  96. If you have deep concerns about site performance and its speed, Liquid Web offers you reliable and flexible Black Friday Dedicated Server Deals and services. Liquid Web is equipped with high-end redundancy power and network systems which ensure that your business is always scalable.

    ReplyDelete
  97. your website is very good website thank for share this website 안전놀이터

    ReplyDelete
  98. This comment has been removed by the author.

    ReplyDelete
  99. http://roy-castillo.blogspot.com/2013/10/google-mail-hacking-stored-xss-in-gmail_11.html

    ReplyDelete
  100. This post is really nice and informative. The explanation given is really comprehensive and informative . Thanks for sharing such a great information..Its really nice and informative . Hope more artcles from you. I want to share about the best learn java with free bundle videos provided and java training .

    ReplyDelete
  101. ThankS For Sharing For This Knowlage if you want Download cb background Visit This Post cb background

    ReplyDelete
  102. Thanks for one marvelous posting! I enjoyed reading it; you are a great author. I will make sure to bookmark your blog and may come back someday. I want to encourage that you continue your great posts.

    sap hybris training in bangalore

    sap scm training in bangalore

    sap pm training in bangalore

    sap crm training in bangalore

    sap ewm training in bangalore

    ReplyDelete
  103. Thanks for every other magnificent post. Where else may anybody get that kind of information in such a perfect method of
    writing? I have a presentation subsequent week, and I’m at the search for such information.

    Visit Giant Brand Solutions
    wordpress bundle
    wordpress themes and plugins
    premium wordpress themes and plugins
    wp starter pack
    wordpress theme update
    wordpress update plugins
    wordpress website themes
    worpdress theme sites
    wordpressbundle
    wpstarterpack

    ReplyDelete