Hello Google,

We are the owners of the website VRHACKS (http://vrhacks.wixsite.com/vr-hacks).
we have found a security bug in the google chrome. This bug is about the un-
detection of the phishing page which can be used to steal all credentials
information for any purpose like account details of any social accounts.

As far chrome always detect any phishing page or harmful website which is not
secure to access, but regardless we have found a vulnerability in the script
code which can be easily hosted on any web hosting website and through which the
credentials details can be stolen.

We have attached the files which can be hosted on hosting account and can be
used to steal credentials details. we have also attached the screen shot of the
the website which we have made for test. (http://exploitchecktest.comxa.com/)


We have not used this exploit for any other purpose and we wish that google
fixes this bug as soon as possible so that no other person or hacker can use it
for harmful purpose.


We are the students having interest in technology and other security researches.
we wish that you verify this bug and give us rewards under the google chrome
rewards programme.

Thanks,
VRHACKS



 

Deleted: index.php 6.4 KB

index.php 6.4 KB View Download

Deleted: fake.php 276 bytes

fake.php 276 bytes View Download

Deleted: Webpage Exploit.JPG 50.3 KB

	Webpage Exploit.JPG 50.3 KB View Download