Steam Profile "Exploit"?

[Bluscream]

https://www.reddit.com/r/Steam/comments/5skfg4/warning_regarding_a_steam_profile_related_exploit/

Does anyone have any infos about this? I would like to see some kind of PoC

Edit:

https://steamcommunity.com/?browsefilter=mostrecent&subsection=guides

 

[ehthe]

https://leakforums.net/post-23581552#23581552

Apparently it was do-able with some Steam showcase thingy, Valves supposedly disabled the specific showcase and you're safe to do whatever again.

source: some reddit fag

Doesn't too seem legit

IT IS STILL NOT FIXED
example profile from the video : https://steamcommunity.com/id/AkShaY_CraZzY/

 

[Kleberstoff]

It's fixed by now, check the profile of the guy that made the video.

 

[ehthe]

It's fixed by now, check the profile of the guy that made the video.

Indeed

 

[riko1337]

Its not fixed, it is still possible to catch the session id.

 

[Kieran]

Its not fixed, it is still possible to catch the session id.

Mind explaining how? Because this method definitely doesn't work anymore.

 

[CanadiansEh]

The method that went viral was fixed, Me and a few friends have found another method that allows us to currently do the same as what the current one does but we've yet to beta test the new method to the full extent so we don't have it's full capability's yet.

 

[Kieran]

The method that went viral was fixed, Me and a few friends have found another method that allows us to currently do the same as what the current one does but we've yet to beta test the new method to the full extent so we don't have it's full capability's yet.

Got some proof of concept for that?

 

[Derp]

https://www.reddit.com/r/Steam/comments/5smjle/an_xss_exploit_on_steam_profiles_has_been_fixed/

Edit (to add): http://securityaffairs.co/wordpress/56090/hacking/steam-fixing-xss.html

 

[Kieran]

Got some proof of concept for that?

Guess not lol

 

[CanadiansEh]

Guess not lol

They fixed Guide Exploit, Not the one we found, We're hoping on keeping it low profile for now till we can find a proper purpose for it.

 

[Kieran]

They fixed Guide Exploit, Not the one we found, We're hoping on keeping it low profile for now till we can find a proper purpose for it.

Proper purpose? You should make it HIGH profile so that it gets popular and valve fixes it :T

 

[CanadiansEh]

Proper purpose? You should make it HIGH profile so that it gets popular and valve fixes it :T

I've been with steam since 2003, basically when they were created, I don't wish release it or allow people to find out how to do it again since it allows for too much abuse.