phwd

8 ms·

1.
$250K+ XSS in Meta Conversion API Leading to Zero-Click Account Takeover(ysamm.com)
1 points by phwd 8mo ago|0 comments
2.
Instagram account takeover via React debug.keystore(vulnano.com)
2 points by phwd 4y ago|0 comments
3.
HackerOne takes $25,000 from Belarusian hacker in response to sanctions(twitter.com)
15 points by phwd 5y ago|10 comments
4.
by phwd 5y ago
reposting this from reddit (tried to edit the profanities) as I'm certain this is what happened here. Essentially it's social engineering via a face scan app. You can see an example of a possible scammer here https://w
5.
Facebook SSRF(philippeharewood.com)
2 points by phwd 5y ago|0 comments
6.
Coding Exercises Exposed at Facebookrecruiting.com(philippeharewood.com)
1 points by phwd 5y ago|0 comments
7.
Bulletin.com Email Address Leak(philippeharewood.com)
1 points by phwd 5y ago|0 comments
8.
Facebook’s /intern/testdata tool: default password n0t3st(philippeharewood.com)
1 points by phwd 5y ago|0 comments
9.
Download Facebook internal mobile builds(philippeharewood.com)
1 points by phwd 5y ago|0 comments
10.
by phwd 5y ago
Good work. The actual schema graphql?q=schema() (not the generated one) is in fact confidential. They definitely do not want their real schema public.
11.
Leaked Credentials gives access to internalfb.com(philippeharewood.com)
3 points by phwd 6y ago|0 comments
12.
Instagram Terms of Use (2018 vs. 2020)(github.com)
3 points by phwd 6y ago|0 comments
13.
Facebook Remote Code Execution via CDN ($80k Bounty)(facebook.com)
1 points by phwd 6y ago|0 comments
14.
Facebook DOM Based XSS Using PostMessage(ysamm.com)
1 points by phwd 6y ago|0 comments
15.
$25K Instagram Almost XSS Filter Link(medium.com)
3 points by phwd 6y ago|0 comments
16.
I Hacked Facebook Again Unauthenticated RCE on MobileIron MDM(blog.orange.tw)
2 points by phwd 6y ago|0 comments
17.
by phwd 6y ago
At the risk of pointing to the documentation, graph-facebook-com/app/activities is an endpoint used by 3rd party developers working with Facebook SDKs to send app analytic data for insights. https://developers.facebook.
18.
Subscribe to typing notifications for any Instagram user(philippeharewood.com)
1 points by phwd 7y ago|0 comments
19.
HTTP Request Smuggling: How Did Tons of People Like Me on Tinder?(mustafairan.wordpress.com)
3 points by phwd 7y ago|0 comments
20.
Why Do Many Russians Prefer VK to Facebook?(quora.com)
2 points by phwd 7y ago|0 comments
21.
Hack any Instagram account ($30k Bug bounty)(thezerohack.com)
5 points by phwd 7y ago|0 comments
22.
by phwd 7y ago
This title provided by the OP is intentionally misleading and taken from a quote by Roger McNamee. There are other platforms out there (liveleak and worldstarhiphop for example) that it only takes a minute or less to reach extreme content.
23.
Denial of service in Facebook Fizz due to integer overflow (CVE-2019-3560)(lgtm.com)
3 points by phwd 8y ago|0 comments
24.
Changing email address on Twitter for Android unsets “Protect your Tweets”(hackerone.com)
9 points by phwd 8y ago|1 comments
25.
Facebook Business Takeover ($27,500 bounty)(philippeharewood.com)
3 points by phwd 8y ago|0 comments
26.
View Facebook friends for any user(philippeharewood.com)
2 points by phwd 8y ago|0 comments
27.
by phwd 8y ago
He cancelled his plans to hack Mark Zuckerberg page, instead he filed a report to facebook.com/whitehat https://twitter.com/phwd/status/1045674238751969280 https://www.facebook.com/robots.tx&#
28.
Facebook Broadens Bug Bounty to Help Fix Third-Party Apps(wired.com)
2 points by phwd 8y ago|0 comments
29.
Breaking the Facebook for Android Application(ash-king.co.uk)
1 points by phwd 8y ago|0 comments
30.
View Private Instagram Photos(philippeharewood.com)
2 points by phwd 8y ago|0 comments

More ›