phwd

Recent Submissions

1. 1. ▲ $250K+ XSS in Meta Conversion API Leading to Zero-Click Account Takeover (ysamm.com) 1 point · 2 months ago · 0 comments
2. 2. ▲ Instagram account takeover via React debug.keystore (vulnano.com) 2 points · 3 years ago · 0 comments
3. 3. ▲ HackerOne takes $25,000 from Belarusian hacker in response to sanctions (twitter.com) 15 points · 4 years ago · 10 comments
4. 4. ▲ Facebook SSRF (philippeharewood.com) 2 points · 4 years ago · 0 comments
5. 5. ▲ Coding Exercises Exposed at Facebookrecruiting.com (philippeharewood.com) 1 point · 4 years ago · 0 comments
6. 6. ▲ Bulletin.com Email Address Leak (philippeharewood.com) 1 point · 4 years ago · 0 comments
7. 7. ▲ Facebook’s /intern/testdata tool: default password n0t3st (philippeharewood.com) 1 point · 4 years ago · 0 comments
8. 8. ▲ Download Facebook internal mobile builds (philippeharewood.com) 1 point · 4 years ago · 0 comments
9. 9. ▲ Leaked Credentials gives access to internalfb.com (philippeharewood.com) 3 points · 5 years ago · 0 comments
10. 10. ▲ Instagram Terms of Use (2018 vs. 2020) (github.com) 3 points · 5 years ago · 0 comments