HN Explorer

franjkovic

↗ HN profile [ 44.3 ms ] full profile
Karma
1,114
Created
October 20, 2013 (12y ago)
Submissions
0
[ my public key: https://keybase.io/josipfranjkovic; my proof: https://keybase.io/josipfranjkovic/sigs/4EYnl7a6Vko4DGKQFypdzXwAxT-YnFN8DEc5X34RttQ ]

My security blog: https://www.josipfranjkovic.com

  1. Getting any Facebook user's friend list and partial payment card details (josipfranjkovic.com)
    416 points 94
  2. Taking over Facebook accounts using Free Basics partner portal (josipfranjkovic.com)
    1 points 0
  3. Hacking Facebook accounts using CSRF in Oculus-Facebook integration (josipfranjkovic.com)
    5 points 0
  4. Stealing Facebook access_tokens using CSRF in device login flow (josipfranjkovic.com)
    127 points 88
  5. The easiest bug bounties I have won (josipfranjkovic.blogspot.com)
    145 points 28
  6. Race conditions on Facebook, DigitalOcean and others (fixed) (josipfranjkovic.blogspot.com)
    294 points 89
  7. Reading local files from Facebook's server (fixed) (josipfranjkovic.blogspot.com)
    44 points 20
  8. Step-by-step: exploiting SQL injection(s) in Oculus' website (josipfranjkovic.blogspot.com)
    1 points 0
  9. Facebook bug bounty: secondary damage bugs and fairness (josipfranjkovic.blogspot.com)
    60 points 10
  10. Facebook CSRF leading to full account takeover (fixed) (pyx.io)
    222 points 53