phwd
- Karma
- 0
- Created
- ()
- Submissions
- 0
- Instagram account takeover via React debug.keystore (vulnano.com)
- Facebook SSRF (philippeharewood.com)
- Coding Exercises Exposed at Facebookrecruiting.com (philippeharewood.com)
- Bulletin.com Email Address Leak (philippeharewood.com)
- Facebook’s /intern/testdata tool: default password n0t3st (philippeharewood.com)
- Download Facebook internal mobile builds (philippeharewood.com)
- Leaked Credentials gives access to internalfb.com (philippeharewood.com)
- Instagram Terms of Use (2018 vs. 2020) (github.com)
- Facebook Remote Code Execution via CDN ($80k Bounty) (facebook.com)
- Facebook DOM Based XSS Using PostMessage (ysamm.com)
- $25K Instagram Almost XSS Filter Link (medium.com)
- I Hacked Facebook Again Unauthenticated RCE on MobileIron MDM (blog.orange.tw)
- Subscribe to typing notifications for any Instagram user (philippeharewood.com)
- HTTP Request Smuggling: How Did Tons of People Like Me on Tinder? (mustafairan.wordpress.com)
- Why Do Many Russians Prefer VK to Facebook? (quora.com)
- Hack any Instagram account ($30k Bug bounty) (thezerohack.com)
- Facebook Business Takeover ($27,500 bounty) (philippeharewood.com)
- View Facebook friends for any user (philippeharewood.com)
- Breaking the Facebook for Android Application (ash-king.co.uk)
- View Private Instagram Photos (philippeharewood.com)