Getting any Facebook user's friend list and partial payment card detailsjosipfranjkovic.com·416 pts·franjkovic·91
Hacking Facebook accounts using CSRF in Oculus-Facebook integrationjosipfranjkovic.com·5 pts·franjkovic·0
Stealing Facebook access_tokens using CSRF in device login flowjosipfranjkovic.com·127 pts·franjkovic·82
Race conditions on Facebook, DigitalOcean and others (fixed)josipfranjkovic.blogspot.com·294 pts·franjkovic·88
Step-by-step: exploiting SQL injection(s) in Oculus' websitejosipfranjkovic.blogspot.com·1 pts·franjkovic·0
Facebook bug bounty: secondary damage bugs and fairnessjosipfranjkovic.blogspot.com·60 pts·franjkovic·10