HNHacker News
TopNewBestAskShowJobs

phwd

2,489 karma · joined September 9, 2010

submissionscomments

$250K+ XSS in Meta Conversion API Leading to Zero-Click Account Takeover

ysamm.com·1 pts·phwd·
0

Instagram account takeover via React debug.keystore

vulnano.com·2 pts·phwd·
0

HackerOne takes $25,000 from Belarusian hacker in response to sanctions

twitter.com·15 pts·phwd·
10

Facebook SSRF

philippeharewood.com·2 pts·phwd·
0

Coding Exercises Exposed at Facebookrecruiting.com

philippeharewood.com·1 pts·phwd·
0

Bulletin.com Email Address Leak

philippeharewood.com·1 pts·phwd·
0

Facebook’s /intern/testdata tool: default password n0t3st

philippeharewood.com·1 pts·phwd·
0

Download Facebook internal mobile builds

philippeharewood.com·1 pts·phwd·
0

Leaked Credentials gives access to internalfb.com

philippeharewood.com·3 pts·phwd·
0

Instagram Terms of Use (2018 vs. 2020)

github.com·3 pts·phwd·
0

Facebook Remote Code Execution via CDN ($80k Bounty)

facebook.com·1 pts·phwd·
0

Facebook DOM Based XSS Using PostMessage

ysamm.com·1 pts·phwd·
0

$25K Instagram Almost XSS Filter Link

medium.com·3 pts·phwd·
0

I Hacked Facebook Again Unauthenticated RCE on MobileIron MDM

blog.orange.tw·2 pts·phwd·
0

Subscribe to typing notifications for any Instagram user

philippeharewood.com·1 pts·phwd·
0

HTTP Request Smuggling: How Did Tons of People Like Me on Tinder?

mustafairan.wordpress.com·3 pts·phwd·
0

Why Do Many Russians Prefer VK to Facebook?

quora.com·2 pts·phwd·
0

Hack any Instagram account ($30k Bug bounty)

thezerohack.com·5 pts·phwd·
0

Denial of service in Facebook Fizz due to integer overflow (CVE-2019-3560)

lgtm.com·3 pts·phwd·
0

Changing email address on Twitter for Android unsets “Protect your Tweets”

hackerone.com·9 pts·phwd·
1

Facebook Business Takeover ($27,500 bounty)

philippeharewood.com·3 pts·phwd·
0

View Facebook friends for any user

philippeharewood.com·2 pts·phwd·
0

Facebook Broadens Bug Bounty to Help Fix Third-Party Apps

wired.com·2 pts·phwd·
0

Breaking the Facebook for Android Application

ash-king.co.uk·1 pts·phwd·
0

View Private Instagram Photos

philippeharewood.com·2 pts·phwd·
0

Grab Facebook’s CSRF Token Through Their “Save to Facebook” Chrome Extension

ngyikp.com·2 pts·phwd·
0

Remote Code Execution on a Facebook server

blog.scrt.ch·877 pts·phwd·
192

Facebook “Client-Side” CSRF

facebook.com·2 pts·phwd·
0

Facebook GraphQL CSRF

philippeharewood.com·1 pts·phwd·
0

Data Analytics, App Developers, and Facebook’s Role in Data Misuse

law.stanford.edu·2 pts·phwd·
0
Page 1 of 7Next →