Submissions by phwd

Instagram account takeover via React debug.keystore

HackerOne takes $25,000 from Belarusian hacker in response to sanctions

Facebook SSRF

Coding Exercises Exposed at Facebookrecruiting.com

Bulletin.com Email Address Leak

Facebook’s /intern/testdata tool: default password n0t3st

Download Facebook internal mobile builds

Leaked Credentials gives access to internalfb.com

Instagram Terms of Use (2018 vs. 2020)

Facebook Remote Code Execution via CDN ($80k Bounty)

Facebook DOM Based XSS Using PostMessage

$25K Instagram Almost XSS Filter Link

I Hacked Facebook Again Unauthenticated RCE on MobileIron MDM

Subscribe to typing notifications for any Instagram user

HTTP Request Smuggling: How Did Tons of People Like Me on Tinder?

Why Do Many Russians Prefer VK to Facebook?

Hack any Instagram account ($30k Bug bounty)

Denial of service in Facebook Fizz due to integer overflow (CVE-2019-3560)

Changing email address on Twitter for Android unsets “Protect your Tweets”

Facebook Business Takeover ($27,500 bounty)

View Facebook friends for any user

Facebook Broadens Bug Bounty to Help Fix Third-Party Apps

Breaking the Facebook for Android Application

View Private Instagram Photos