Submissions by phwd

Grab Facebook’s CSRF Token Through Their “Save to Facebook” Chrome Extension

Remote Code Execution on a Facebook server

Facebook “Client-Side” CSRF

Facebook GraphQL CSRF

Data Analytics, App Developers, and Facebook’s Role in Data Misuse

Stored XSS on Facebook

Facebook Bug Bounty 2017 Highlights: $880,000 Paid to Researchers

Posting GIFs as anyone on Facebook

De-anonymizing Facebook Ads

Zomato Security Notice Update

How I got your phone number through Facebook

Remote Code Execution on Facebook via ImageTragick ($40,000 Bounty)

GitHub Enterprise SQL Injection

Nintendo Launches Vulnerability Rewards Program for Nintendo 3DS

Facebook Bug Bounty: $5M Paid in 5 Years

What it's like on your first day when you get a job at Facebook

Marauder’s Map: Sniffing MAC addresses in the MIT wireless network [pdf]

21-Year-Old Makes $250,000 A Year From Bug Bounties

Stealing Facebook Access_tokens via Internet of Things

I Get Paid to Hack Pornhub

Someone Can Change Your Facebook Credentials by Just Sending in a Fake Passport

Facebook Bug Bounties – Unofficial Treasure Map

How I Could Have Seen All Mark Zuckerberg Facebook Messenger Purchases

InstaBrute: Two Ways to Brute-Force Instagram Account Credentials

How I Hacked Facebook and Found Someone's Backdoor Script