phwd | Dark Hacker News

user:	phwd
created:	September 9, 2010
karma:	2.5k

1.	$250K+ XSS in Meta Conversion API Leading to Zero-Click Account Takeover(ysamm.com) 1 points by phwd 127 days ago \| 0 comments
2.	Instagram account takeover via React debug.keystore(vulnano.com) 2 points by phwd 3 years ago \| 0 comments
3.	HackerOne takes $25,000 from Belarusian hacker in response to sanctions(twitter.com) 15 points by phwd 4 years ago \| 10 comments
4.	Facebook SSRF(philippeharewood.com) 2 points by phwd 4 years ago \| 0 comments
5.	Coding Exercises Exposed at Facebookrecruiting.com(philippeharewood.com) 1 points by phwd 4 years ago \| 0 comments
6.	Bulletin.com Email Address Leak(philippeharewood.com) 1 points by phwd 4 years ago \| 0 comments
7.	Facebook’s /intern/testdata tool: default password n0t3st(philippeharewood.com) 1 points by phwd 4 years ago \| 0 comments
8.	Download Facebook internal mobile builds(philippeharewood.com) 1 points by phwd 5 years ago \| 0 comments
9.	Leaked Credentials gives access to internalfb.com(philippeharewood.com) 3 points by phwd 5 years ago \| 0 comments
10.	Instagram Terms of Use (2018 vs. 2020)(github.com) 3 points by phwd 5 years ago \| 0 comments
11.	Facebook Remote Code Execution via CDN ($80k Bounty)(facebook.com) 1 points by phwd 5 years ago \| 0 comments
12.	Facebook DOM Based XSS Using PostMessage(ysamm.com) 1 points by phwd 5 years ago \| 0 comments
13.	$25K Instagram Almost XSS Filter Link(medium.com) 3 points by phwd 5 years ago \| 0 comments
14.	I Hacked Facebook Again Unauthenticated RCE on MobileIron MDM(blog.orange.tw) 2 points by phwd 5 years ago \| 0 comments
15.	5 years ago \| discuss
16.	Subscribe to typing notifications for any Instagram user(philippeharewood.com) 1 points by phwd 6 years ago \| 0 comments
17.	HTTP Request Smuggling: How Did Tons of People Like Me on Tinder?(mustafairan.wordpress.com) 3 points by phwd 6 years ago \| 0 comments
18.	Why Do Many Russians Prefer VK to Facebook?(quora.com) 2 points by phwd 6 years ago \| 0 comments
19.	Hack any Instagram account ($30k Bug bounty)(thezerohack.com) 5 points by phwd 6 years ago \| 0 comments
20.	Denial of service in Facebook Fizz due to integer overflow (CVE-2019-3560)(lgtm.com) 3 points by phwd 7 years ago \| 0 comments
21.	Changing email address on Twitter for Android unsets “Protect your Tweets”(hackerone.com) 9 points by phwd 7 years ago \| 1 comment
22.	Facebook Business Takeover ($27,500 bounty)(philippeharewood.com) 3 points by phwd 7 years ago \| 0 comments
23.	View Facebook friends for any user(philippeharewood.com) 2 points by phwd 7 years ago \| 0 comments
24.	Facebook Broadens Bug Bounty to Help Fix Third-Party Apps(wired.com) 2 points by phwd 7 years ago \| 0 comments
25.	Breaking the Facebook for Android Application(ash-king.co.uk) 1 points by phwd 7 years ago \| 0 comments