This post is about an bug that I found on Facebook which used to delete any publicly visible photos by editing the series feature
Already a image removal vulnerability was found in same series feature by another researcher Pouya Darabi . this writeup is a bypassing the fix in different scenario.
The series has a option to set photos in Poster Art (Mandatory) and Cover Image as (optional)
This post is about an bug that I found on Facebook which used to disclose the page role person’s User ID when posted a video on comment section of the page.
Recently I read a page admin disclosure writeup that was found by Kassem Bazzoun in https://bugreader.com/kbazzoun@221 .That bug Reveal the page admin that uploaded a video on the page feeds and After reading the Write Up then I decided to try if I can bypass the Fix with different scenarios.
The Question Raised in my mind that how Facebook server will validate the Video ID if it is in…
This post is about an bug that i found on Facebook which used to Disable any new unconfirmed account in Facebook by using IP Rotation brute force attack. this post is bypass of this write-up → pagefault.me
In Facebook if a user Sign-up a new account. 5 digit Verification code will be send to that corresponding email. but for security reasons victim has a option to disable that Verification code.because attacker can also try to create a new account on behalf victims email.
But the Rate limit was implemented in this Endpoint. after some certain attempts of…
This post is about an bug that i found on Facebook which used to verify any new Gmail and G-Suite account with minimal Victim’s interaction.
When a user create a new Facebook account with Gmail they can confirm the account with two methods.
This post is about an bug that i found on Facebook Oculus Application OAuth which could have been used to bypass nonce and steal response_code
Recently Facebook made a Oauth login Feature for Oculus. that means the user can directly login to oculus using facebook account.but there is a nonce parameter in the URL. that i never seen in any other Oauth flow. so i started to dig deeper on it.
OAuth Authorisation URL for Facebook Oculus :
This post is about an bug that i found on Facebook MailChimp Application OAuth 2.0 which could have been used to steal Access_token. and The Source idea for this bug i got from prakharprasad blog post.
Facebook Ads Manager can import MailChimp customer data by using OAuth 2.0, to fetch data to Facebook Ads Manager.The application is a part of MailChimp website and it was developed by Facebook Developers. once the MailChimp user authorises the application, it will send MailChimp data to Facebook Ads Manager.
OAuth Authorisation URL for Facebook Custom Audiences :
This Bug is almost similar to my Previous finding.But with different reproduction method.
When my Previous Bug was fixed by Facebook asked me to confirm . so i done all the steps as it is. and in Getting back to Facebook the code parameter was removed.
so i confirmed them the bug has been fixed and got the bounty. after a week i normally checked my testing email i spotted the another automatic mail from Facebook that to Reminder: Confirm your Facebook account for which i created to check the fix for my previous bug.
When i checked the link…
This post is about an bug that i found on Facebook which could have been used to confirm any new Email/Mobile Number. The Source idea for this bug i got from josipfranjkovic race condition blog post.
When i was testing in account registration and confirmation flow. i tried to brute force the 5digit OTP code. but after several attempts server blocked me.so i tried to test with different scenario like in the above blog.
i started to change randomly my email and the testing email address. and also tried with different browser when i checked my email noticed that Getting…
I Recently Found Security Vulnerability In Facebook Which Allows The Admin Of Apps To Add Any User’s Into The Roles Without Their Permissions
There Are Several Roles In Facebook Apps [ Admins,Developers,Testers,Insight_Users ] That An Admin Can Add The User’s In It With Their Permissions.Each Roles Has Different Type Of Access Click To View.If Admin Add Any User in Roles It Will Send An Invite To The Victim For Confirmation.
Web Security Researcher