Write-ups

Check The Published Writeups

Reset
WDBTitleTagsProgramsAuthorsTypePublicationAdded
5188How I Could Compromise 4% (Locked) Instagram Accounts IDOR DoS Authorization flaw Meta / Facebook Arne Swinnen (@ArneSwinnen) Bug Bounty2016-03-272023-06-13
5170InstaBrute: Two Ways to Brute-force Instagram Account Credentials Bruteforce Username enumeration Meta / Facebook Arne Swinnen (@ArneSwinnen) Bug Bounty2016-05-192023-06-13
5160How I Could Steal Money from Instagram, Google and Microsoft Logic flaw Google Microsoft Meta / Facebook Arne Swinnen (@ArneSwinnen) Bug Bounty2016-07-152023-06-13
5120Authentication bypass on Ubiquity’s Single Sign-On via subdomain takeover Subdomain takeover Authentication bypass Ubiquity Networks Arne Swinnen (@ArneSwinnen) Bug Bounty2016-11-292023-06-13
5055Authentication bypass on Airbnb via OAuth tokens theft OAuth Login CSRF Open redirect Authentication bypass Airbnb Arne Swinnen (@ArneSwinnen) Bug Bounty2017-06-222023-06-13
5051Authentication bypass on Uber’s Single Sign-On via subdomain takeover Subdomain takeover Authentication bypass Uber Arne Swinnen (@ArneSwinnen) Bug Bounty2017-06-252023-06-13