Write-ups
Check The Published Writeups
WDB | Title | Tags | Programs | Authors | Type | Publication | Added |
---|---|---|---|---|---|---|---|
4473 | Creating unauthorized comments on Facebook Live Stream! | Privilege escalation Authorization flaw | Meta / Facebook | Binit Ghimire (@WHOISbinit) | Bug Bounty | 2018-11-16 | 2023-06-13 |
3699 | Adding anyone including non-friend and blocked people as co-host in personal event! | IDOR | Meta / Facebook | Binit Ghimire (@WHOISbinit) | Bug Bounty | 2020-01-28 | 2023-06-13 |
2798 | Sub-domain Takeover on api.techprep.fb.com (AWS Elastic Beanstalk)! | Subdomain takeover | Meta / Facebook | Binit Ghimire (@WHOISbinit) | Bug Bounty | 2021-02-16 | 2023-06-13 |
2728 | Dangling DNS Records on surf-test.xwf.internet.org (Amazon EC2)! | Subdomain takeover Dangling DNS records | Meta / Facebook | Binit Ghimire (@WHOISbinit) | Bug Bounty | 2021-03-10 | 2023-06-13 |