Write-ups
Check The Published Writeups
| WDB | Title | Tags | Programs | Authors | Type | Publication | Added |
|---|---|---|---|---|---|---|---|
| 4424 | How I was able to generate Access Tokens for any Facebook user. | IDOR Information disclosure | Meta / Facebook | Youssef Sammouda (@samm0uda) | Bug Bounty | 2018-12-11 | 2023-06-13 |
| 3806 | Reflected XSS in graph.facebook.com leads to account takeover in IE/Edge | Reflected XSS Account takeover | Meta / Facebook | Youssef Sammouda (@samm0uda) | Bug Bounty | 2019-11-27 | 2023-06-13 |
| 2592 | Facebook account takeover due to unsafe redirects after the OAuth flow | OAuth Open redirect Account takeover | Meta / Facebook | Youssef Sammouda (@samm0uda) | Bug Bounty | 2021-04-30 | 2023-06-13 |