Category: zero-day

How I hacked Facebook: Part Two

Description: This is the second and final part of How I hacked Facebook you can find part one here [ How I hacked Facebook: part one ]. I highly recommend reading part one to understand the storyline. In part one I have found Account takeover by an unsecured API which allowed me to change the password…


How I hacked Facebook: Part One

We’ve been in this pandemic since  March and once the pandemic started I was having plenty of free time, And I need to use that time wisely, So I’ve decided to take the OSWE certification and I finished the exam on 8 of August, after that, I took a couple of weeks to recover from…


How did i find information Disclosure on Facebook-Writeup

Hello everyone, This is my first writeup about the bug that I found on Facebook back on 3/1/2018.   So, I wasn’t interested in Facebook bug bounty program for a while since I was so busy with my highschool exams back in 2018, I just wanted to collect some information about some users, and to…


Webalizer Reader – Exoploit

Today’s release is another simple code written with PHP, We can consider this as an idea to read the Webalizer access log and FTP logs for every user on a Cpanel Linux server that uses Webalizer as a monitoring-logging method…