Skip to content

Youssef Sammouda

About
Blog

Universe-art-the-universe-22238785-1920-1200

Post navigation

Previous PostPrev Post Universe-art-the-universe-22238785-1920-1200

Summary

The goal of this blog is to share write-ups about bugs i have found in Facebook and reported to them under the Facebook bug bounty program.

Twitter
Github
LinkedIn

Search for:

Recent Posts

Account Takeover in Canvas Apps served in Comet due to failure in Cross-Window-Message Origin validation
DOM-XSS in Instant Games due to improper verification of supplied URLs
Account takeover of Facebook/Oculus accounts due to First-Party access_token stealing
Multiple bugs chained to takeover Facebook Accounts which uses Gmail.
More secure Facebook Canvas Part 2: More Account Takeovers

Twitter
Github
LinkedIn

Copyright © 2024 Youssef Sammouda | Signify by WEN Themes

Scroll Up