writeups.xyz writeups.xyz / Shubham Bhamare (@Theshubh77)

Title Vulnerabilities Programs Authors
[WRITE-UP] Irremovable comments on the FB Lite app | A story of a simple FB Lite bug that I found just by observation (Bounty: 500 USD)
Missing rate-limiting. How I was able to add any unowned phone number to my Facebook account? (Bounty: 5000 USD)
Bypassing 2-Factor Authentication for Facebook Business Manager (Bounty: 1000 USD)
Irremovable Facebook group album photos and entire album under certain circumstances (Bounty: 1000 USD)
Patch. Bypass. Repeat: Story of a FaceBook Page Admin Disclosure bug worth $5000
Facebook page admin disclosure by "Create doc" button (Bounty: 5000 USD)
Facebook page admin disclosure by "Message Seller" button (Bounty: 1500 USD)