facebook-bug-bounties icon indicating copy to clipboard operation
facebook-bug-bounties copied to clipboard

Hacking Facebook for fun and profit: It’s not that hard, apparently (exclusive)

  • Group Members Disclosure

    • https://bugreader.com/onehackzero@determine-members-in-a-closed-facebook-group-83
    • https://philippeharewood.com/determine-members-in-a-closed-facebook-group/
    • https://philippeharewood.com/view-former-members-of-a-facebook-group/
  • Page Admin Disclosure

    • https://bugreader.com/jieryn@de-anonymizing-page-admin-that-created-the-event-78
    • https://bugreader.com/semicolonlb@disclose-page-admins-for-any-facebook-page-52
    • https://khalil-shreateh.com/khalil.shtml/23-khalil/290-facebook-exploit-jan-2015-page-admin-disclosure.html
    • https://medium.com/@avinash_/disclosure-of-pending-roles-for-any-facebook-page-ab6e4e219f8e
    • https://medium.com/@tnirmalz/facebook-bugbounty-disclosing-page-members-1178595cc520
    • https://medium.com/bugbountywriteup/disclosure-of-facebook-page-admin-due-to-insecure-tagging-behavior-24ff09de5c29
    • https://medium.com/bugbountywriteup/page-admin-disclosure-facebook-bug-bounty-2019-ee9920e768eb
    • https://philippeharewood.com/disclose-facebook-page-admins-in-3d/
    • https://philippeharewood.com/disclose-page-admins-via-facebook-camera-effects/
    • https://philippeharewood.com/disclose-page-admins-via-gaming-dashboard-bans/
    • https://philippeharewood.com/disclose-page-admins-via-job-source-recruiter-requests/
    • https://philippeharewood.com/disclose-page-admins-via-our-story-feature/
    • https://philippeharewood.com/disclose-page-admins-via-watch-parties-in-a-facebook-group/
    • https://philippeharewood.com/disclose-users-with-roles-on-facebook-pages/
    • https://pwnsec.ninja/2019/06/28/facebook-bugbounty-short-story-on-page-admin-disclosure/
    • https://www.dropbox.com/s/w5xcn60oiblxeqs/Disclose_admins_page.pdf
    • https://www.youtube.com/watch?v=EXNchVewMF0x
    • https://www.youtube.com/watch?v=gftIqECzOs4
    • https://www.youtube.com/watch?v=OwaH71q-5iA
    • https://ysamm.com/?p=60
  • Path Disclosure

    • https://ysamm.com/?p=158
    • https://philippeharewood.com/path-disclosure-in-facebook-copyright-dashboard/
    • https://philippeharewood.com/path-disclosure-in-facebook-graphql-api/
    • https://philippeharewood.com/path-disclosure-in-instagram-ads-graphql/
  • User Deanonymization

    • https://bugreader.com/jieryn@de-anonymizing-facebook-employee-who-created-crisis-fundraiser-67
    • https://philippeharewood.com/facebook-employees-leaked-from-disaster-map/
    • https://wongmjane.com/post/reveal-fb-employee-behind-funfact/