Back to directory
WRITEUP #2652

Abusing Facebook’s feature for a permanent account confusion(logic vulnerability)

Logic Bug2FA / MFA bypassDoSLogic flaw
byLiv
Program
Meta / Facebook
Published
May 31, 2022
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://medium.com/@terminatorLM/abusing-facebooks-feature-for-a-permanent-account-confusion-logic-vulnerability-d7f5160f373a
▸ RELATED WRITEUPS
Logic Flaw: I Can Block You from Accessing Your Own Account
Logic BugLogic flaw
“Like” Bypass on Customer Reviews — €500 bounty
Logic BugLogic flaw
When Certificates Fail: A Story of Bypassed MFA in Remote Access
Other2FA / MFA bypass
Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center
Auth Bypass2FA / MFA bypass
$1600 Bounty on a Main Domain
ReconSession fixation

Built with ❤️ by Shubham Rawat