Back to directory

WRITEUP #3994

Access private information about SparkAR effect owners who has a publicly viewable portfolio

ReconBroken authorizationInformation disclosureGraphQL

by@samm0uda(Youssef Sammouda)

Bounty

1,500

Program

Meta / Facebook

Published

Feb 17, 2021

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://ysamm.com/?p=621

▸ RELATED WRITEUPS

How 1 Exposed Honeywell API Gave us Control Over an Internal Engineering System

ReconMissing authentication

P3 (Medium) : How I Gain Access To NASA's Internal Workspace?!

ReconInformation disclosure

How I Got Bugs From Google Dorks

ReconInformation disclosure

How I can easily get four P1 at NASA using Simple Google Dorking.

ReconInformation disclosure

$1600 Bounty on a Main Domain

ReconSession fixation

Built with ❤️ by Shubham Rawat