Back to directory

WRITEUP #5466

Disclosure of Pending Roles for any Facebook Page

IDOR

by@itsavinash_(Avinash Kumar)

Bounty

4,000

Program

Meta / Facebook

Published

Mar 16, 2019

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://medium.com/@avinash_/disclosure-of-pending-roles-for-any-facebook-page-ab6e4e219f8e

▸ RELATED WRITEUPS

Zomatoooo! IDOR in Saved Payments

How I got my first $13500 bounty through Parameter Polluting (HPP)

The Butterfly Effect: Turning Overlooked - Misconfigurations into Zero Click Account Takeover

A Creative Way To Get Someones YouTube Videos Deleted + A Copyright Strike Against Their YouTube Channel

IDORBroken Access Control

Bypassing ACLs – IDOR exploitation via HPP

IDORHTTP parameter pollution

Built with ❤️ by Shubham Rawat