Two Factor Authentication Bypass On Facebook

Summary: I discovered the lack of rate-limiting issue in instagram which could have allowed an attacker to bypass two factor authentication on facebook by confirming the targeted user’s already-confirmed facebook mobile number using the Meta Accounts…

Facebook email disclosure and account takeover

I have a preference for apps over web when it comes to hunting, so in January I…

Access control worth $2000 (everyone missed this IDOR+Access control between two admins.)

Hacking Dutch Government For a lousy T-shirt

Good day, everyone! Greetings, As this is my first post on Pentester Nepal, I’d…

How I was able to reveal page admin of almost any page on Facebook

Facebook Email/phone disclosure using Binary search

OWASP KTM 0x03 CTF writeup

Hi there! I hope you're all having a good time. Don’t forget to stay hydrated ❤ Today’s writeup is about how we…

A tale of zero click account takeover

Hello there!
I hope everything is going well with you; today I’m back with the story of my…

Open Redirect: Just a redirection?

Greetings, everyone! i’m back with a new article after a long absence. In this writeup, i will…