Giwa Daoud

Ethical Hacker

[Giwa Daoud @GiwaDaoud]

This is how I was able to leak the cover pages of secret documents that were supposed to be private🔥.

Check out my write-up below. I'd love to hear your thoughts and feedback.

#hackerone #Cybersecurity #ethicalhacking #cyberattacks #bugbounty

https://t.co/2sWJKfenwT

[Bassem M bazzoun @bassemmbazzoun]

In this blog, I will discuss how a security vulnerability I discovered a year ago in Facebook/Meta could be used to affect the US election and how a simple IDOR vulnerability could have a major impact.

I hope you enjoy it :)

#USElection2024 #bugbounty

https://t.co/mAc2F4LrjS

[Giwa Daoud @GiwaDaoud]

@bassemmbazzoun Nice find! 👏❤️

[Bassem M bazzoun @bassemmbazzoun]

Found an endpoint:
…/redacted?redirectionParam=/Path

1. Supplied any url: (Open redirect ✅ )

2.Supplied javascript:alert(1) ( XSS ✅ )

3.Created payload to steal the victim’s cookies and redirect them to our own website: ( ATO ✅ )

#BugBounty #bugbountytips #hackerone

[Giwa Daoud @GiwaDaoud]

@bassemmbazzoun Woww! 😍 Nice find👏👏👏

[Giwa Daoud @GiwaDaoud]

@bassemmbazzoun @Hacker0x01 😍😍😍😍

[Giwa Daoud @GiwaDaoud]

@bassemmbazzoun 🔥🔥🔥😍😍