Syd Ricafort (0cod3)How I Found Stored XSS In AppleFew weeks ago I tried hunting or searching for bugs in Apple. Then my Internet friend from Iraq chatted me about the bug he found and was…Apr 75Apr 75
Syd Ricafort (0cod3)Meta Bug Bounty: Add Items As Non Contributor Page in Personal Save Collection FeatureIn Facebook there is a feature called saved collection. In personal saved collection, owner of the collection can add contributors. As per…Mar 1Mar 1
Syd Ricafort (0cod3)Join Any Facebook Group As Deactivated Additional ProfileDescription: A deactivated profile or deleted profile cannot use Facebook but due to this bug it is possible to join and interact in any…Dec 19, 2023Dec 19, 2023
Syd Ricafort (0cod3)Bypassing Link Sharing Protection in Messenger Kids Parent’s Control Feature | Meta Bug BountyHello guys, this is Syd again for another article. Today I will share one of my findings in Meta BBP on how I bypassed link protection in…Apr 20, 20231Apr 20, 20231
Syd Ricafort (0cod3)Exposing Security Weakness: How I Disabled 2FA with a Rate Limit FlawHello folks this is Syd and today I will show you how I found a bug in which I was able to disable two-factor authentication by…Mar 9, 2023Mar 9, 2023
Syd Ricafort (0cod3)Disavow Flow is Not Properly Enforced in Instagram [1000 USD Bounty]When a malicious actor gets access or changes is done to user account. A disavow email will be sent to the original email of the user. That…Aug 4, 20222Aug 4, 20222
Syd Ricafort (0cod3)Page Admin Disclosure when Posting a ReelHello , I’m Syd from the Philippines. Today I would like to share one of my findings in Meta Bug Bounty Program. The bug that I found is…Apr 30, 20221Apr 30, 20221
Syd Ricafort (0cod3)Spoof as another Facebook user to report an impostor accountWhen I was helping someone take down a poser/impostor account. I tried to check the request body on what’s going on behind the scene. The…Apr 5, 20221Apr 5, 20221
Syd Ricafort (0cod3)This is how I can Turn Off Your Post NotificationDescription/Impact: In m.facebook user can turn on post notification on a post. By turning it on user will be notified if someone reacted…Jan 15, 20221Jan 15, 20221
Syd Ricafort (0cod3)Prevent User Confirm Their Identity To Unlock 2FA Locked AccountDescription: Two Factor Authentication (2FA) is a security feature that helps Facebook users protect their account in addition to their…Jan 10, 2022Jan 10, 2022
![Disavow Flow is Not Properly Enforced in Instagram [1000 USD Bounty]](https://miro.medium.com/v2/resize:fill:160:106/1*vkkhjgeoR_i0bpRvLl2Cug.png)
![Disavow Flow is Not Properly Enforced in Instagram [1000 USD Bounty]](https://miro.medium.com/v2/resize:fill:320:214/1*vkkhjgeoR_i0bpRvLl2Cug.png)
