josipfranjkovic.blogspot.com

Josip Franjković - security blog

Josip Franjković - security blog. Monday, 13 July 2015. The easiest bug bounties I have ever won. The bugs I will write about are the simplest ones I have ever found on Facebook. The point of this blog is to show that some bugs can be found just by changing a username in URL. The mobile website m.facebook.com. Has a year overview in which you can see how many friends your friend made, where they checked in, and so on. Clicking on "Made xx new friends" leads to the URL:. This is basically an IDOR. As alwa...

http://josipfranjkovic.blogspot.com/

OVERVIEW OF josipfranjkovic.blogspot.com

TRAFFIC RANK

>1,000,000

REVIEWS

0

PAGES IN THIS WEBSITE

14

LINKS TO THIS WEBSITE

CONTACTS

ADDRESSES

SOCIAL LINKS

ONLINE SINCE

WEBSITE DETAILS

SEO

PAGES

SIMILAR SITES

TRAFFIC RANK FOR JOSIPFRANJKOVIC.BLOGSPOT.COM

TODAY'S RATING

>1,000,000

TRAFFIC RANK - AVERAGE PER MONTH

BEST MONTH

November

AVERAGE PER DAY Of THE WEEK

HIGHEST TRAFFIC ON

Monday

TRAFFIC BY CITY

Sign up

CUSTOMER REVIEWS

Average Rating: 3.5 out of 5 with 13 reviews

5 star

3

4 star

4

3 star

4

2 star

0

1 star

2

Hey there! Start your review of josipfranjkovic.blogspot.com

AVERAGE USER RATING

Write a Review

WEBSITE PREVIEW

LOAD TIME

0.4 seconds

FAVICON PREVIEW

16x16
32x32
64x64
128x128

CONTACTS AT JOSIPFRANJKOVIC.BLOGSPOT.COM

ADD CONTACT

Login

TO VIEW CONTACTS

Remove Contacts

FOR PRIVACY ISSUES

CONTENT

PAGES IN
THIS WEBSITE

14

SSL

EXTERNAL LINKS

5

SITE IP

216.58.216.65

LOAD TIME

0.422 sec

SCORE

6.2

PAGE TITLE

Josip Franjković - security blog | josipfranjkovic.blogspot.com Reviews

<META> DESCRIPTION

Josip Franjković - security blog. Monday, 13 July 2015. The easiest bug bounties I have ever won. The bugs I will write about are the simplest ones I have ever found on Facebook. The point of this blog is to show that some bugs can be found just by changing a username in URL. The mobile website m.facebook.com. Has a year overview in which you can see how many friends your friend made, where they checked in, and so on. Clicking on Made xx new friends leads to the URL:. This is basically an IDOR. As alwa...

<META> KEYWORDS

1 friend lists bug

2 profile lists/

3 factoid type=friends made

4 changing the username

5 most tagged with/

6 report timeline

7 awarded

8 generous award

9 posted by

10 josip franjković

CONTENT

Page content here

KEYWORDS ON PAGE

friend lists bug,profile lists/,factoid type=friends made,changing the username,most tagged with/,report timeline,awarded,generous award,posted by,josip franjković,no comments,email this,blogthis,share to twitter,share to facebook,share to pinterest,hello

SERVER

GSE

CONTENT-TYPE

utf-8

GOOGLE PREVIEW

Josip Franjković - security blog | josipfranjkovic.blogspot.com Reviews

https://josipfranjkovic.blogspot.com

Josip Franjković - security blog. Monday, 13 July 2015. The easiest bug bounties I have ever won. The bugs I will write about are the simplest ones I have ever found on Facebook. The point of this blog is to show that some bugs can be found just by changing a username in URL. The mobile website m.facebook.com. Has a year overview in which you can see how many friends your friend made, where they checked in, and so on. Clicking on "Made xx new friends" leads to the URL:. This is basically an IDOR. As alwa...

INTERNAL PAGES

josipfranjkovic.blogspot.com

1

Josip Franjković - security blog: April 2015

http://www.josipfranjkovic.blogspot.com/2015_04_01_archive.html

Josip Franjković - security blog. Monday, 27 April 2015. Race conditions on Facebook, DigitalOcean and others (fixed). Lately I have been looking into race condition bugs affecting websites/web-applications. Here is a good resource to learn about them - includes theory, vulnerable code, proof of concept code and ways to fix. I highly recommend you read it:. Https:/ defuse.ca/race-conditions-in-web-applications.htm. Below are couple of my reports ranging from benign to pretty high severity. Create a new r...

2

Josip Franjković - security blog: January 2013

http://www.josipfranjkovic.blogspot.com/2013_01_01_archive.html

Josip Franjković - security blog. Thursday, 3 January 2013. Google.com cross site scripting and privilege escalation in Consumer Surveys. I have recently found a persistent cross site scripting and privilege escalation in Google Consumer Surveys. Here are proofs of concept for both vulnerabilities:. Cross site scripting (XSS). You can create a new Google Consumer Survey here. I have entered " /script script alert(document.cookie) /script. Http:/ www.google.com/insights/consumersurveys/create? When trying...

3

Josip Franjković - security blog: July 2015

http://www.josipfranjkovic.blogspot.com/2015_07_01_archive.html

Josip Franjković - security blog. Monday, 13 July 2015. The easiest bug bounties I have ever won. The bugs I will write about are the simplest ones I have ever found on Facebook. The point of this blog is to show that some bugs can be found just by changing a username in URL. The mobile website m.facebook.com. Has a year overview in which you can see how many friends your friend made, where they checked in, and so on. Clicking on "Made xx new friends" leads to the URL:. This is basically an IDOR. As alwa...

4

Josip Franjković - security blog: November 2013

http://www.josipfranjkovic.blogspot.com/2013_11_01_archive.html

Josip Franjković - security blog. Thursday, 21 November 2013. Facebook bug bounty: secondary damage (one report that leads to more bugs), fairness, and why I really like reporting to Facebook. Usually, the process for bug bounty is as follows:. Person finds a bug, reports it to company. Company fixes the bug. Sent to the reporter. An example is a critical bug I reported to Facebook. But few days ago, I read a blog by Facebook security. It turns out, I was very, very. M y original report:. 2 not already b...

5

Josip Franjković - security blog: Facebook bug bounty: secondary damage (one report that leads to more bugs), fairness, and why I really like reporting to Facebook

http://www.josipfranjkovic.blogspot.com/2013/11/facebook-bug-bounty-secondary-damage.html

Josip Franjković - security blog. Thursday, 21 November 2013. Facebook bug bounty: secondary damage (one report that leads to more bugs), fairness, and why I really like reporting to Facebook. Usually, the process for bug bounty is as follows:. Person finds a bug, reports it to company. Company fixes the bug. Sent to the reporter. An example is a critical bug I reported to Facebook. But few days ago, I read a blog by Facebook security. It turns out, I was very, very. M y original report:. 2 not already b...

UPGRADE TO PREMIUM TO VIEW 9 MORE

TOTAL PAGES IN THIS WEBSITE

14

SOCIAL ENGAGEMENT

groups

JosipFranjkovic

OTHER SITES

josipereirabordado2.blogspot.com

Josi Pereira

Domingo, 12 de outubro de 2014. Ponto Ajour na máquina "caseado aberto". Boa tarde pessoal como estão? PAra quem gosta de fazer lindas fraldas dou aqui umas dicas para seus trabalhos em fraldas ficarem ainda mais charmosas. espero que gostei e aproveitem e. Postado por Josi Pereira Bordados. Domingo, 21 de setembro de 2014. TULIPAS SÃO EXTREMAMENTE APAIXONANTES. Olá pessoal como estão? Eu estou cada dia melhorando graças a Deus a recuperação tem sido ótima. Postado por Josi Pereira Bordados. Passei aqui ...

josipereirabordados.blogspot.com

xxxxxxxxx

Visualizar meu perfil completo. Tema Simples. Tecnologia do Blogger.

josipereirabordados2.blogspot.com

PONTO CRUZ

Visualizar meu perfil completo. Modelo Watermark. Tecnologia do Blogger.

josipfranjkovic.blogspot.com

Josip Franjković - security blog

Josip Franjković - security blog. Monday, 13 July 2015. The easiest bug bounties I have ever won. The bugs I will write about are the simplest ones I have ever found on Facebook. The point of this blog is to show that some bugs can be found just by changing a username in URL. The mobile website m.facebook.com. Has a year overview in which you can see how many friends your friend made, where they checked in, and so on. Clicking on "Made xx new friends" leads to the URL:. This is basically an IDOR. As alwa...

josipfranjkovic.com

Personal website - Josip Franjković

Stealing Facebook access tokens using CSRF in device login flow. July 19th, 2016. Race conditions on the web. July 12th, 2016. Facebook CSRF leading to full account takeover (fixed). October 18th, 2013. Bug bounties - archived blog. The easiest bug bounties I have ever won. July 13th, 2015. Read more on archived blog. Bug bounties - archived blog. Race conditions on Facebook, DigitalOcean and others (fixed). April 27th, 2015. Read more on archived blog. You can contact me using:. DM open to everyone).

josiph-85.skyrock.com

josiph-85's blog - chawki - Skyrock.com

27/11/2006 at 12:36 PM. 04/06/2007 at 10:11 AM. Desormais plus de petasse sur la. Subscribe to my blog! Desormais plus de petasse sur la planete. Don't forget that insults, racism, etc. are forbidden by Skyrock's 'General Terms of Use' and that you can be identified by your IP address (66.160.134.14) if someone makes a complaint. Please enter the sequence of characters in the field below. Posted on Monday, 04 June 2007 at 10:11 AM. Enfin le mois de juin. Pourquoi enfin le mois de juin? C moi tou seul.