Bugs I Found, Bounties I Earned: A Look at My Bug Bounty Journey So Far

Hi Peers 👋

I'm an independent security researcher and bug bounty hunter. I've written write-ups on some of my findings. You can read them on Medium.

• ATO Bug in a Target Who Wasn't Running Any Bug Bounty Program (Bounty: 40K INR)

• Facebook Page Admin Disclosure by "Message Seller" Button (Bounty: 1500 USD)

• Facebook Page Admin Disclosure by "Create Doc" Button (Bounty: 5000 USD)

• Irremovable Facebook Group Album Photos and Entire Album under Certain Circumstances (Bounty: 1000 USD)

• Bypassing 2-Factor Authentication for Facebook Business Manager (Bounty: 1000 USD)

• Missing Rate-Limiting. How I Was Able to Add Any Unowned Phone Number to My Facebook Account? (Bounty: 5000 USD)

• Irremovable Comments on the FB Lite App | A Story of a Simple FB Lite Bug That I Found Just by Observation (Bounty: 500 USD)

For more writeups, follow and subscribe to my newsletter on Medium.