corpus.blog
41554 blogs · [ { "id": "01a087c1-fcef-73d0-b691-5bf4a5c372d1", "title": "View insights for any Instagram Professional Account post", "url": "https://philippeharewood.com/view-insights-for-any-instagram-professional-account-post/", "published_at": "2025-11-14T12:37:00+00:00" }, { "id": "01a087c1-fcef-73d0-b691-5bf4a666c417", "title": "Error messages from Instagram Shared Login landing screen include internal paths", "url": "https://philippeharewood.com/error-messages-from-instagram-shared-login-landing-screen-include-internal-paths/", "published_at": "2025-11-08T22:15:00+00:00" }, { "id": "01a087c1-fcef-73d0-b691-5bf4a74adc80", "title": "Page admin and email disclosure", "url": "https://philippeharewood.com/page-admin-and-email-disclosure/", "published_at": "2025-03-04T05:22:00+00:00" }, { "id": "01a087c1-fcef-73d0-b691-5bf4a7b15e89", "title": "Internal path disclosure on Meta View app (now Meta AI)", "url": "https://philippeharewood.com/internal-path-disclosure-on-meta-view-app-now-meta-ai/", "published_at": "2024-10-16T19:34:00+00:00" }, { "id": "01a087c1-fcef-73d0-b691-5bf4a822e861", "title": "Everstore Video Disclosure via Graph API", "url": "https://philippeharewood.com/everstore-video-disclosure-via-graph-api/", "published_at": "2024-09-20T08:32:00+00:00" }, { "id": "01a087c1-fcef-73d0-b691-5bf4a8355d89", "title": "Meta AI oil_handles used in Oculus Gift card background generation do not check access control", "url": "https://philippeharewood.com/meta-ai-oil_handles-used-in-oculus-gift-card-background-generation-do-not-check-access-control/", "published_at": "2024-06-10T09:47:00+00:00" }, { "id": "01a087c1-fcef-73d0-b691-5bf4a9251a46", "title": "I Found a Bug in Meta AI That Let Me Upload Explicit Content and Have AI Create More", "url": "https://philippeharewood.com/i-found-a-bug-in-meta-ai-that-let-me-upload-explicit-content-and-have-ai-create-more/", "published_at": "2024-06-08T16:09:00+00:00" }, { "id": "01a087c1-fcef-73d0-b691-5bf4aa0e79e2", "title": "Instagram App Access Token", "url": "https://philippeharewood.com/instagram-app-access-token/", "published_at": "2022-02-24T01:31:00+00:00" }, { "id": "01a087c1-fcef-73d0-b691-5bf4aaf26b8f", "title": "Bypass video capture limit on Ray-Ban Stories", "url": "https://philippeharewood.com/bypass-video-capture-limit-on-ray-ban-stories/", "published_at": "2021-11-05T11:23:00+00:00" }, { "id": "01a087c1-fcef-73d0-b691-5bf4aafc3d64", "title": "View the country of a private Instagram User", "url": "https://philippeharewood.com/view-the-country-of-a-private-instagram-user/", "published_at": "2021-08-07T21:17:00+00:00" }, { "id": "01a0bdce-586e-72ad-98fa-8bb317e41169", "title": "Access to CrowdTangle Deletion Framework API", "url": "https://philippeharewood.com/access-to-crowdtangle-deletion-framework-api/", "published_at": "2021-08-07T02:25:00+00:00" }, { "id": "01a0bdce-586f-7000-8216-3c87859ed102", "title": "Missing permission check for Facebook gaming community invites", "url": "https://philippeharewood.com/missing-permission-check-for-facebook-gaming-community-invites/", "published_at": "2021-08-01T21:53:00+00:00" }, { "id": "01a0bdce-586f-7000-8216-3c87865c6e48", "title": "Disclose group members of a Facebook campus (https://www.facebook.com/campus/)", "url": "https://philippeharewood.com/disclose-group-members-of-a-facebook-campus-https-www-facebook-com-campus/", "published_at": "2021-07-14T15:51:00+00:00" }, { "id": "01a0bdce-586f-7000-8216-3c8786975d79", "title": "Disclose page admin on KnowledgeNote GraphQL Object", "url": "https://philippeharewood.com/disclose-page-admin-on-knowledgenote-graphql-object/", "published_at": "2021-07-12T16:11:00+00:00" }, { "id": "01a0bdce-586f-7000-8216-3c8786ef0062", "title": "Facebook Page Owner (Admin) Disclosure", "url": "https://philippeharewood.com/facebook-page-owner-admin-disclosure/", "published_at": "2021-07-12T10:05:00+00:00" }, { "id": "01a0bdce-586f-7000-8216-3c87878649eb", "title": "Disclose the creator (Facebook User) of a Facebook application", "url": "https://philippeharewood.com/disclose-the-creator-facebook-user-of-a-facebook-application/", "published_at": "2021-07-11T13:05:00+00:00" }, { "id": "01a0bdce-586f-7000-8216-3c8787fb1029", "title": "Bulletin.com email address leak", "url": "https://philippeharewood.com/bulletin-com-email-address-leak/", "published_at": "2021-07-02T07:22:00+00:00" }, { "id": "01a0bdce-586f-7000-8216-3c8787fec671", "title": "Disclose the owner (Facebook user) of a bulletin.com publication", "url": "https://philippeharewood.com/disclose-the-owner-facebook-user-of-a-bulletin-com-publication/", "published_at": "2021-07-02T05:48:00+00:00" }, { "id": "01a0bdce-586f-7000-8216-3c8788f640d4", "title": "View the raw content of a CMSObject", "url": "https://philippeharewood.com/view-the-raw-content-of-a-cmsobject/", "published_at": "2021-06-23T08:48:00+00:00" }, { "id": "01a0bdce-586f-7000-8216-3c878933709f", "title": "Disclose page admin via Service Catalogs via ProductCatalog GraphQL Object", "url": "https://philippeharewood.com/disclose-page-admin-via-service-catalogs-via-productcatalog-graphql-object/", "published_at": "2021-06-23T06:11:00+00:00" }, { "id": "01a0bdd2-fb6c-7150-938f-c542f5e6a4e1", "title": "View the number of business users for a Business account", "url": "https://philippeharewood.com/view-the-number-of-business-users-for-a-business-account/", "published_at": "2021-06-23T05:55:00+00:00" }, { "id": "01a0bdd2-fb6c-7150-938f-c542f5e9723b", "title": "View the connected business of a private Instagram account", "url": "https://philippeharewood.com/view-the-connected-business-of-a-private-instagram-account/", "published_at": "2021-06-17T21:37:00+00:00" }, { "id": "01a0bdd2-fb6c-7150-938f-c542f6b60697", "title": "Coding exercises exposed at facebookrecruiting.com", "url": "https://philippeharewood.com/coding-exercises-exposed-at-facebookrecruiting-com/", "published_at": "2021-05-24T12:54:00+00:00" }, { "id": "01a0bdd2-fb6c-7150-938f-c542f708863b", "title": "Listing of all public apps associated with any Wit User", "url": "https://philippeharewood.com/listing-of-all-public-apps-associated-with-any-wit-user/", "published_at": "2021-05-12T21:50:00+00:00" }, { "id": "01a0bdd2-fb6c-7150-938f-c542f7a146a7", "title": "Download Facebook internal mobile builds", "url": "https://philippeharewood.com/download-facebook-internal-mobile-builds/", "published_at": "2021-03-31T20:43:00+00:00" }, { "id": "01a0bdd2-fb6c-7150-938f-c542f8906fd0", "title": "Facebook Contractor Account Credentials leaked from IG video", "url": "https://philippeharewood.com/facebook-contractor-account-credentials-leaked-from-ig-video/", "published_at": "2021-03-04T10:07:00+00:00" }, { "id": "01a0bdd2-fb6c-7150-938f-c542f9446e4a", "title": "Leaked Credentials gives access to internalfb.com", "url": "https://philippeharewood.com/leaked-credentials-gives-access-to-internalfb-com/", "published_at": "2021-02-11T09:54:00+00:00" }, { "id": "01a0bdd2-fb6c-7150-938f-c542f9f385aa", "title": "Facebook’s /intern/testdata tool shown with the default password n0t3st", "url": "https://philippeharewood.com/facebooks-intern-testdata-tool-shown-with-the-default-password-n0t3st/", "published_at": "2021-01-18T10:00:00+00:00" }, { "id": "01a0bdd2-fb6c-7150-938f-c542fabea127", "title": "Disclose page admin via PAYShopRevision", "url": "https://philippeharewood.com/disclose-page-admin-via-payshoprevision/", "published_at": "2020-10-28T05:52:00+00:00" }, { "id": "01a0bdd2-fb6c-7150-938f-c542fb34fcdc", "title": "Missing permission check when viewing pending gaming community manager list", "url": "https://philippeharewood.com/missing-permission-check-when-viewing-pending-gaming-community-manager-list/", "published_at": "2020-10-21T21:47:00+00:00" } ] posts Claim your blog
Back to philippeharewood.com
Blog · corpus.blog/blogs/philippeharewood.com/posts

philippeharewood.com

philippeharewood.com

2025

View insights for any Instagram Professional Account postoriginal ↗
14 Nov 2025
Error messages from Instagram Shared Login landing screen include internal pathsoriginal ↗
8 Nov 2025
Page admin and email disclosureoriginal ↗
4 Mar 2025

2024

Internal path disclosure on Meta View app (now Meta AI)original ↗
16 Oct 2024
Everstore Video Disclosure via Graph APIoriginal ↗
20 Sept 2024
Meta AI oil_handles used in Oculus Gift card background generation do not check access controloriginal ↗
10 Jun 2024
I Found a Bug in Meta AI That Let Me Upload Explicit Content and Have AI Create Moreoriginal ↗
8 Jun 2024

2022

Instagram App Access Tokenoriginal ↗
24 Feb 2022

2021

Bypass video capture limit on Ray-Ban Storiesoriginal ↗
5 Nov 2021
View the country of a private Instagram Useroriginal ↗
7 Aug 2021
Access to CrowdTangle Deletion Framework APIoriginal ↗
7 Aug 2021
Missing permission check for Facebook gaming community invitesoriginal ↗
1 Aug 2021
Disclose group members of a Facebook campus (https://www.facebook.com/campus/)original ↗
14 Jul 2021
Disclose page admin on KnowledgeNote GraphQL Objectoriginal ↗
12 Jul 2021
Facebook Page Owner (Admin) Disclosureoriginal ↗
12 Jul 2021
Disclose the creator (Facebook User) of a Facebook applicationoriginal ↗
11 Jul 2021
Bulletin.com email address leakoriginal ↗
2 Jul 2021
Disclose the owner (Facebook user) of a bulletin.com publicationoriginal ↗
2 Jul 2021
View the raw content of a CMSObjectoriginal ↗
23 Jun 2021
Disclose page admin via Service Catalogs via ProductCatalog GraphQL Objectoriginal ↗
23 Jun 2021
View the number of business users for a Business accountoriginal ↗
23 Jun 2021
View the connected business of a private Instagram accountoriginal ↗
17 Jun 2021
Coding exercises exposed at facebookrecruiting.comoriginal ↗
24 May 2021
Listing of all public apps associated with any Wit Useroriginal ↗
12 May 2021
Download Facebook internal mobile buildsoriginal ↗
31 Mar 2021
Facebook Contractor Account Credentials leaked from IG videooriginal ↗
4 Mar 2021
Leaked Credentials gives access to internalfb.comoriginal ↗
11 Feb 2021
Facebook’s /intern/testdata tool shown with the default password n0t3storiginal ↗
18 Jan 2021

2020

Disclose page admin via PAYShopRevisionoriginal ↗
28 Oct 2020
Missing permission check when viewing pending gaming community manager listoriginal ↗
21 Oct 2020