Facebook Business Takeover-Facebook Reward $27,500 Bounty

Facebook Reward $27,500 Bounty

Facebook Business Takeover Facebook Reward $27,500 Bounty There is a call to import admins to a business account. The call at the time didn’t seem to have any permissions set to it. This meant it was possible to add oneself as an admin to any business. Proof of Concept HTTP POST /business/aymc_assets/admins/import/ Host: facebook.com business_id=TARGET_BUSINESS_ID… Read More