Faav
banner
faav.net
Faav
@faav.net
Developer @ https://capes.me (& NameMC Extras), Web developer, Bug hunter. 🇻🇳

🔗 https://faav.net
Part II: I found a bypass to Microsoft's fix using a Timing Attack to leak the Microsoft Event Registration database again! Here's the writeup: blog.faav.top/microsoft-ev... #BugBounty #bugbountytips
October 14, 2025 at 4:26 AM
I found another vulnerability to leak the Microsoft Events Registration and Waitlist databases, this could've leaked tons of PII. Here's the writeup: blog.faav.top/microsoft-ev... #BugBounty #bugbountytips

After this, I found a bypass to Microsoft’s fix and will be releasing Part II in a few days.
Microsoft Events Leak, Part I: Leaking Event Registration and Waitlist Databases
How I was able to leak the Microsoft Event Registration and Waitlist Databases to leak tons of PII.
blog.faav.top
October 8, 2025 at 9:07 PM
I found another vulnerability to leak Microsoft Employee PII ($7500 Bounty) and 700M+ Microsoft partner records. Here's the writeup: blog.faav.top/microsoft-pa... #BugBounty #bugbountytips
Microsoft Partner Leak: Leaking Microsoft Employee PII and 700M+ Partner Records
How I hacked the Microsoft Device Pricing Program to leak Microsoft Employee PII and 700M+ Microsoft partner records.
blog.faav.top
August 26, 2025 at 12:46 AM
I found a vulnerability to be able to access any Microsoft building, leaking guest/visitor and Microsoft employee PII. Here is the writeup: blog.faav.top/break-into-a... #BugBounty #bugbountytips
Break into any Microsoft building: Leaking PII in Microsoft Guest Check-In
How I could’ve broken into any Microsoft building, leaking guest/visitor and employee PII.
blog.faav.top
July 18, 2025 at 7:33 PM
My first short little blog post on how I hacked my school's website, Microsoft bug writeup coming soon! #BugBounty blog.faav.top/how-i-hacked...
How I hacked my school’s website
blog.faav.top
July 16, 2025 at 4:50 AM
I made a MSRC (Microsoft) version of xdavidhu's Awesome Google VRP writeups repo! github.com/bribes/aweso... #BugBounty
GitHub - bribes/awesome-msrc-writeups: 🐛 A list of writeups from the MSRC (Microsoft) Bug Bounty program
🐛 A list of writeups from the MSRC (Microsoft) Bug Bounty program - bribes/awesome-msrc-writeups
github.com
July 16, 2025 at 4:50 AM
Use NameMC Extras! An extension that enhances your namemc.com experience with a range of powerful features. Out on the Official Chrome and Firefox web stores!
Minecraft Names & Skins
Check the availability of Minecraft names, view the name history of Minecraft accounts, download the latest trending Minecraft skins, and much more! Check out our collection of the best Minecraft skin...
namemc.com
July 16, 2025 at 4:49 AM
Reposted by Faav
I have increased the socials limit to 8 and added 2 more Tier IV features so you can add a Custom Link as a social and you can set a username link to easily go to someone's NameMC profile or anything else. Also I added Tier V to support capes.me monthly.
May 26, 2025 at 10:36 PM
Reposted by Faav
Brand new filters for searching Minecraft accounts by cape count: equal to, greater than or equal to, and less than or equal to a specified amount
May 24, 2025 at 1:25 AM
Reposted by Faav
Brand new filters added to capes.me and redesigned edit page!
May 19, 2025 at 1:59 AM
Made my first $5000 from #BugBounty
May 9, 2025 at 11:32 AM
a cat is sitting on a couch and looking at the camera .
ALT: a cat is sitting on a couch and looking at the camera .
media.tenor.com
May 9, 2025 at 11:11 AM