Facebook Pages WARNING

[losdivinos]

Well, I honestly am not sure on how use this method, but something came to my mind when I was thinking about it. Anyways, when I wanted to try it out, I found out it was patched.

My Idea:
I think the problem was, that their code didn't check, if the one changing the was manager or if he was IA or CC.
So like, everybody with rights could change it.
But the thing is, that only Managers can access the Admin administration panel with the submit button.
However, as IA and CC you could also view this page, but not submit the form.
However, they could easily add a submit button changing the source code. Think about it. All the tokens and page values etc. would be right. I guess you can see, what I mean. I am not saying this was the method, but It is definately a possibility.

 

[Wilson Grant Fisk]

Now now, you need to calm down. As a moderator you dont need to insult donors here on BHW. Youre still mad since I made that comment on the thread of you "sharing" a script.

Probably not a good idea calling out a MOD like that, especially as YOUR legitimacy has been called into question since the day you joined.

http://www.blackhatworld.com/blackhat-seo/introductions/608124-ohfacts-reporting-duty.html


Just sayin'

 

[Rounderx]

Well, I honestly am not sure on how use this method, but something came to my mind when I was thinking about it. Anyways, when I wanted to try it out, I found out it was patched.

My Idea:
I think the problem was, that their code didn't check, if the one changing the was manager or if he was IA or CC.
So like, everybody with rights could change it.
But the thing is, that only Managers can access the Admin administration panel with the submit button.
However, as IA and CC you could also view this page, but not submit the form.
However, they could easily add a submit button changing the source code. Think about it. All the tokens and page values etc. would be right. I guess you can see, what I mean. I am not saying this was the method, but It is definately a possibility.

Interesting tought, but i saw one of the white hat's rewards on Faceboook program have been given for this exact same reason so i don't think this is it, as facebook would already know this could happen

 

[clickj4ck]

I posted this few months ago and all you guys laughed at me! I'm still looking for this method ! I will pay good money to whoever knows it .

 

[abradabra]

So glad that this got patched. Hopefully good days are back. FB got a lot of bug w.r.t to their Facebook Page Features. :|

 

[Mr Rishav]

Well, I honestly am not sure on how use this method, but something came to my mind when I was thinking about it. Anyways, when I wanted to try it out, I found out it was patched.

My Idea:
I think the problem was, that their code didn't check, if the one changing the was manager or if he was IA or CC.
So like, everybody with rights could change it.
But the thing is, that only Managers can access the Admin administration panel with the submit button.
However, as IA and CC you could also view this page, but not submit the form.
However, they could easily add a submit button changing the source code. Think about it. All the tokens and page values etc. would be right. I guess you can see, what I mean. I am not saying this was the method, but It is definately a possibility.

Yes. you're right that was java script which was implied with page code in it .

 

[Spawnie]

Yes. you're right that was java script which was implied with page code in it .

BS it was plain simple html-code...

 

[losdivinos]

Yeah, I am so sad, that I didn't find out this method before, so I could have gotten my pages back. Anyways, most security holes on FB pages are closed now, so buying and selling pages should be more safe now at least.

 

[BikSMM]

How do you make a hidden manager on facebook? :O

 

[TecPakora]

i have a js that is used for cc to manager but not sure if its still working or not

 

[racket]

i have a js that is used for cc to manager but not sure if its still working or not

i can tell you right now its not working
very old