New Facebook Clickjacker website (VERY VIRAL)

[Izatrap]

I was browsing and this appeared on my feed. This is awesome if you ask me, the popup "hidden" comment box has over 130k COMMENTS in just some hours. I want to share this with you because I am sure that someone here can clone this and make another viral website.

I have looked for something similar for a year... If someone is selling a code please PM me your Skype and we talk there.

http://www.wladomosci.pl/id/pijany-nastolatek-rozbija-sie-na-przystanku-cztery-osoby-zginely.php
IMAGE on the comments: https://cdn.anonfiles.com/1382284059578.png


This is the link, how do you get the source code of this website, how could it get so viral and Facebook is not doing a s*it about it?

watch out for every button on the page, you will share and like random pages lol

 

[dom3l3k]

Well, I have something like it. Polish ppl are too stupid for that, that's why it's going to be powerful thing. They have also another websites, mainly they had websites with crash in "your city".

 

[N1KITA]

What does this script do ?

 

[Paper-Boy]

What does this script do ?

Considering that it's a viral script, it most likely posts to the user's wall, shares it to their friends etc. I'm not sure if it's blackhat script where it does all the above without the user knowing. This could get you banned in a matter of days though..

 

[fbscriptupdated]

i will try clone this i try comment script before not like this...

 

[dom3l3k]

Not at all you can clone it, but I'm pretty sure you can do that in the same way like they. I cloned it and I think it's not working very well. It's not using app so can't be banned.

 

[leetchart]

I can't see that this is doing something on my account. I can't see any registered app or something like that, really looks interesting.

 

[dom3l3k]

Man, because it's not using app, so can't be banned or whatever. It's working like SOCIAL PLUGIN COMMENTS but here they used Chinese version, which polish ppl can't read it. It's simple plugin for commenting but placed in special DIV.

 

[leetchart]

Man, because it's not using app, so can't be banned or whatever. It's working like SOCIAL PLUGIN COMMENTS but here they used Chinese version, which polish ppl can't read it. It's simple plugin for commenting but placed in special DIV.

Man I can read, You say that it's working like Social Plugiin comment, so it's using my account to send comment or?
I can't see that I have make any comment in my account.

 

[dom3l3k]

Well, What I saw, it's not working very well, so you don't have posted comment, check it on another account.

 

[leetchart]

Well, What I saw, it's not working very well, so you don't have posted comment, check it on another account.

Already tried in 2 different accounts and can't see any comment posted. Also in the source code it's this:

<script type="text/javascript">
		
			window.fbAsyncInit = function () {	
			FB.init({
				appId  : '237828736372773',
				status : true, // check login status
				cookie : true, // enable cookies to allow the server to access the session
				xfbml  : true, // parse XFBML
				oauth  : true // enable OAuth 2.0
			}); 
    
 };
			
		(function(d, s, id) {
			var js, fjs = d.getElementsByTagName(s)[0];
			if (d.getElementById(id)) return;
			js = d.createElement(s); js.id = id;
			js.src = "//connect.facebook.net/zh_CN/all.js#xfbml=1";
			fjs.parentNode.insertBefore(js, fjs);
		}(document, 'script', 'facebook-jssdk'));
		
		
		
	</script>

If it's not app why they need this data?

 

[dom3l3k]

It's for social plugin. I don't see FB.LOGIN so don't worry about it. I don't know why it's not working on your account, maybe they limited it in some way.

 

[d4mn1t]

Guys stop talking bulshit it's a simple Faceook Like jacker. No comments are posted or something you just like this facebook page "Kac-morderca-nie-ma-serca/599980363396023" when you click under age confirmation....

 

[GodLy]

Guys stop talking bulshit it's a simple Faceook Like jacker. No comments are posted or something you just like this facebook page "Kac-morderca-nie-ma-serca/599980363396023" when you click under age confirmation....

Yeap it is simple jacker...

 

[dom3l3k]

Are you fucking noob or whatever? It's posting comments but I don't know why it doesn't right know. You can check it here http://twoje-miastofb.pl/cm/wypadek.html

 

[samfriend]

to me, its just a fb comment box, wrapped by a width, height container.... so u cannot uncheck the 'post to fb' checkbox...

<div class="comment-container" style='make width 300 height 50 and little 5px position to the left side.... cover those fb blue color'>
-----facebook comment iframe------
</div>

 

[d4mn1t]

Are you fucking noob or whatever? It's posting comments but I don't know why it doesn't right know. You can check it here

It's two different scripts as you can see from source code. Check the iframe source if that's not clear. The link you posted does seem to post comments and it's not working because of buggy code.

I think it's missing auth.php part were a user should get facebook auht dialog and confirm rights to post comments on his wall. After that webmaster can anytime post comments on your wall using granted permissions

 

[dom3l3k]

It's two different scripts as you can see from source code. Check the iframe source if that's not clear. The link you posted does seem to post comments and it's not working because of buggy code.

I think it's missing auth.php part were a user should get facebook auht dialog and confirm rights to post comments on his wall. After that webmaster can anytime post comments on your wall using granted permissions

Man I was using this script and I know something about it. It hadn't any auth script. This script is the same person which in first post.

 

[d4mn1t]

It's pointless for me to tell you how it works because you all know. Any way i'm just saying what i see in the code. I'm a webdeveloper for a long time I have done similar scripts by my own. Believe me I don't say what I don't know. Unless I get different code because my ip is from other country.

 

[hajrobaba]

Guys, can somebody make this to work without app_id and other auth stuff?
Somebody mentioned it early..