Facebook Exploit lets you post on anyones wall even Mark Zuckerbergs

well he made a video of it but doesn't quite show what he's doing

he manipulates some background code ... anyone know how he did it ?
 
Advertise on BHW
lmxftw said:
well he made a video of it but doesn't quite show what he's doing

he manipulates some background code ... anyone know how he did it ?
Click to expand...
"Inspect element" on google chrome, and change some values in hidden fields.

p.s Aren't they fixed it already?
 
one would assume it was the xhpc_targetid parameter, but no way it went undiscovered for that long
 
Wow he could have posted a CPA offer on Zuckerberg's wall and made a lot
 
He could go to http://fanpagelist.com/ and make a list of 100 most popular fb pages, post on them with links to (be creative here) and rake some XXXXX amount of money. With custom prepared blog pages or some web 2.0 properties tailored to each page and specific offers connected to each fb page he could rake unpredicted amount of money. But obviously he is not in "the game" for money, or he is just simply stupid.
 
Exploit patched but anyway:

1. Go to facebook homepage, write something on status textbox (dont publish it and leave that tab opened)
2. Open new tab and find your ID (you can find it here: graph.facebook.com/yourfbusername)
3. Find victim ID by same method.
4. Go back on first tab (where you have writed status) and make "inspect element"
5. By pushing CTRL + F find your facebook ID's and replace it with victim ID.
 
It was such a simple method too, from what i remember people have been using this exploit for a long time but people using it would of course not say how it was done.
 
Poor guy, he found this loophole working with his 5 years old half broken laptop! A group of hackers are now trying to fund this guy for his brilliance.
 
It's not only him that knew about this.

To be honest, this wasn't even a 'MAJOR FINDING', but it sure was a MAJOR exploit. I myself have known this for about a month now, and at first I read about how much Facebook is going to pay for such findings, and the price money was $500, so I decided to use it for myself.

It's like crazy! The amount of fans that I have gotten to my fanpage in this time is just impossible and unbelievable, that too for free!

Thanks MR SO CALLED HACKER, you've ruined it for me and for those who knew this exploit!
 
It should also have been worked on fan pages, this guy is stupid, he should have used it on large pages like Vin Diesel :d.. I would because I am not in US.. as mentioned in the thread it was simple to do, below is the tutorial by founder himself..

When you make a new status on Facebook, the default value of making a status is set to your profile. By changing a single value, you will be able to make a post on any wall you want.

Step 1
Open Facebook, write a status message but don't submit it.

Step 2
Open the profile you wish to make a post on, and copy the username, or ID, right after the facebook.com part. Example:

http://www.facebook.com/zuck
Copy zuck and put it after this URL: http://graph.facebook.com/

http://www.facebook.com/zuck -> http://graph.facebook.com/zuck

Step 3
Go back to your Facebook status, and open Google Developer (F12) or Inspect Element (Firefox) and click on the status,

Step 4
Scroll up, till you find an input-tag with name set to "xhpc_targetid". It looks like this:
<input type="hidden" autocomplete="off" name="xhpc_targetid" value="12345">

Step 5
Go back to the graph.facebook.com tab you opened before, and copy the ID. It looks like this:
[Image: 46unu.png]
In that case, the ID would be 4.

Step 6
Go back to your Facebook status, and replace the value="xxx" (from step 4) to your new ID. Example:

<input type="hidden" autocomplete="off" name="xhpc_targetid" value="12345">
changed to:
<input type="hidden" autocomplete="off" name="xhpc_targetid" value="4">

Once that is done, all you need to do now is press "Post". Your post will now be posted on the target's Facebook wall!
Click to expand...
 
Last edited:
this exploit has been around for like 6 months? i remember reading about it on some hack forum months ago.. this guy doesn't deserve the payout, prolly why he couldn't show them how it actually worked either?

and lol @ poor people not wanting to get on facebook. there are more poor people on the planet than even middle class still, why is fb so big then?
 
this exploit has been around for like 6 months? i remember reading about it on some hack forum months ago.. this guy doesn't deserve the payout, prolly why he couldn't show them how it actually worked either?

and lol poor people not wanting to get on facebook. there are more poor people on the planet than even middle class still, why is fb so big then?
Click to expand...

Which hack site if you don't mind me asking?
 
im too angry .... how i missed this chance ot use it for myself .... angryyyyyyyyy !

folks is it any loop hole or such kind of method till now ping me ... we can deal
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top