1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Get fbpwn - Facebook profile info dumper

Discussion in 'FaceBook' started by artizhay, Sep 14, 2011.

  1. artizhay

    artizhay BANNED BANNED

    Joined:
    Nov 21, 2010
    Messages:
    1,867
    Likes Received:
    1,335
    Just saw this news article up on Facecrooks about a tool that will auto friend request people and aggregate their viewable data. Apparently developed by a team of researchers to show Facebook users how vulnerable they are to info jacking.

    Here is the article:
    http://facecrooks.com/Safety-Center/Internet-Safety-Privacy/Security-Researchers-Develop-Facebook-Pwn-a-Tool-that-Steals-Profile-Info.html

    It took me a while to find an article mentioning the code's location, but here it is:
    http://code.google.com/p/fbpwn/
     
    • Thanks Thanks x 2
    Last edited: Sep 14, 2011
  2. codeman1234

    codeman1234 Power Member

    Joined:
    Sep 13, 2011
    Messages:
    527
    Likes Received:
    35
    Where can we get this tool then?

    Cheers!!
     
  3. neslex

    neslex Newbie

    Joined:
    Jun 30, 2011
    Messages:
    13
    Likes Received:
    0
    I went to post the direct link but:
    You are NOT allowed to post URLs, email addresses and images, until after you have been a member of BHW for a little longer. We did this is to cut down on spam. Thank you for understanding!

    Great.

    See in the sidebar ' Downloads: FBPwn-beta-0.1.5.zip'.

    Click there.
     
  4. funkienz

    funkienz BANNED BANNED

    Joined:
    Nov 23, 2010
    Messages:
    243
    Likes Received:
    16
    Does it working? I got this but i'm not sure how does it works!
     
  5. Parlez

    Parlez Regular Member

    Joined:
    Aug 23, 2011
    Messages:
    266
    Likes Received:
    362
    I don't get it... to get info of 1 user, it needs to befriend people on the user's freindlist first, then impersonate one of them, THEN try to befriend the user?

    Seems like a lot of work. Why not try to befriend directly? 50% success rate which is higher and faster than the method in the article.
     
  6. smmmaster

    smmmaster Newbie

    Joined:
    Jul 13, 2011
    Messages:
    48
    Likes Received:
    6
    How will this work?

    Does anyone try this one? Please share...
     
  7. sirgold

    sirgold Supreme Member

    Joined:
    Jun 25, 2010
    Messages:
    1,260
    Likes Received:
    645
    Occupation:
    Busy proving the Pareto principle right
    Location:
    A hot one
  8. funkienz

    funkienz BANNED BANNED

    Joined:
    Nov 23, 2010
    Messages:
    243
    Likes Received:
    16
    It will download his friendlist and all the images and information!! Not bad at all but isn't it an exploit?
     
  9. xpwizard

    xpwizard Junior Member

    Joined:
    Nov 6, 2010
    Messages:
    198
    Likes Received:
    122
    No, there is no exploit involved. This tool was created to show how vulnerable FB's profile security is. That any "friend" can download all of your personal data.
    (Only part that could be called an exploit would be creating the dummy account... Which isn't really an exploit, more of social engineering).

    I don't know if you remember the dating site that launched with hundreds of thousands of FB users data that they retrieved by scraping public profiles. This is along the same lines, except it retrieves the private info by friending the account.

    Feel free to read their motivation: http://fbpwn.tumblr.com/post/10171402996/fbpwn-release-motivation
     
    • Thanks Thanks x 1
  10. terrance511

    terrance511 Newbie

    Joined:
    Mar 22, 2010
    Messages:
    31
    Likes Received:
    0
    wow, this will be great if it work !
     
  11. G-S-T

    G-S-T Executive VIP Jr. VIP

    Joined:
    Jan 20, 2011
    Messages:
    1,842
    Likes Received:
    8,812
    Occupation:
    Full time IM
    Location:
    Heavy in the game
    Now all you need is an account with 5k friends and you can have tons of useful data
     
  12. Crazy

    Crazy Jr. Executive VIP

    Joined:
    Jun 13, 2009
    Messages:
    640
    Likes Received:
    319
    Occupation:
    VB, C#, XHTML, CSS, PHP, MySQL, JavaScript, jQuery
    Location:
    Everywhere
    Yeah, like xpwizard said, this software is all about facilitating social engineering. It scales it up and automates much of the work, which isn't really a breakthrough in and of itself but it does help as an aid which I think is pretty tight. Thanks for sharing this.

    postCount++;