Get fbpwn - Facebook profile info dumper

artizhay

BANNED
Joined
Nov 21, 2010
Messages
1,867
Reaction score
1,340
Just saw this news article up on Facecrooks about a tool that will auto friend request people and aggregate their viewable data. Apparently developed by a team of researchers to show Facebook users how vulnerable they are to info jacking.

Here is the article:
http://facecrooks.com/Safety-Center/Internet-Safety-Privacy/Security-Researchers-Develop-Facebook-Pwn-a-Tool-that-Steals-Profile-Info.html

It took me a while to find an article mentioning the code's location, but here it is:
http://code.google.com/p/fbpwn/
 
Last edited:
I went to post the direct link but:
You are NOT allowed to post URLs, email addresses and images, until after you have been a member of BHW for a little longer. We did this is to cut down on spam. Thank you for understanding!

Great.

See in the sidebar ' Downloads: FBPwn-beta-0.1.5.zip'.

Click there.
 
I don't get it... to get info of 1 user, it needs to befriend people on the user's freindlist first, then impersonate one of them, THEN try to befriend the user?

Seems like a lot of work. Why not try to befriend directly? 50% success rate which is higher and faster than the method in the article.
 
For those having trouble downloading this is the actual download URL:

http://fbpwn.googlecode.com/files/FBPwn-beta-0.1.5.zip

Have fun! :D
 
It will download his friendlist and all the images and information!! Not bad at all but isn't it an exploit?
 
It will download his friendlist and all the images and information!! Not bad at all but isn't it an exploit?

No, there is no exploit involved. This tool was created to show how vulnerable FB's profile security is. That any "friend" can download all of your personal data.
(Only part that could be called an exploit would be creating the dummy account... Which isn't really an exploit, more of social engineering).

I don't know if you remember the dating site that launched with hundreds of thousands of FB users data that they retrieved by scraping public profiles. This is along the same lines, except it retrieves the private info by friending the account.

Feel free to read their motivation: http://fbpwn.tumblr.com/post/10171402996/fbpwn-release-motivation
 
Now all you need is an account with 5k friends and you can have tons of useful data
 
Yeah, like xpwizard said, this software is all about facilitating social engineering. It scales it up and automates much of the work, which isn't really a breakthrough in and of itself but it does help as an aid which I think is pretty tight. Thanks for sharing this.

Anyone just doing the FB PPC with success?
targeted, not a lot of $.
postCount++;
 
Back
Top