1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

I found a security gap in Facebook

Discussion in 'FaceBook' started by sami gün, Jan 4, 2017.

Thread Status:
Not open for further replies.
  1. sami gün

    sami gün BANNED BANNED

    Joined:
    Dec 9, 2016
    Messages:
    26
    Likes Received:
    1
    I am able to see any person's photos even if i am not in their contact list, or the user's photos are hidden/private.

    just tell me a random username and I will show you his/her photos so I can see if it really works.
     
  2. immortal.deni

    immortal.deni Newbie

    Joined:
    Feb 25, 2013
    Messages:
    30
    Likes Received:
    1
    Gender:
    Male
    Location:
    Albania
    Home Page:
    Why u don't share this method with us.
     
  3. sami gün

    sami gün BANNED BANNED

    Joined:
    Dec 9, 2016
    Messages:
    26
    Likes Received:
    1
    before sharing it i need to be 100% sure if my method is working, is there a person you would like me to check it? it could be your gf/bf account, i could check it and Show you his/her photos :)
     
  4. StarX

    StarX Junior Member

    Joined:
    Dec 23, 2015
    Messages:
    107
    Likes Received:
    48
    Gender:
    Male
    Dude, that sec flaw was discovered some time ago, it's not new.

    It is suspicious that you search from bhw members some fb friend profile to check it, because you could do it yourself.

    If you re sure you discover something new, you would not share it public. You will apply for bug bounty. So again suspicious.
     
    • Thanks Thanks x 3
  5. sami gün

    sami gün BANNED BANNED

    Joined:
    Dec 9, 2016
    Messages:
    26
    Likes Received:
    1
    WTF are you talking about?
     
  6. Asif WILSON Khan

    Asif WILSON Khan Executive VIP Jr. VIP

    Joined:
    Nov 10, 2012
    Messages:
    11,478
    Likes Received:
    32,422
    Gender:
    Male
    Occupation:
    Fun Lovin' Criminal
    Location:
    London
    Home Page:
    Dodgy Dodgy Dodgy
     
    • Thanks Thanks x 2
  7. BackY

    BackY Senior Member

    Joined:
    Dec 28, 2012
    Messages:
    1,151
    Likes Received:
    267
    My bad, dont use ur private site for a stupid pic lol.
     
  8. sami gün

    sami gün BANNED BANNED

    Joined:
    Dec 9, 2016
    Messages:
    26
    Likes Received:
    1
    i needed to use my server to Show it to you becasue i was not allowed to post links since i am new.
     
  9. Asif WILSON Khan

    Asif WILSON Khan Executive VIP Jr. VIP

    Joined:
    Nov 10, 2012
    Messages:
    11,478
    Likes Received:
    32,422
    Gender:
    Male
    Occupation:
    Fun Lovin' Criminal
    Location:
    London
    Home Page:
  10. sami gün

    sami gün BANNED BANNED

    Joined:
    Dec 9, 2016
    Messages:
    26
    Likes Received:
    1
    his photo album is public. just select another person whose photos are private/hidden or not accessible from public
     
  11. BackY

    BackY Senior Member

    Joined:
    Dec 28, 2012
    Messages:
    1,151
    Likes Received:
    267
    Just use a google chrome plugin, showed the same results he sent me on PM lol.
     
  12. DanielOnYouTube

    DanielOnYouTube Regular Member

    Joined:
    Apr 22, 2016
    Messages:
    242
    Likes Received:
    67
    Okay, and how do you monetize this?
    Lol.
     
  13. HoNeYBiRD

    HoNeYBiRD Jr. VIP Jr. VIP

    Joined:
    May 1, 2009
    Messages:
    6,953
    Likes Received:
    7,985
    Gender:
    Male
    Occupation:
    Geographer, Tourism Manager
    Location:
    Ghosted
    And that's the part where you're supposed to share the url of the Chrome plugin, so i can stalk some birds. :)
     
    • Thanks Thanks x 4
  14. Aaric

    Aaric Jr. VIP Jr. VIP

    Joined:
    Mar 7, 2010
    Messages:
    1,827
    Likes Received:
    1,178
    Gender:
    Male
    Occupation:
    Reputation Adder
    Location:
    Vegas
  15. BackY

    BackY Senior Member

    Joined:
    Dec 28, 2012
    Messages:
    1,151
    Likes Received:
    267
    Google: PictureMate chrome
     
  16. HoNeYBiRD

    HoNeYBiRD Jr. VIP Jr. VIP

    Joined:
    May 1, 2009
    Messages:
    6,953
    Likes Received:
    7,985
    Gender:
    Male
    Occupation:
    Geographer, Tourism Manager
    Location:
    Ghosted
    Yea, i know about that one. That's not it though. You can't see private albums with that one, only those pics where the person is tagged.
     
  17. Zwielicht

    Zwielicht Moderator Staff Member Moderator Jr. VIP

    Joined:
    Aug 31, 2013
    Messages:
    6,629
    Likes Received:
    11,764
    Gender:
    Male
    Occupation:
    Private Investigator
    Location:
    Riverside, California
    Home Page:
    I wrote an article a couple of years ago on this exact topic (it still brings in a bunch of traffic to this day since I rank for nearly every variation of "view private Facebook photos").

    For those of you who are interested, back in late 2014, there actually was a way to view private Facebook photos using with the “Photos Of…" feature from the Knowledge Graph, though this was patched sometime in 2015.

    Then there was also the photo galleries link method back in 2015, but again, this got patched.

    Finally, there was another method that involved using the Facebook graph URL, but once again, it got patched.

    As far as I'm concerned, at the moment, there aren't any new exploits available.
     
  18. RafaViQ

    RafaViQ Power Member

    Joined:
    Jul 19, 2014
    Messages:
    546
    Likes Received:
    201
    Gender:
    Male
    Occupation:
    ?
    Location:
    Home
    Home Page:
    Are you currently monetizing that traffic? You could make some money with CPA.
     
  19. Zwielicht

    Zwielicht Moderator Staff Member Moderator Jr. VIP

    Joined:
    Aug 31, 2013
    Messages:
    6,629
    Likes Received:
    11,764
    Gender:
    Male
    Occupation:
    Private Investigator
    Location:
    Riverside, California
    Home Page:
    I only have a solitary Adsense ad running on my business site now. I may properly monetise that blog in the future (either with CPA or selling ad space), though right now I have other things to focus on.
     
  20. T0NYS

    T0NYS Supreme Member

    Joined:
    Jun 21, 2014
    Messages:
    1,339
    Likes Received:
    1,029
    Gender:
    Male
    Location:
    #Shqipo
    report it as a glitch , they do have a program that rewards the white hats for each glitch they do report ,

    I hate fb lol , had found a glitch back in 2013 , reported it and they didnt pay me shit , 2 weeks later the glitch was patched , but hey worth a try :D
     
Thread Status:
Not open for further replies.