I found a security gap in Facebook

Status
Not open for further replies.

sami gün

BANNED
Joined
Dec 9, 2016
Messages
26
Reaction score
1
I am able to see any person's photos even if i am not in their contact list, or the user's photos are hidden/private.

just tell me a random username and I will show you his/her photos so I can see if it really works.
 
before sharing it i need to be 100% sure if my method is working, is there a person you would like me to check it? it could be your gf/bf account, i could check it and Show you his/her photos :)
 
Dude, that sec flaw was discovered some time ago, it's not new.

It is suspicious that you search from bhw members some fb friend profile to check it, because you could do it yourself.

If you re sure you discover something new, you would not share it public. You will apply for bug bounty. So again suspicious.
 
Did PM him, he sent me a link to visit the photos. Didn't even bother to check it. He is so stupid didnt even try to mask his url.
Just BAN this moron.

WTF are you talking about?
 
i needed to use my server to Show it to you becasue i was not allowed to post links since i am new.
 
his photo album is public. just select another person whose photos are private/hidden or not accessible from public
 
Just use a google chrome plugin, showed the same results he sent me on PM lol.
 
Google: PictureMate chrome
Yea, i know about that one. That's not it though. You can't see private albums with that one, only those pics where the person is tagged.
 
I wrote an article a couple of years ago on this exact topic (it still brings in a bunch of traffic to this day since I rank for nearly every variation of "view private Facebook photos").

For those of you who are interested, back in late 2014, there actually was a way to view private Facebook photos using with the “Photos Of…" feature from the Knowledge Graph, though this was patched sometime in 2015.

Then there was also the photo galleries link method back in 2015, but again, this got patched.

Finally, there was another method that involved using the Facebook graph URL, but once again, it got patched.

As far as I'm concerned, at the moment, there aren't any new exploits available.
 
I wrote an article a couple of years ago on this exact topic (it still brings in a bunch of traffic to this day since I rank for nearly every variation of "view private Facebook photos").

For those of you who are interested, back in late 2014, there actually was a way to view private Facebook photos using with the “Photos Of…" feature from the Knowledge Graph, though this was patched sometime in 2015.

Then there was also the photo galleries link method back in 2015, but again, this got patched.

Finally, there was another method that involved using the Facebook graph URL, but once again, it got patched.

As far as I'm concerned, at the moment, there aren't any new exploits available.

Are you currently monetizing that traffic? You could make some money with CPA.
 
Are you currently monetizing that traffic? You could make some money with CPA.
I only have a solitary Adsense ad running on my business site now. I may properly monetise that blog in the future (either with CPA or selling ad space), though right now I have other things to focus on.
 
report it as a glitch , they do have a program that rewards the white hats for each glitch they do report ,

I hate fb lol , had found a glitch back in 2013 , reported it and they didnt pay me shit , 2 weeks later the glitch was patched , but hey worth a try :D
 
Status
Not open for further replies.
Back
Top