Page 1 of 1

Facebook Pictures

PostPosted: Thu Nov 15, 2012 2:50 pm
by limdis
Alright, so here is a little trick I picked up on the other day whilst bored. Most likely won't last too long but hey share the knowledge right!

Facebook image link:
Code: Select all
http://sphotos-b.xx.fbcdn.net/hphotos-prn1/24529_403577343734_4007343_n.jpg


View one of your images with Facebook's image viewer:
I changed this to keep you guys from finding this account, it wont work ;)
Code: Select all
http://www.facebook.com/photo.php?fbid=000000000000000&set=a.111111111111111.22222.333333333333333&type=1&theater


Now replace the zeros in your viewer with this portion:
/hphotos-prn1/24529_403577343734_4007343_n.jpg

If the picture/profile is not private you will now be viewing the image on the actual Facebook profile. Success.



Script kiddie tutorial of the day brought to you by limdis

Re: Facebook Pictures

PostPosted: Thu Nov 15, 2012 4:29 pm
by not_essence2
Nice little trick. Skiddies :)
But sadly, we can't use it like Directory Traversal.

Re: Facebook Pictures

PostPosted: Fri Nov 16, 2012 11:29 pm
by mShred
Sunnava bitch. I knew there had to be a way to do this. I don't know why I never fuckin looked into it though. The fbid is too obvious. Either way, good find.

Re: Facebook Pictures

PostPosted: Sat Nov 17, 2012 10:13 am
by limdis
Fbid is pointless now really. But if curious, that's the 3's in the viewer and the 1's is the album id. Just throw that into the url. For example with the example:

http://www.facebook.com/468608253734 --> Album
http://www.facebook.com/7177913734 --> fbid

Some more fun:
http://www.facebook.com/profile.php?=281341509