Facebook Pictures

[limdis]

Alright, so here is a little trick I picked up on the other day whilst bored. Most likely won't last too long but hey share the knowledge right!

Facebook image link:

Code: Select all

http://sphotos-b.xx.fbcdn.net/hphotos-prn1/24529_403577343734_4007343_n.jpg

View one of your images with Facebook's image viewer:
I changed this to keep you guys from finding this account, it wont work

Code: Select all

http://www.facebook.com/photo.php?fbid=000000000000000&set=a.111111111111111.22222.333333333333333&type=1&theater

Now replace the zeros in your viewer with this portion:
/hphotos-prn1/24529_403577343734_4007343_n.jpg

If the picture/profile is not private you will now be viewing the image on the actual Facebook profile. Success.



Script kiddie tutorial of the day brought to you by limdis

[not_essence2]

Nice little trick. Skiddies
But sadly, we can't use it like Directory Traversal.

[mShred]

Sunnava bitch. I knew there had to be a way to do this. I don't know why I never fuckin looked into it though. The fbid is too obvious. Either way, good find.

[limdis]

Fbid is pointless now really. But if curious, that's the 3's in the viewer and the 1's is the album id. Just throw that into the url. For example with the example:

http://www.facebook.com/468608253734 --> Album
http://www.facebook.com/7177913734 --> fbid

Some more fun:
http://www.facebook.com/profile.php?=281341509