#Facebook hacking methods 2014 pdf#
#Facebook hacking methods 2014 code#
#Facebook hacking methods 2014 plus#

He still was not satisfied and continued corresponding with the Facebook Security team, which ultimately realised the vulnerability in its file upload mechanism.ДЇacebook has acknowledged the vulnerability and according to its policy, rewarded Ramadan for his research.Here you will get genuine tips about hacking of anyone's Facebook account ID and Password along with hacking code and live example. He responded to the FacebookвЂ™s security team by sending them the forged CV to which FB got back with following reply : His findings were rejected outright the first time, with the following words. Without further ado, he informed the social network of his findings.

#Facebook hacking methods 2014 plus#

But he was confident that the attack he managed to pull off was aВ Blind XXE Out Of Band (OOB) plus it was a time-consuming process because he needed to upload and wait the result after 15 minutes or more. He tried to gain access to system files on the server, but failed to get access, most probably due to security mechanisms in place.

Directory Listing, Read system and application files and in some cases execute system commands using php expect:// wrapper.

Doomsday scenario: A widely deployed and highly connected application vulnerable to this attack may be used for DDoS.

NTLM authentication material theft by initiating UNC file access to systems under attacker control (far fetched?).

DoS on other systems (if parsing system is allowed to establish TCP connections to other systems).

Unauthorised access to data stored as XML files on the parsing system file system (of course the attacker still needs a way to get these data back).

TCP scans using HTTP external entities (including behind firewalls since application servers often have worldview different from that of the attacker).

DoS the parsing system by making it open, e.g.file:///dev/random | file:///dev/urandom | file://c:/con/con.

In his own words, he could now exploit this connection to: He had successfully managed to fool a Facebook server to connect to his server. I was going to close my terminal window and I was shocked to see that something connected to my python http serverвЂќ

I wasted about 15 minute or so chatting and browsing now it is timeВ to stop python http server and close Facebook and everything. IВ said to myself it is a total failure and I will check my Facebook profile instead and chat with some friends and play a game or somethingВ after this long FAILED try. вЂњNow everything is good and then I uploaded CV.docx to В and waited a minuteВ but Nothing happened. docx file format is basically a zippedВ xml files developed by MicrosoftВ and Ramadan saw a loophole in FacebookвЂ™s security system.В He created a fake CV with forged Microsoft Word document and uploaded onto the the Facebook careers web page.ДЄfter uploading the forged Word CV he waited for response from Facebook website.

#Facebook hacking methods 2014 pdf#

He successfully uploaded his CV onto Facebook but he realized he could only upload files in PDF or. After some digging, he came onto FacebookвЂ™s career page. Yet Ramadan decided to continue his quest. You can read more about these fixes here.ДЇacebook had clarified that it had fixed all of its servers so finding another XXE vulnerability seemed highly unlikely. An XXE (XML External Entity ) is a method that exploits a weak XML parsing mechanism.В This attack may lead to the disclosure of confidential data, denial of service, port scanning from the perspective of the machine where the parser is located, and other system impacts.

Many people have reported high severity bugs since 2010 and the social network had also patched a dangerous XXE Vulnerability affecting OpenID in late 2013. It is a known fact that Facebook does not have the most secure servers in the world. and has been rewarded with bug bounty reward by them. Ramadan has successfully found vulnerabilities in major service providers like Google, Facebook, Twitter, Microsoft etc.