+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Facebook Vulnerable to XSS (/Thread-Facebook-Vulnerable-to-XSS--48812)
Pages:
1
2
Facebook Vulnerable to XSS - m3Lv3L - 04-11-2013
Maybe someone had found this vulnerability on facebook, but I jurt want to share this for those who havent. First you need to log-in in facebook. Then click on the link below.
http://tinyurl.com/c4fuefl
If you can find anyother vulnerabilies or can inject cool scripts in it, then that would be awesome.
RE: Facebook Vulnerable to XSS - Asuna_mybb_import7736 - 04-11-2013
Where does the URL lead you?
RE: Facebook Vulnerable to XSS - H4R0015K - 04-11-2013
(04-11-2013, 08:14 AM)ILoveYou Wrote: Where does the URL lead you?
url lead you to
Code:
https://m.facebook.com/upload.php?album_fbid=3944423508799&aname=+%3D%3Dx%3D%3D%3Dx%3D%3D%3D+XSS+by+RAMZKIE+%3D%3D%3Dx%3D%3D%3Dx%3D%3D&aprivacy=%3C%3C%3C%3C%3C%3C%3C+m3Lv3L+Was+Here+%3E%3E%3E%3E%3E%3E%3E&refid=18RE: Facebook Vulnerable to XSS - Ex094 - 04-11-2013
Believe me, it doesn't even look like a part of Facebook! Looks more like a fake page to me (No Offense)
Just saying!
RE: Facebook Vulnerable to XSS - m3Lv3L - 04-11-2013
(04-11-2013, 08:14 AM)ILoveYou Wrote: Where does the URL lead you?
The URL lead me to the upload section in facebook, where in in the Privacy part, my name appeared on it..
How can I attach image here? And before I forget, you guys must be on your mobile
RE: Facebook Vulnerable to XSS - Ex094 - 04-11-2013
Is this it http://www.breaksec.com/?p=5713
RE: Facebook Vulnerable to XSS - m3Lv3L - 04-11-2013
Here's a proof for you my friends!
http://www.fidelityprintquick.com/uploads/20130411152643.png
(04-11-2013, 08:31 AM)Ex094 Wrote: Is this it http://www.breaksec.com/?p=5713
No, but that's a good addition
RE: Facebook Vulnerable to XSS - Ex094 - 04-11-2013
Tell you what, send the Facebook Security Team an email regarding that you've found an XSS on their website. Then wait for the reply
Only way to proof if it's legit!
RE: Facebook Vulnerable to XSS - Anima Templi - 04-11-2013
Since when do discussions about XSS vulnerabilities belong to the graphics section? Thread moved.
RE: Facebook Vulnerable to XSS - m3Lv3L - 04-11-2013
(04-11-2013, 08:43 AM)Ex094 Wrote: Tell you what, send the Facebook Security Team an email regarding that you've found an XSS on their website. Then wait for the reply
I have sent them a report already
(04-11-2013, 08:48 AM)Anima Templi Wrote: Since when do discussions about XSS vulnerabilities belong to the graphics section? Thread moved.
Sorry about that Sir, it wont happen again.