Skip to content

Commit

Permalink
Facebook has made a series of changes that compromised the functional…
Browse files Browse the repository at this point in the history 
…lity of FBHT.

(UN)fortunately, they didn't patch any of the vulnerbilities except "Like Flood" and Create Test Users (Massive, you can create 3 or 4 without a problem).
They didn't accept the bug for the massive test's account creation, so bad! but they fixed it just in case.
Crossed reference between nodes in graphs
  • Loading branch information
@chinoogawa
chinoogawa committed Mar 14, 2014
1 parent e370f6c commit 82887bf
Show file tree
Hide file tree
Showing 3 changed files with 259 additions and 245 deletions.
10 changes: 6 additions & 4 deletions MyParser.py
View file
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,8 @@ def parseData(dataRaw):


for data in dataRaw:
if data=="":
continue
text = data.strip("for (;;);")
json_dump = json.loads(text)
try:
Expand All @@ -33,16 +35,16 @@ def parseData(dataRaw):
print 'Error in json dump or parser.feed'

for i in range(len(parser.dataArray)):
if parser.dataArray[i] == 'Name:':
if parser.dataArray[i] == 'Name':
names.append(parser.dataArray[i+1])
continue
if parser.dataArray[i] == 'User ID:':
if parser.dataArray[i] == 'User ID':
userIds.append(parser.dataArray[i+1])
continue
if parser.dataArray[i] == 'Login email:':
if parser.dataArray[i] == 'Login email':
emails.append(parser.dataArray[i+1]+'@'+parser.dataArray[i+2])
continue
if parser.dataArray[i] == 'Login password:':
if parser.dataArray[i] == 'Login password':
passwords.append(parser.dataArray[i+1])
continue

Expand Down
82 changes: 52 additions & 30 deletions main.py
View file
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,9 @@
globalEmail = ''
globalPassword = ''

privacy = {'0':'80','1':'40','2':'10'}
privacySet = ['0','1','2']

def main():

global globalLogin
Expand All @@ -28,7 +31,7 @@ def main():
print ' \ \ / // / | | | | '
print ' \ V // /_ | |_| | '
print ' \_/|____(_\___/ '
print ' _ _ '
print ' ____ | | (_) '
print ' / __ \ ___| |__ _ _ __ ___ ___ __ _ __ ___ ____ _ '
Expand All @@ -40,8 +43,7 @@ def main():
print '\n\n\n\n\n\n'

raw_input('Enjoy it :D . Press enter to get started')



while 1:
option = -1
while ((int(option) != 1) and (int(option) != 2) and
Expand All @@ -66,7 +68,7 @@ def main():
print '7) Link Preview hack (Youtube version)\n'
print '8) Youtube hijack\n'
print '9) Private message, Link Preview hack (Simple web version)\n'
print '10) Private message, Link Preview hack (Youtube version)\n'
print '10) Private message, Link Preview hack (Youtube version)\n'
print '11) Like flood\n'
print '12) Publish a post as an App (App Message Spoof)\n'
print '13) Bypass friendship privacy\n'
Expand Down Expand Up @@ -151,13 +153,17 @@ def main():
password = globalPassword

if (login(email,password,'real'))!= -1:
summary = raw_input('Insert a summary for the link: ')
link = raw_input('Insert de evil link: ')
realLink = raw_input('Insert de real link: ')
title = raw_input('Insert a title for the link: ')
image = raw_input('Insert the image url for the post: ')
comment = raw_input('Insert a comment for the post associated: ')
linkPreview(link,realLink,title,summary,comment,image)
option = raw_input("Insert option for privacy 0:Public 1:Friends 2:Only Me : ")
if option in privacySet:
summary = raw_input('Insert a summary for the link: ')
link = raw_input('Insert de evil link: ')
realLink = raw_input('Insert de real link: ')
title = raw_input('Insert a title for the link: ')
image = raw_input('Insert the image url for the post: ')
comment = raw_input('Insert a comment for the post associated: ')
linkPreview(link,realLink,title,summary,comment,image, privacy[option])
else:
print "Wrong privacy value, try again "


if (int(option) == 7):
Expand All @@ -169,13 +175,17 @@ def main():
password = globalPassword

if (login(email,password,'real'))!= -1:
summary = raw_input('Insert a summary for the video: ')
link = raw_input('Insert de evil link: ')
videoLink = raw_input('Insert de youtube link: ')
title = raw_input('Insert a title for the video: ')
videoID = raw_input('Insert the video ID (w?=): ')
comment = raw_input('Insert a comment for the post associated to the video: ')
linkPreviewYoutube(link,videoLink,title,summary,comment,videoID)
option = raw_input("Insert option for privacy 0:Public 1:Friends 2:Only Me : ")
if option in privacySet:
summary = raw_input('Insert a summary for the video: ')
link = raw_input('Insert de evil link: ')
videoLink = raw_input('Insert de youtube link: ')
title = raw_input('Insert a title for the video: ')
videoID = raw_input('Insert the video ID (w?=): ')
comment = raw_input('Insert a comment for the post associated to the video: ')
linkPreviewYoutube(link,videoLink,title,summary,comment,videoID,privacy[option])
else:
print "Wrong privacy value, try again "

if (int(option) == 8):
signal.signal(signal.SIGINT, signal_handler)
Expand All @@ -187,13 +197,17 @@ def main():
password = globalPassword

if (login(email,password,'real'))!= -1:
summary = raw_input('Insert a summary for the video: ')
videoLink = raw_input('Insert de youtube link: ')
title = raw_input('Insert a title for the video: ')
videoID = raw_input('Insert the video ID (watch?v=): ')
comment = raw_input('Insert a comment for the post associated to the video: ')
hijackedVideo = raw_input('Insert the ID for the hijacked video (watch?v=): ')
hijackVideo(videoLink,title,summary,comment,videoID,hijackedVideo)
option = raw_input("Insert option for privacy 0:Public 1:Friends 2:Only Me : ")
if option in privacySet:
summary = raw_input('Insert a summary for the video: ')
videoLink = raw_input('Insert de youtube link: ')
title = raw_input('Insert a title for the video: ')
videoID = raw_input('Insert the video ID (watch?v=): ')
comment = raw_input('Insert a comment for the post associated to the video: ')
hijackedVideo = raw_input('Insert the ID for the hijacked video (watch?v=): ')
hijackVideo(videoLink,title,summary,comment,videoID,hijackedVideo)
else:
print "Wrong privacy value, try again "

if (int(option) == 9):
signal.signal(signal.SIGINT, signal_handler)
Expand Down Expand Up @@ -314,12 +328,20 @@ def main():


if (int(option) == 15):
analize = int(raw_input('Analyze an existing one, or a new one? (0|1): '))
victim = raw_input('Insert the victim username or userId: ')
if (analize == 1):
analyzeGraph(victim)

if (globalLogin == False):
email,password = setMail()
else:
reAnalyzeGraph(victim)
email = globalEmail
password = globalPassword

if (login(email,password,'real'))!= -1:
analize = int(raw_input('Analyze an existing one, or a new one? (0|1): '))
victim = raw_input('Insert the victim username or userId: ')
if (analize == 1):
analyzeGraph(victim)
else:
reAnalyzeGraph(victim)

if (int(option) == 16):
fileName = raw_input('Insert the victim username: ')
Expand Down
Loading

0 comments on commit 82887bf

Please sign in to comment.