Hacking Any Facebook Accounts using REST API

By -

By Parth Makadiya

Sponsored Links
Stephen Sclafani , a Security Researcher, has discovered a critical security vulnerability in the Social Networking giant Facebook that allowed him to hack any facebook accounts.

Stephen just need your user ID, he can hack into your account and read private messages, view email addresses, create or delete notes, on top of that he can update status and upload photos and tag you friends,  on behalf you. 

"A misconfigured endpoint allowed legacy REST API calls to be made on behalf of any Facebook user using only their user ID" Stephen explained in his blog.

The Facebook REST API is said to be predecessor of Facebook’s current Graph API.  He managed to send request to server using this API such that it will update status on behalf of victim.


Stephen found this bug in April 23 and reported to Facebook.  After getting notification, Facebook permanently fixed the bug on April 30th. Facebook awarded $20,000 bounty to him for finding and reporting this bug.

Comments

Post a Comment

Popular posts from this blog

4 Ways to Crack a Facebook Password and How to Protect Yourself from Them

By -
Image
     We share our lives on Facebook. We share our birthdays and our anniversaries. We share our vacation plans and locations. We share the births of our sons and the deaths of our fathers. We share our most cherished moments and our most painful thoughts. We divulge every aspect of our lives. We even clamor to see the  latest versions even before they're ready  for primetime. But we sometimes forget who's watching. We use Facebook as a tool to connect, but there are those people who use that connectivity for malicious purposes. We reveal what others can use against us. They know when we're not home and for how long we're gone. They know the answers to our security questions. People can practically steal our identities—and that's just with the visible information we purposely give away through our public Facebook profile. The scariest part is that as we get more comfortable with advances in technology, we actually become more susceptible to h...
Read more

Learn How to Code: 22 Free Online Resources

By -
Image
MOST POPULAR 120 comments Is Buying a Sound Card Worth The Money? An Enthusiast's Perspective Silverstone Raven X Case Review: Flagship level cooling, priced for the masses 14 comments Western Digital converts Green hard drives to Blue in branding makeover T-Mobile 's next Un-carrier move could be free data for streaming video 16 comments Microsoft is making Windows 10 an automatic update next year 9 comments WB recommends 12GB RAM for Batman: Arkham Knight as some PC gamers report the game is STILL broken Twitch now caters to artists with dedicated Creative hub 8 comments Samsung SSD 950 Pro M.2 performance preview Parth Whether you’re looking for something new to learn, or just want to refresh your memory on something that might be a bit rusty, there are plenty of free sources online that you can take advantage of free code classes. According to the U.S. Bureau of Labor Statistics, ...
Read more

IDM LIFETIME HACK FREE -- RESET TRIAL

By -
hello users,                     I don have much Time To wrieT and ediT This posT .So leT me be sraighT To The poinT.                       we have new hack To renew The Trial period of IDM and so u can use The sofware free for life Time ........ Download 1 MB SOFtWARE Download or https://app.box.com/s/e4ei9pkrqnel5za74fea9p6lbow2zdht Enjoy  ........... OTHER CRACK LINK https://app.box.com/files/0/f/0/1/f_44461672569 http://alltricks007.blogspot.in/2015/08/internet-download-manager-idm-universal.html
Read more