Connect With Me In Facebook

Welcome to DefendHackers, If u want to Apply for a Blogroll as a Author , With h4ckfreak Mail me @ suren.click@gmail.com

Friday, March 11, 2011

Facebook Hacking Finding the Target, Mar, 2011(UPDATED)

Hell Ya..i just wasted my time By watching 2011, "BATTLE OF LOS ANGELS" This Movie is a Bunch of Holy craps, But People or Family Who sent a Guy to ARMY May lit a drop of tears..i agree with tat..Lets back to Business here lemme tell u folks, This is Truly for Educational Purposes, I Jus got this From a friend in a Forum, I Told him tat am not gonna release..But As i told before just sharing for edu Purposes and Its Exclusively Only On DEFENDHACKERS, Peoples Often wanna kno  IPs from Facebook messages. I myself have participated in forums where I said it wasn't something you could do because Facebook keeps the IPs of the users in their system. That was until I noticed something ... peculiar ... about the notification emails that are sent to my email address. 


Depending on your email preferences, you will be familiar with the subject line: "<Facebook user> sent you a message on Facebook...", or "<Facebook user> commented on a photo of you on Facebook..." -- the headers of these messages should just tell you IP addresses of mail servers in Facebook's network, right? Yes, but it will also tell you the IP of the user. It wasn't immediately obvious to me because they are Base64 encoded. But sure enough, Facebook is nice enough to note the IP address of the user they're notifying you about. Get a message? Get a comment? Get a link? Whatever user is in that notification email, Facebook forwarded their IP to you.

In the headers, look for the line that says "X-Facebook". Here's an example:

X-Facebook: from ADRIANLAMO(He is ma Inspiration all tha time,and he get himelf wit Drugs n Stuffs) ([OTcuODMuMjEuMjM=]) by www.facebook.com with HTTP (ADRIAN LAMO);
  
It never really occurred to me when I would read over these headers. But: Grab a Google search engine and type in "Base64 convert" or something similar, and decode "OTcuODMuMjEuMjM=" into ASCII: 97.83.21.23

Why does Facebook do this? Probably to give them something to go on in cases of abuse. Maybe it's for their own testing purposes, as Facebook staff members undoubtedly have accounts themselves, and they can verify IP addresses when they get test messages. Who knows?

Sent someone a Facebook comment and they miraculously know your IP, and you don't know how? There ya go.  This is How...

And i See Some peoples really want to help regarding my English, LOL am makin Hell lotta mistakes i barely kno, But i Asked Some of ma US Friends. JOHNSON(Name Changed) ..He knows tat am makin Hell lotta mistakes, BUT STILL he Said "DUDE UR ENGLISH IS TOP NOTCH"  ..Ha ha ha ha..So Drop Comments n feedbacks always...
LAT3R
H4ckfreak

3 comments:

hmmm everywebsite have to keep a record of ip addresses its a must for security,spam etc etc purposes because its the only identity they have on the first sight

@hackfreak
good find let me try this on my friends nd getting ip of vulnerable system could be very handy as i am metasploit lover

secondly facebook sucks when comes to security google is giving 1337$ as bounty recently i discovered a bug nd reported them nd they were literally eating shit i just ingored them.

kudos to hackfreak

i find this in the email header

X-Facebook: from zuckmail ([MTI3LjAuMC4x])
by www.facebook.com with HTTP (ZuckMail);

but the result was 127.0.0.1
????

@h4ck0lic...Facebook Dev has nvr mind to our shits,..Coz they are addicted to FB Declopers Shits...May be tats y ..This is tha same thing happened with amarjit ..it seems that he Found a loophole in a googleApps..he also reported but They never mind..!! So for all this kinda Activity...We hae no Option rather Showing MIDDLE FINGER TO THEM...