facebook facebook twitter rss

Facebook URL open redirection

Author: The Black Devils , Published: 02-12-2013
# Exploit Title: Facebook URL open Redirection
# Date: 05/11/2013 - 01/01/1435
# Exploit Author: The Black Devils " Asesino04"
# Vendor Homepage: http://www.facebook.com/
# Tested on: Mozilla firefox

First let's talk about redirection in facebook when you send a link to someone in facebook chat or post
facebook create a security token for every single link , so your link must be like that so you can rediect
http://www.facebook.com/l.php?u=attackersite.com&h=security token
using this exploit you wont need security token and you can trick victimes easily

# You go this page
and you copy the link of "download sdk"


# you keep only this

# then you add to it

#so it became like that :


Like us on Facebook :