Facebook Exploit - removing others tags

Researching, Proof of Concepts, Hacking, Console Modding and Hacking and more. No game hacking / modding here.
Post Reply
User avatar
KEN
Special
Special
Posts: 751
Joined: Thu Jan 28, 2010 8:11 am

Facebook Exploit - removing others tags

Post by KEN »

So if u tag someone in your uploaded pic u get option to remove the tag.
if someone tags u in their uploaded pic,u get option to remove your own tag but not of others who are tagged in it.
I want to know can we do something to remove others tags?

It is quite possible i think.When we remove our tag,this info must be going:
1> Your id number.
2> your name

so i wondor if we can change these two things and something else to remove someone else's tag instead of our..

I did this sort of thing with tamper data and this is what happened:
(remove tag) option disappeared from that pic :D
My name was appearing only on the pic(when u move mouse cursor to that place) but below where it says: "in this photo" i was not there lol
so noone can remove that tag.yes noone ^^ not even the one who uploaded that pic.He can only delete the pic,not the tag..so if i was able to do this then there must be some way to remove others tags too...please take a look into it and dont say its useless,its fun to remove others tags and they say "wtf? i just tagged,where it is now?" XD
User avatar
Sethioz
Admin
Admin
Posts: 4762
Joined: Fri Jul 27, 2007 5:11 pm
Custom: Gaming YT > https://youtube.com/SethiozEntertainment
Game Hacking YT > https://youtube.com/sethioz
Game Hacks Store > https://sethioz.com/shopz
Location: unknown
Contact:

Re: Facebook Exploit - removing others tags

Post by Sethioz »

i havent really checked into facebook hacking / exploiting. might in future tho.
i assume it has something to do with session ID or cookie. pretty much same. make 2 accounts and test. try using other cookie ..etc.

i didnt really understand how you make unremovable tag. what did you do / remove exactly ? more details.
tampering with such things isnt hard, but getting other person's permission is a lot harder. for example on some sites you can rate something and change 10 into 1000 ..etc using intercepting proxy. thats quite common.
User avatar
KEN
Special
Special
Posts: 751
Joined: Thu Jan 28, 2010 8:11 am

Re: Facebook Exploit - removing others tags

Post by KEN »

I did quite some tags of u,i can show u how i did that unremovable tag if u r there and tag me.
there is nothing much in it.Most important thing that we need is actually id of the person.We can find that on their id like this:

Code: Select all

http://www.facebook.com/profile.php?id=xxxxxxxxxxx
Note:I will use your id for example so u get it easily...and whatever i m posting about your id is already public,nothing personal

some people change their id to something else like u have: http://www.facebook.com/sethioz
so for such times,to get id do this:
go to persons profile,there will be option of poke.right click and copy link address,paste it in notepad so this is what i got from your id:

Code: Select all

http://www.facebook.com/ajax/poke_dialog.php?uid=100000028333055&pokeback=0
so here we get your id number: "100000028333055"
so if u go to http://www.facebook.com/profile.php?id=100000028333055 then u will be directed to your id.

How To Make Tag Undeletable:
Now suppose you uploaded a pic.To get unmovable tag,this is what i did:

went to your pic.
tagged myself.
Then started tampering data.
clicked on "remove tag"
there i saw 2 id's...one was your's(coz its your album) and 2nd was mine(coz its removing my tag)
then i changed mine id to,your id i.e. 100000028333055

and ok...facebook gave error that it have encountered a problem.No worry,refresh page and my tag was undeletable(delete tag option was gone from both id's your's and mine)

Yep,tested with 2 accounts.I think we will have to change something else too,not just id numbers.
User avatar
Sethioz
Admin
Admin
Posts: 4762
Joined: Fri Jul 27, 2007 5:11 pm
Custom: Gaming YT > https://youtube.com/SethiozEntertainment
Game Hacking YT > https://youtube.com/sethioz
Game Hacks Store > https://sethioz.com/shopz
Location: unknown
Contact:

Re: Facebook Exploit - removing others tags

Post by Sethioz »

seems interesting, i will put it into my projects list. isnt webscarab better than tamper data to do all this. tamper data is primitive and very limited. webscarab full is a lot better tool, anyway i will test.
also there is something like firebug only for flash, which might work very well on fb. i cant remember what it was called
Post Reply