(06-08-2014, 11:22 AM)RaccoonCity Wrote:

(06-08-2014, 11:13 AM)dropzon3 Wrote: A login to facebook looks something like:

Code:

POST /login.php?login_attempt=1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Referer: https://www.facebook.com/?stype=lo&jlou=Afd4XBdZVheUjF5ZdeR_FAKE_C6Yb_XIfyd1gU-c9mdm8PFNa6sD31467hPQAqKkvEnyXqN_xy&smuh=4888&lh=Ac-8_&aik=naTwA Cookie: wd=1266x359;reg_fb_ref=asldkfasflkasjdfsadfsafas;etc... Host: www.facebook.com DNT: 1 Connection: keep-alive Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 timezone=240&pass={password}&lsd=AVuFRDlo&locale=en_US&lgnrnd=050614_qu39&lgnjs=1402221972&email={EMAIL}&defalt_persistent=1

its the response to this request that you'd want. That said facebook only leaks the name if the browser has logged into the account with that email before. It won't leak the name if its just a random email you've not logged into before. So you may be wasting your time.

I'm going to use some of these websites too!

pipl - pipl.com/search/?Email={$email}&CategoryID=4&Interface=1

Google Dorks (Allintext) - https://www.google.se/?gfe_rd=cr&ei=9TiUU4-sMZPANICVgEg#q=allintext:{$email}

Google Dorks (Allinurl:user/) - https://www.google.se/?gfe_rd=cr&ei=9TiUU4-sMZPANICVgEg#q=allinurl:user/{$email}

etc etc

(06-08-2014, 04:33 PM)zomgwtfbbq Wrote:

(06-08-2014, 11:22 AM)RaccoonCity Wrote:

(06-08-2014, 11:13 AM)dropzon3 Wrote: A login to facebook looks something like:

Code:

POST /login.php?login_attempt=1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Referer: https://www.facebook.com/?stype=lo&jlou=Afd4XBdZVheUjF5ZdeR_FAKE_C6Yb_XIfyd1gU-c9mdm8PFNa6sD31467hPQAqKkvEnyXqN_xy&smuh=4888&lh=Ac-8_&aik=naTwA Cookie: wd=1266x359;reg_fb_ref=asldkfasflkasjdfsadfsafas;etc... Host: www.facebook.com DNT: 1 Connection: keep-alive Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 timezone=240&pass={password}&lsd=AVuFRDlo&locale=en_US&lgnrnd=050614_qu39&lgnjs=1402221972&email={EMAIL}&defalt_persistent=1

its the response to this request that you'd want. That said facebook only leaks the name if the browser has logged into the account with that email before. It won't leak the name if its just a random email you've not logged into before. So you may be wasting your time.

I'm going to use some of these websites too!

pipl - pipl.com/search/?Email={$email}&CategoryID=4&Interface=1

Google Dorks (Allintext) - https://www.google.se/?gfe_rd=cr&ei=9TiUU4-sMZPANICVgEg#q=allintext:{$email}

Google Dorks (Allinurl:user/) - https://www.google.se/?gfe_rd=cr&ei=9TiUU4-sMZPANICVgEg#q=allinurl:user/{$email}

etc etc

Be very careful with Google scraping, if you're pushing it too far you'll get ip banned. Haven't done this in a long time, but I remember when writing a tool for the hacksuite cms a few years ago that after a certain amount of result polling in x seconds, Google will reply with a captcha and if you ignore it for more than x times, Google will blacklist you. You have an even bigger problem if you use a hosting account on a shared server to do the polling.

(06-08-2014, 05:13 PM)RaccoonCity Wrote:

(06-08-2014, 04:33 PM)zomgwtfbbq Wrote:

(06-08-2014, 11:22 AM)RaccoonCity Wrote:

(06-08-2014, 11:13 AM)dropzon3 Wrote: A login to facebook looks something like:

Code:

POST /login.php?login_attempt=1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Referer: https://www.facebook.com/?stype=lo&jlou=Afd4XBdZVheUjF5ZdeR_FAKE_C6Yb_XIfyd1gU-c9mdm8PFNa6sD31467hPQAqKkvEnyXqN_xy&smuh=4888&lh=Ac-8_&aik=naTwA Cookie: wd=1266x359;reg_fb_ref=asldkfasflkasjdfsadfsafas;etc... Host: www.facebook.com DNT: 1 Connection: keep-alive Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 timezone=240&pass={password}&lsd=AVuFRDlo&locale=en_US&lgnrnd=050614_qu39&lgnjs=1402221972&email={EMAIL}&defalt_persistent=1

its the response to this request that you'd want. That said facebook only leaks the name if the browser has logged into the account with that email before. It won't leak the name if its just a random email you've not logged into before. So you may be wasting your time.

I'm going to use some of these websites too!

pipl - pipl.com/search/?Email={$email}&CategoryID=4&Interface=1

Google Dorks (Allintext) - https://www.google.se/?gfe_rd=cr&ei=9TiUU4-sMZPANICVgEg#q=allintext:{$email}

Google Dorks (Allinurl:user/) - https://www.google.se/?gfe_rd=cr&ei=9TiUU4-sMZPANICVgEg#q=allinurl:user/{$email}

etc etc

Be very careful with Google scraping, if you're pushing it too far you'll get ip banned. Haven't done this in a long time, but I remember when writing a tool for the hacksuite cms a few years ago that after a certain amount of result polling in x seconds, Google will reply with a captcha and if you ignore it for more than x times, Google will blacklist you. You have an even bigger problem if you use a hosting account on a shared server to do the polling.

Jesus, I didn't even know that. Thanks for the heads up!