RE: get_file_contents php 06-08-2014, 11:22 AM
#10
(06-08-2014, 11:13 AM)dropzon3 Wrote: A login to facebook looks something like:
Code:POST /login.php?login_attempt=1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 Referer: https://www.facebook.com/?stype=lo&jlou=Afd4XBdZVheUjF5ZdeR_FAKE_C6Yb_XIfyd1gU-c9mdm8PFNa6sD31467hPQAqKkvEnyXqN_xy&smuh=4888&lh=Ac-8_&aik=naTwA Cookie: wd=1266x359;reg_fb_ref=asldkfasflkasjdfsadfsafas;etc... Host: www.facebook.com DNT: 1 Connection: keep-alive Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 timezone=240&pass={password}&lsd=AVuFRDlo&locale=en_US&lgnrnd=050614_qu39&lgnjs=1402221972&email={EMAIL}&defalt_persistent=1
its the response to this request that you'd want. That said facebook only leaks the name if the browser has logged into the account with that email before. It won't leak the name if its just a random email you've not logged into before. So you may be wasting your time.
I'm going to use some of these websites too!
pipl - pipl.com/search/?Email={$email}&CategoryID=4&Interface=1
Google Dorks (Allintext) - https://www.google.se/?gfe_rd=cr&ei=9TiU...#36;email}
Google Dorks (Allinurl:user/) - https://www.google.se/?gfe_rd=cr&ei=9TiU...#36;email}
etc etc
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)