+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: [Help]I reported Facebook Open redirection vul but tilll now i did not get reply.Why? (/showthread.php?tid=3430747)
[Help]I reported Facebook Open redirection vul but tilll now i did not get reply.Why? - Mr.Phoenix - Apr 23, 2013
Actually day before yesterday i have reported open redirection vulnerability to facebook.It works perfectly in all browsers.It wont prompt security measures.But the user must signed into their account Otherwise it wil give errors.We can trick the users to redirect to malicious sites while chatting by sending that url to them and also we can trick them to download our virus files via PM.I have included 14 different urls from different parameters with that.But till now i did not get any reply from them. Really i was disappointed.I am really feeling bad 😭
How many days i need to wait for their response? will they reply me? Is this an valid vulnerability. Hope you guys must have experience in this..
I need a good advice from you guys :(
* - BottleOWater - Apr 23, 2013
This is in the wrong section man x)
and sorry i can't help with that :S
* - MattiasR - Apr 23, 2013
(Apr 23, 2013 10:26 AM)Mr.Phoenix Wrote: Actually day before yesterday i have reported open redirection vulnerability to facebook.It works perfectly in all browsers.It wont prompt security measures.But the user must signed into their account Otherwise it wil give errors.We can trick the users to redirect to malicious sites while chatting by sending that url to them and also we can trick them to download our virus files via PM.I have included 14 different urls from different parameters with that.But till now i did not get any reply from them. Really i was disappointed.I am really feeling bad 😭
How many days i need to wait for their response? will they reply me? Is this an valid vulnerability. Hope you guys must have experience in this..
I need a good advice from you guys :(
If it's that App url redirection vuln, it has been reported dosens of times.
* - Mr.Phoenix - Apr 24, 2013
(Apr 23, 2013 03:34 PM)MattiasR Wrote: If it's that App url redirection vuln, it has been reported dosens of times.
No !!
Its actually appears in facebook main domains and also mobile site by using 0auth.I am really dont know whether it is valid one or not ? :(
Am i going to get disappointment?? Any body here, can u plz expain me??
* - "The Anonymous" - Apr 24, 2013
Can u plz teach me the method Mr.Phoenix?
* - Mr.Phoenix - Apr 24, 2013
(Apr 24, 2013 02:50 AM)"The Anonymous Wrote: Can u plz teach me the method Mr.Phoenix?
Sorry !! 😯
Actually it was confidential !
I must not disclose it in public until i get reply from facebook team.
Hope atleast i will get a reply from them..Lets see what is going to happen?
* - jenat - Apr 24, 2013
I think they will not respond you because they got hundreds of mails daily .You have to try other way .eg.mailing to their department or fax ? So, you can get reward .
* - Thompiss - Apr 24, 2013
(Apr 24, 2013 02:47 AM)Mr.Phoenix Wrote: No !!
Its actually appears in facebook main domains and also mobile site by using 0auth.I am really dont know whether it is valid one or not ? :(
Am i going to get disappointment?? Any body here, can u plz expain me??
App redirection vuln? The one used for phishing?
* - Mr.Phoenix - Apr 24, 2013
(Apr 24, 2013 12:30 PM)HitLaden Seclorium Wrote: App redirection vuln? The one used for phishing?
Yeah of course !!
And also even we can trick users to download malicious files directly by sending that links to fb users via chat. But still no response :(
4 days gone :( 😯
* - Mr.Phoenix - Apr 30, 2013
will anyone clear my doubts??
Will facebook approve open redirection Vulnerability nowadays?
* - InspectorGadget - Apr 30, 2013
Do what others said, email them or fax them etc, you'll get a better response.