+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Facebook redirect url trick injection vulnerability[TUT] (/showthread.php?tid=4005910)
Facebook redirect url trick injection vulnerability[TUT] - neil5050 - Jan 18, 2014
Using chrome browser for this
1. go to your main profile
2. type in any site
For example -> I am going to do www.google.com
![[Image: Mzx8rtx.jpg]](https://i.imgur.com/Mzx8rtx.jpg)
3. Right click the status and hit inspect element -> must be on chrome browser
![[Image: MszDTcV.jpg]](https://i.imgur.com/MszDTcV.jpg)
4.go to where it says user
![[Image: 6Ol7miy.jpg]](https://i.imgur.com/6Ol7miy.jpg)
5. change url to whatever. for example changing it to myspace
![[Image: 46n5fe3.jpg]](https://i.imgur.com/46n5fe3.jpg)
6. hit post
7. Should go to myspace.com when someone clicks it
![[Image: TiN23JY.jpg]](https://i.imgur.com/TiN23JY.jpg)
* - RKO - Jan 18, 2014
Great share mate :-) This trick will be useful for many other websites too like twitter, etc.
* - neil5050 - Jan 19, 2014
yup -> this is a big share and I saw no one else posted it anywhere
* - Huskar - Jan 19, 2014
Wow this is cool I will try it later.
Thanks op. 😝
* - neil5050 - Jan 19, 2014
Its very simple, and I recommend to abuse till its patched.
* - DarK-D3v!L - Jan 19, 2014
great trick bro , thanks for sharing that with us , it might be very usefull !
Best regards
* - Huskar - Jan 19, 2014
Did you find this out yourself?
and I don't think they can patch this haha :p
* - neil5050 - Jan 19, 2014
Feel free to test it -> it should work if you attempt it right now. And you can do a lot with this trick.
* - Sexy Devil - Jan 19, 2014
Thank you for sharing...
this is cool~
* - neil5050 - Jan 19, 2014
I am hoping this becomes a hot topic pretty soon. And your welcome sexy.
* - jax2011 - Jan 19, 2014
it say:"The message cannot be post in this board"
Edit: now it work, i had no put initial https :)
* - BlackHack00 - Jan 19, 2014
Greate share...It would be very useful :)
* - AJFKing - Jan 19, 2014
Amazing trick, I'll be messing around with this today for sure. Thanks a lot for the share!
* - hackermafia - Jan 19, 2014
very nice bro good trick is working......
* - Right - Jan 19, 2014
Thanks for sharing man, should be helpful.
🤝