ProxiesFood: Unlimited Residential Proxy ◆ Spoof Call and Spoof SMS set any caller ◆ Cheap KYC Verifications & Openups ◆ Anvilpoint CyberOps - Hacker for Hire ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Beginner Hacking › [Help]I reported Facebook Open redirection vul but tilll now i did not get reply.Why?

New Reply 

[Help]I reported Facebook Open redirection vul but tilll now i did not get reply.Why?
Mr.Phoenix
Mr.Phoenix Offline
[closed@HF:]
Posts:
264
Threads:
27
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 23, 2013 10:26 AM
Actually day before yesterday i have reported open redirection vulnerability to facebook.It works perfectly in all browsers.It wont prompt security measures.But the user must signed into their account Otherwise it wil give errors.We can trick the users to redirect to malicious sites while chatting by sending that url to them and also we can trick them to download our virus files via PM.I have included 14 different urls from different parameters with that.But till now i did not get any reply from them. Really i was disappointed.I am really feeling bad 😭
How many days i need to wait for their response? will they reply me? Is this an valid vulnerability. Hope you guys must have experience in this..

I need a good advice from you guys :(
BottleOWater
BottleOWater Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,728
Threads:
174
Credibility:
000
Popularity:
6
βytes:
β 0
Game XP:
0
Apr 23, 2013 02:19 PM (This post was last modified: Apr 23, 2013 02:19 PM by BottleOWater.)
This is in the wrong section man x)
and sorry i can't help with that :S
MattiasR
Guest
 
Apr 23, 2013 03:34 PM
(Apr 23, 2013 10:26 AM)Mr.Phoenix Wrote:  Actually day before yesterday i have reported open redirection vulnerability to facebook.It works perfectly in all browsers.It wont prompt security measures.But the user must signed into their account Otherwise it wil give errors.We can trick the users to redirect to malicious sites while chatting by sending that url to them and also we can trick them to download our virus files via PM.I have included 14 different urls from different parameters with that.But till now i did not get any reply from them. Really i was disappointed.I am really feeling bad 😭
How many days i need to wait for their response? will they reply me? Is this an valid vulnerability. Hope you guys must have experience in this..

I need a good advice from you guys :(

If it's that App url redirection vuln, it has been reported dosens of times.
Mr.Phoenix
Mr.Phoenix Offline
[closed@HF:]
Posts:
264
Threads:
27
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 24, 2013 02:47 AM (This post was last modified: Apr 24, 2013 02:50 AM by Mr.Phoenix.)
(Apr 23, 2013 03:34 PM)MattiasR Wrote:  If it's that App url redirection vuln, it has been reported dosens of times.

No !!
Its actually appears in facebook main domains and also mobile site by using 0auth.I am really dont know whether it is valid one or not ? :(
Am i going to get disappointment?? Any body here, can u plz expain me??
"The Anonymous"
Guest
 
Apr 24, 2013 02:50 AM
Can u plz teach me the method Mr.Phoenix?
Mr.Phoenix
Mr.Phoenix Offline
[closed@HF:]
Posts:
264
Threads:
27
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 24, 2013 03:00 AM
(Apr 24, 2013 02:50 AM)"The Anonymous" Wrote:  Can u plz teach me the method Mr.Phoenix?

Sorry !! 😯
Actually it was confidential !
I must not disclose it in public until i get reply from facebook team.
Hope atleast i will get a reply from them..Lets see what is going to happen?
jenat
Guest
 
Apr 24, 2013 10:22 AM
I think they will not respond you because they got hundreds of mails daily .You have to try other way .eg.mailing to their department or fax ? So, you can get reward .
Thompiss
Thompiss Away
[closed@HF:]
Posts:
512
Threads:
30
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 24, 2013 12:30 PM
(Apr 24, 2013 02:47 AM)Mr.Phoenix Wrote:  No !!
Its actually appears in facebook main domains and also mobile site by using 0auth.I am really dont know whether it is valid one or not ? :(
Am i going to get disappointment?? Any body here, can u plz expain me??

App redirection vuln? The one used for phishing?
Mr.Phoenix
Mr.Phoenix Offline
[closed@HF:]
Posts:
264
Threads:
27
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 24, 2013 01:23 PM
(Apr 24, 2013 12:30 PM)Thompiss Wrote:  App redirection vuln? The one used for phishing?

Yeah of course !!
And also even we can trick users to download malicious files directly by sending that links to fb users via chat. But still no response :(
4 days gone :( 😯
Mr.Phoenix
Mr.Phoenix Offline
[closed@HF:]
Posts:
264
Threads:
27
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 30, 2013 05:25 AM
will anyone clear my doubts??
Will facebook approve open redirection Vulnerability nowadays?
InspectorGadget
InspectorGadget Offline
One more thread - shit it's 2AM..
**********
Legends
Posts:
4,457
Threads:
387
Credibility:
2500
Popularity:
1,447
βytes:
β 7,478.87
Game XP:
104
Apr 30, 2013 06:39 AM
Do what others said, email them or fax them etc, you'll get a better response.
[Image: nodeslovesrussia.png]
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by QuanzoDec 13, 2025 05:20 AM 7 308 Dec 13, 2025 05:20 AM
Last Post: idirit
by MrRobotMar 15, 2019 11:46 AM 6 204 Mar 15, 2019 11:46 AM
Last Post: k45h
by XiiinJul 5, 2017 11:46 PM 2 72 Jul 5, 2017 11:46 PM
Last Post: THC