FBPwn – Facebook Profile Dumper

by

in Penetration Testing, Security Reconnaissance

Β What is FBPwn?

FBPWN is a crossplateform java based Facebook profile dumper developed by Information Security Analyst team from RISST, released under GPL License. This tiny but worth full application is still in beta phase but can do plenty of usefull jobs for you πŸ™‚

How FBPwn works?

FBPwn sends requests to your facebook friends/polls and wait for the acceptance notification. Once your target(victim) accepts friend request, it dumps all info that includes everything(username,email,friends list, etc) it is visible.

What if your victim UnFriend/Delete from friend list you?

This application is super fast and it fetches data rapidly as soon victim access requests. It will dump all victim information including username, email, friend list, photos and other info. So it doesn’t matter if victim figures out it as a fake account because it is too late πŸ˜€

Crawl Facebook Contact list, profiles that contain email addresses and build a
mailing list of million emails contact by writing a small piece of bash script.

How to use FBPwn?

As we said, it is cross platform so it can be run on any operating system that have java installed. In our example, i am using it on BackTrack Linux.

wget http://fbpwn.googlecode.com/files/FBPwn-beta-0.1.4.zip
unzip FBPwn-beta-0.1.3.zip
cd FBPwn-beta-0.1.3
./run.sh

We have shoot FBPwn Video Tutorial. It covers how can you use this application. But due to codecs we could not upload it youtube. that will be posted soon. Stay tune.

Update – 15th Sep, 2011:

Sorry guys we couldn’t convert it, ofcourse we tried few times but failed :-D. So STOP sending Video tutorial REQUESTS emails.

Download FBPwn Video TutorialΒ  directly from
https://rapidshare.com/files/507532677/FBPwn-Video-Tutorial.ogv

Related Posts:

Wasif

Nice tool for marketing (spamming) professionals.

Mr.Hax0r

Please post the Video. I got strictly problems with this tool. Perhaps your video get it to work!
Thx Hackers Garage

Silentplay3r

Hi Haxor

We are a little busy. We can send you in .ogv format if you can convert it for us πŸ˜€ Or you can play it directly using VLC player

If you are still having problem, let us know. We will try to resolve it for you πŸ™‚

MD

Please send copy of .ogy video. Thx.

Silentplay3r

Anyone who need video can send request on news [@] hackersgarage.com.

Also allow us few hours for the response. Thanks.

EaglE EyE

What user name and password should i use? I tried with my facebook acc and it does not worked! please give a reply!

Silentplay3r

EaglE EyE
You need to enter Facebook user name and password. e.g my username is silentplay3r

Don’t enter email address that you use for login at facebook πŸ™‚

Silentplay3r

FBPwn Video Tutorial can be download from rapidshare :
https://rapidshare.com/files/381713326/FBPwn-Video-Tutorial.ogv

Also we will could appreciate, if someone convert it to avi/flv and upload it to youtube πŸ™‚

SHARE the Knowledge!

Tony

…ail,friends list, etc) it is visible. Please clarify what this exactly means. Is it that only the visible face book ‘friends’ etc will be dumped or does it also dump non-visible f.e. friends?

Silentplay3r

@Tony
It will not dump non-visible friends. It will dump all those information which privacy is set to friends.

mat

hi
can’t login, it tells me this :

“java.util.concurrent.ExecutionException: java.lang.StringIndexOutOfBoundsException: String index out of range: -1

java.util.concurrent.FutureTask$Sync.innerGet(Unknown Source)
java.util.concurrent.FutureTask.get(Unknown Source)
javax.swing.SwingWorker.get(Unknown Source)
fbpwn.ui.AddAuthenticatedAccount.jButton1ActionPerformed(AddAuthenticatedAccount.java:194)
fbpwn.ui.AddAuthenticatedAccount.access$000(AddAuthenticatedAccount.java:42)
fbpwn.ui.AddAuthenticatedAccount$1.actionPerformed(AddAuthenticatedAccount.java:90)
javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
javax.swing.AbstractButton$Handler.actionPerformed(Unknown Source)
javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
javax.swing.DefaultButtonModel.setPressed(Unknown Source)
javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown Source)
org.pushingpixels.substance.internal.utils.RolloverButtonListener.mouseReleased(RolloverButtonListener.java:124)
java.awt.Component.processMouseEvent(Unknown Source)
javax.swing.JComponent.processMouseEvent(Unknown Source)
java.awt.Component.processEvent(Unknown Source)
java.awt.Container.processEvent(Unknown Source)
java.awt.Component.dispatchEventImpl(Unknown Source)
java.awt.Container.dispatchEventImpl(Unknown Source)
java.awt.Component.dispatchEvent(Unknown Source)
java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
java.awt.Container.dispatchEventImpl(Unknown Source)
java.awt.Window.dispatchEventImpl(Unknown Source)
java.awt.Component.dispatchEvent(Unknown Source)
java.awt.EventQueue.dispatchEventImpl(Unknown Source)
java.awt.EventQueue.access$200(Unknown Source)
java.awt.EventQueue$3.run(Unknown Source)
java.awt.EventQueue$3.run(Unknown Source)
java.security.AccessController.doPrivileged(Native Method)
java.security.ProtectionDomain$1.doIntersectionPrivilege(Unknown Source)
java.security.ProtectionDomain$1.doIntersectionPrivilege(Unknown Source)
java.awt.EventQueue$4.run(Unknown Source)
java.awt.EventQueue$4.run(Unknown Source)
java.security.AccessController.doPrivileged(Native Method)
java.security.ProtectionDomain$1.doIntersectionPrivilege(Unknown Source)
java.awt.EventQueue.dispatchEvent(Unknown Source)
java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)
java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
java.awt.WaitDispatchSupport$2.run(Unknown Source)
java.awt.WaitDispatchSupport$4.run(Unknown Source)
java.security.AccessController.doPrivileged(Native Method)
java.awt.WaitDispatchSupport.enter(Unknown Source)
java.awt.Dialog.show(Unknown Source)
java.awt.Component.show(Unknown Source)
java.awt.Component.setVisible(Unknown Source)
java.awt.Window.setVisible(Unknown Source)
java.awt.Dialog.setVisible(Unknown Source)
fbpwn.ui.AddAuthenticatedAccount.showAddAuthenticatedAccountDialog(AddAuthenticatedAccount.java:211)
fbpwn.ui.MainForm.jButton1ActionPerformed(MainForm.java:495)
fbpwn.ui.MainForm.access$000(MainForm.java:47)
fbpwn.ui.MainForm$2.actionPerformed(MainForm.java:155)
javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
javax.swing.AbstractButton$Handler.actionPerformed(Unknown Source)
javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
javax.swing.DefaultButtonModel.setPressed(Unknown Source)
javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown Source)
org.pushingpixels.substance.internal.utils.RolloverButtonListener.mouseReleased(RolloverButtonListener.java:124)
java.awt.Component.processMouseEvent(Unknown Source)
javax.swing.JComponent.processMouseEvent(Unknown Source)
java.awt.Component.processEvent(Unknown Source)
java.awt.Container.processEvent(Unknown Source)
java.awt.Component.dispatchEventImpl(Unknown Source)
java.awt.Container.dispatchEventImpl(Unknown Source)
java.awt.Component.dispatchEvent(Unknown Source)
java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
java.awt.Container.dispatchEventImpl(Unknown Source)
java.awt.Window.dispatchEventImpl(Unknown Source)
java.awt.Component.dispatchEvent(Unknown Source)
java.awt.EventQueue.dispatchEventImpl(Unknown Source)
java.awt.EventQueue.access$200(Unknown Source)
java.awt.EventQueue$3.run(Unknown Source)
java.awt.EventQueue$3.run(Unknown Source)
java.security.AccessController.doPrivileged(Native Method)
java.security.ProtectionDomain$1.doIntersectionPrivilege(Unknown Source)
java.security.ProtectionDomain$1.doIntersectionPrivilege(Unknown Source)
java.awt.EventQueue$4.run(Unknown Source)
java.awt.EventQueue$4.run(Unknown Source)
java.security.AccessController.doPrivileged(Native Method)
java.security.ProtectionDomain$1.doIntersectionPrivilege(Unknown Source)
java.awt.EventQueue.dispatchEvent(Unknown Source)
java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)
java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
java.awt.EventDispatchThread.pumpEvents(Unknown Source)
java.awt.EventDispatchThread.pumpEvents(Unknown Source)
java.awt.EventDispatchThread.run(Unknown Source)”

Anyone to help me ? πŸ˜€

I’m on Win7

Thanks !!

{ 2 trackbacks }

Previous post:

Next post: