Download Guarded Profile Picture From Facebook

-
Facebook recently introduced a feature called Profile Picture Guard. It protect others from downloading your profile picture. If you want to know more about it, you can read it here Profile Picture Guard | Facebook Help.

When turning on Profile Picture Guard, Facebook assure you that no one else can download your profile picture. Really??? ๐Ÿ˜†๐Ÿ˜†๐Ÿ˜† Never!!!

I worked some time on it to see how can I bypass this restriction. Tried calculating the url to cdn but it requires a signature to access the file. Tried to view image and change dimensions and the result is negative.

 What's next?

Think out of the Box.

I think I should leave it and change my target first. Then I decided to test it from my another account to check is there a way to bypass it.

Opened the profile picture and copied the url. Then I opened incognito to login to other account. Went to the url that I copied earlier and I was about to type my username and password in the login form at the top of page. Suddenly a pop up came. Wow!!! There's the image I am looking for. Got it.


Reported the issue to facebook but they said



and closed it as informative.

Here's the PoC Video in case if you want.


Timeline

 Mar 3 - Report Submitted.

Mar 6 - Kamala from Facebook Security replied that it is a test pilot test and closed as informative.

Contact me or Support me

Liked this post? Buy me a coffeeBuy me a coffee

Comments

  1. GDATTACKERJuly 16, 2018 at 5:54 PM

    why need to do such just do it by inspect element even u can have it

    ReplyDelete
    Replies
    1. Sagar VDJuly 17, 2018 at 1:07 AM

      There are another few methods too. One of them is http://graph.facebook.com/{user_id}/picture?width=1200&height=1200

      Delete
  2. AnonymousDecember 4, 2022 at 10:52 PM

    Cafรฉ Casino is already ์˜จ๋ผ์ธ์นด์ง€๋…ธ a high contender in the online playing industry. This end result of|as a result of} of} its professional design, incredible promotions, and general clean gaming experience. Everything from the structure and game selection to the extent of customer service is first-rate.

    ReplyDelete

Post a Comment

Popular posts from this blog

Taking over Facebook Page Tabs

-
Image
In this post, I'm describing how I was able to take over 4 tabs on Facebook's own Pages. 1. Facebook India Ambassadors I was browsing Facebook as usual and not in a mood to test anything. I then visited Facebook India's page to check is there any update from Facebook India and that's when I noticed a page tab Facebook India Ambassadors . I clicked on it to see Facebook India's Brand Ambassadors and the tab showed a heroku error page. I was surprised to see that there. It looked interesting to me so I decided to dig further. I found out that it loads a third party website in an iframe in main section. The url was  http://immense-atoll-4159.herokuapp.com/  and I visited the url directly to verify that the subdomain doesn't exist. Heroku shows a does not exist error page if the subdomain doesn't exist. So I logged into my Heroku account and created a new project and give immense-atoll-4159  as project id. Then I created a simple NodeJS Script for
Read more

How I could've accessed personal details of tens of thousands of people

-
Image
This is a security issue I found in one of the company that work in different fields. They make different type of electronic equipments as well as offers the public an easy way to enroll and avail benefits of different Govt Schemes. Let's say the company name is XYZ and the domain is xyz.com. They provide people a way to enroll to various govt services with their service centres, like a govt agency and public can register/ apply for any kind of govt services, schemes, etc. They're also an authorized service provider of a Govt Scheme by a state govt. I was checking the functionalities in their website and noticed a login url under  /admin . I visited /admin/login.php  and saw a Login page. I tried 5-10 different user:pass combinations and none of them worked. I then decided to try sqli in the login form. Like most of the PHP sites created by noooobs, this site is also vulnerable to sqli in login form. I got access to the admin panel, I saw scanned copies of ID c
Read more

Send request to Martians. Earthlings are already your friends.

-
Image
Hello everyone, I'm back with another write up. This time it's a Google bug. YouTube is Google's video sharing site and a great place to explore. As a bug hunter, you can spend hours or days or even weeks in YouTube without hesitation. I always used YouTube to play some music when I worked as a developer last year. When I started bug hunting, I tried YouTube multiple times and can't find any. Then I started hunting on another google services. After hunting for more than 2 hours, I found a bug on one of Google's acquisition. According to  Google , a video PoC is required only if it is contributing something that the text can't. But I'm a great fan of videos and my first bug to google (duplicate) contained a 15min video ๐Ÿ˜Ž. I recorded a video of that bug I found and visited YouTube to upload it. when I clicked upload button, I noticed something strange aside it, something new. It looked like a message button. But then, the upload page has loaded
Read more