suduma / fbpwn Goto Github PK

We need to update the wiki page for the modules to include the wall dump module 
or any new modules.

What steps will reproduce the problem?
1. create facebool account
2. try to add the account in FBPwn


What is the expected output? What do you see instead?
After verification the account should show up in "Authenticated Accounts 
Management" - instead the "attempting to log in"-window appears for a few 
seconds, then disappears and that's it.
Account is not being added to list. No error shown.


What version of the product are you using? On what operating system?
FBPwn Beta version 0.1.5 on Windows XP SP3



Please provide any additional information below.

After i start it and select friend it gets that friend photo and uploads to my 
facebook. After uploading it stucks on 30% and not set as main photo.

What steps will reproduce the problem?
1.execute ./run.sh
2.put my user and password no other options
3.

What is the expected output? What do you see instead?
it just crashes get a pop up box exception occured

What version of the product are you using? On what operating system?
i have tried 1.5 1.6 1.7 none work, i ran it on wine and run it on bt5

Please provide any additional information below.
all the versions same problem i have reinstalled jre and jdk
also tried selecting what program runs the java file
no luck

Would be nice to view private tagged photos

What is the expected output? What do you see instead?
It says it cannot get the photos

What version of the product are you using? On what operating system?
windows VISTA and the latest version

Please provide any additional information below.

[deleted issue]

What steps will reproduce the problem?
1.logging in facebook via fbpwn
2. starting attack
3.starting adding vimctim's friens
4. after few minutes i get an error and program shutting down itself

What steps will reproduce the problem?
1.add account
2.
3.

What is the expected output? What do you see instead?

error occured while logging in

What version of the product are you using? On what operating system?

0.1.4 on win7

Please provide any additional information below.

when I authenticate a user it doesn't do anything... I see a login status bar, 
then it  disappears and does not add my friends list. the account works fine... 
when login through the browser and it works. why aren't my friends populating

The module idea is to detect who from all the friends list is the most close to 
a person. The output of the module would be like the friends list dumper 
module, only the people on the list would be the short list of close people.

The module filtering works by adding possibly close people who are tagged in 
photos, have written comments, have written on the wall, ...etc. Then rank them 
based on their level of contribution calculated as a function of different 
parameters such as (number of replies, number of wall-to-wall posts, common 
friends, ..etc).

The output of the tool should be the short list, along with all the 
intelligence based on which the person was decided to be in the close circle.

The application should contain an  "About" dialogue that links to FBPwn's 
homepage.

The original fake account birth-date and email should be hidden by the profile 
cloner and the gender should changed to match the cloned profile. 

What steps will reproduce the problem?
1.Start application
2.Go to add account and enter credentials
3.login
4.While its trying to log in, exception occurs and app closes.

What is the expected output? What do you see instead?
Application just closes. 


What version of the product are you using? On what operating system?
0.1.7 on Newest Ubuntu


Please provide any additional information below.
I have created a new facebook account which by default was set to English UK, 
so I also tried english US incase that was the problem but still crashes.

Tried with the wrong password to see if I would get any sort of wrong password 
prompt but app still closes.

login and password have no special chars only lower case alphanumeric chars.

The module function is to identify the mobile device brand and/or model for 
specific people using keywords parsing and built in FB functions (which 
sometimes indicates if the post is sent via a mobile device). 

For example, people often reference BB PINs, Android emails, nokia apps, 
samsung model numbers, ...etc in their posts/comments. This would be a good 
recon point in building a person's profile.

What steps will reproduce the problem?
1. Login


What is the expected output? What do you see instead?
error message, dump shows unregistered device registration box

What version of the product are you using? On what operating system?
0.1.6 on XP

Please provide any additional information below.

plz help

The user agent string should be randomized for each time the application login.

This module attempts to dump as much of the wall as possible.

Log file

[deleted issue]

Create a  google "FBPwn-Dev" mailing list for commits and notifications.

What steps will reproduce the problem?
1. Run application
2. Add account (success)
3. Perform attack: DumpFriends or DumpImages and program crashes

What version of the product are you using? On what operating system?
Windows 7 x64 Ultimate,  FBPwn 0.1.6

Please provide any additional information below.

Java Runtime 6!

Its installed, its verified, but fbpwn just won't shut up about it telling me i 
need to download it! Its driving me nuts!

What steps will reproduce the problem?
1.Add a Facebook account
2.Enter username and password

What is the expected output? What do you see instead?
Instead of logging in, an error is shown and FBpwn closes. The error log shows 
the Facebook page for registering a new login location.

What version of the product are you using? On what operating system?


Please provide any additional information below.
Apparently if the FB account is set to notify logins from new computers FBpwn 
fails to complete the login process.

It should also be noted that an email is sent to the owner of the Facebook 
account.

I believe this *could* be worked around by mimicking the User-Agent of the 
default browser in the system.

What steps will reproduce the problem?
1. Create a new Facebook account without providing a mobile number
2. Try to launch a AddVictimsFriends

What is the expected output? What do you see instead?

The process says it's running but the %age is not moving.

What version of the product are you using? On what operating system?

0.1.4 Win Vista

Please provide any additional information below.

We should add to the downloads section a zipped file containing the project in 
a jar file, the plugins directory and both run.sh (for linux) and run.exe (for 
windows).

What steps will reproduce the problem?
1.Open FBPwn.
2.Add account.
3.Write Username.
4.Write password.
5.Login.

What is the expected output? What do you see instead?
Don't know what the expected output is as it's the first time trying to use 
your tool.
I get this error:
An exception occurred
The full exception message and stacktrace are dumped to "log.html" file
If you are not expectineg this error, kindly report it to the developers and 
attach the log file
FBPwn will now exit

What version of the product are you using? On what operating system?
0.1.7
Windows 7 Professional Edition 32-bit

Please provide any additional information below.

The photo dumper plugin dumps the photo albums renaming them into album1, 
album2, ...etc. The actual album names should be saved in a text file inside 
the dumped folder.

What steps will reproduce the problem?
1.Opening program and entering my login data
2.Waiting for adding account
3.Crashing

What is the expected output? What do you see instead?
I expected to see there something like "ok!account added" I see error message

What version of the product are you using? On what operating system?
FBPwn 0.1.7 beta
Win x64 SP0

Please provide any additional information below.
I use patched windows with PatchGuard Disabled V2
But I don't think that It may cause any problems
Also I looked in log and I think that there is something wrong with GUI because 
the last entry in log is jButton1ActionPerformed

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1. Run run.exe
2. Add account, entering login and password
3. Becoming error

What is the expected output? What do you see instead?
I see an error

What version of the product are you using? On what operating system?
FBPwn-beta-0.1.7 on Windows XP SP3

Please provide any additional information below.
Although I'm using an firewall I don't see any attempt to connect to internet

What steps will reproduce the problem?
1. I create a new blank Facebook account
2. Open FBPwnClick
3. Click on the button "Add account"
4. Type the mail address and password in form and click on "Login"
5. I get the error message "Error Occurred"

What version of the product are you using? On what operating system?
FBPwn-beta-0.1.5
Mac OS X Lion

What steps will reproduce the problem?
1.unable to add a account and login
2.
3.

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

[deleted issue]

The application should be able to use a network proxy for all its connections 
(SOCK5, HTTP,...etc).

A new module that clones a profile and make it your own to convince other 
people to add you. 

The module take input the url of the person you want to clone, and sets the 
authenticated account name, display picture, info...etc to match the account to 
be cloned.

When building a clean dist from source only to modules are available in the 
program. DictionaryBuilderTask and CloseCircleFriendsTask. The other modules 
are missing.

The program results in an reproducible error when building from a clan source 
and uncommenting lines 275-284 as well as importing necessary files.

import fbpwn.plugins.core.AddVictimsFriends;
import fbpwn.plugins.core.CheckFriendRequestTask;
import fbpwn.plugins.core.DumpFriendsTask;
import fbpwn.plugins.core.DumpImagesTask;
import fbpwn.plugins.core.DumpInfoTask;
import fbpwn.plugins.core.DumpThumbnailImagesTask;
import fbpwn.plugins.core.DumpWallTask;
import fbpwn.plugins.core.ProfileClonerTask;

Error log suggests: java.util.concurrent.ExecutionException: 
java.lang.StringIndexOutOfBoundsException: String index out of range: -1

OS: BT5 R1

I am using the latest 0.1.7 Beta and I am getting the "String index out of 
range: -41" exception after attempting to login.

The steps to reproduce are as below:
1. java -jar FBpwn.jar
2. click "Add account" and type in user-name, password
3. click "Login" ... and the exception occurs.

I attaching the log.html that FBpwn produced while it crashed.

We need to do the following code cleanup:

- Remove the nbproject files, and add SVN ignore for them.
- Move files under /src/fbpwn/* to /*
- Remove the parent FBpwn directory from the trunk (so that the trunk contains 
directly the folder /lib and the source packages and files).
- Create package FBPwn.UI for UI classes.
- Create package FBPwn.Core which contains the core classes.
- Create package FBPwn.Plugins which contains the plugins.
- Package FBPwn will contain only the main class.
- Each package should be in a separate folder.
- Remove all commented code.

What steps will reproduce the problem?
1.Start app
2.Add Account
3.Add Addfriend ClonProfile Modules

What is the expected output? What do you see instead?
I can see the victims friends but the Addfriend and CloneProfile Modules fail

What version of the product are you using? On what operating system?
Last one in Backtrack 5 R1

Please provide any additional information below.

When it gets friend list it gets from "main page" ( not sure ) but not shows 
all friends. ( when using profile cloner or sth like that)

What steps will reproduce the problem?
1. Use a URL like http://www.facebook.com/daujones42 instead of 
http://www.facebook.com/profile.php?id=100002466728554

What is the expected output? What do you see instead?
Either the friend list is empty (in the case above), or (when following links) 
wrongly interprets the URL parameter "refid=5" as profile id 5.
Expected output: The correct list of friends :-)

What version of the product are you using? On what operating system?
Both the latest stable (0.1.7) and svn r72 suffer from that problem.

The stalker module would stalk the victim's activities. The module will poll 
the victim monitoring his activities and logging everything offline. 

The module can take its input from the sidebar ticker, by filtering only news 
about the victim.

One option is to enable all friends stalking. In this option, the all the 
friends of the fake FB account are stalked together, but the logging is done 
per user. So it is like splitting the news ticker to a per-user feed.

After adding a friend, this module creates a dictionary file with all possible 
nouns harvested from his profile as possible candidates for password brute 
forcing.

The nouns should include all words from tags, comments, wall, ...etc.

This plugin should dump all the comments on associated with pictures. The 
module dump should have a relation with the dumped pictures so that when 
someone sees the pictures and comments offline, he can relate which comments 
are for which pictures.

This is just an idea based on my short experience with the program (very 
useful, by the way, thanks!).

I think that the profile dump should be separated into a new folder (ex 
'profiles') and again into another folder for every profile, so you'll have the 
profile folder and, inside it, as many folders as profiles you've dumped before.

What steps will reproduce the problem?
1. set proxy
2. add account, login
3. exception. crashes. 

What is the expected output? What do you see instead?
successful login. program crashes. 

What version of the product are you using? On what operating system?
0.1.6 on Xubuntu Linux with both Sun Java and OpenJDK

Please provide any additional information below.
Attached log.html

When i use dumper or friend adder it shows only 10 friends. Os win7 64x. Yes 
friend list is accessible.

What steps will reproduce the problem?
1. Authenticate with a newly created account
2. Add friend's URL
3. Launch attack with AddFriends

What is the expected output? What do you see instead?

It just says Failed to get friend list, whereas I should get the friend list

What version of the product are you using? On what operating system?

0.1.6 on Mac OS X 10.7.2

Please provide any additional information below.