Facebook Not Just a Social Network!
Presented By Budi Khoirudin
Twitter: @x4ce
Website:
http://budi.khoirudin.com
STUFF
Who Am I?
Budi Khoirudin , 22 years old
IT Security Enthusiast, doing research & hacking just for Phun & lulz
Fans of AKB48, JKT48, and All 48 Families
My Oshi : Atsuko Maeda AKB48, Shimazaki Haruka AKB48, Nabilah JKT48, & Sonia JKT48
At The Last I’m Indonesian People and I love it
Introduction
Report History
Proof Of Concept
As Port Scanner
As Port Scanner
HTTP Response Code : 200The request has succeeded
As Port Scanner (True Result)
Request To Facebook Result Check
HTTP Response Code : 502The server, while acting as a gateway or proxy,received an invalid response from the upstream server
As Port Scanner (False Result)
Request To Facebook Result Check
HTTP Response Code : 503... Some servers may wish to simply refuse the connection.
As Web Proxy
Credit: JKT48 & AKB48
As Web Proxy
As Web Proxy
Source Code POC Execution
As IP Randomizer For Google Scanner
As IP Randomizer For Google Scanner
As DDOS Farm
Credit: JKT48
As DDOS Farm
Reference
http://www.ihteam.net/hacking-news/using-facebook-as-a-proxy/
https://developers.facebook.com/tools/debug
http://www.w3.org/Protocols/rfc2616/rfc2616-sec6.html
http://www.ietf.org/rfc/rfc2616.txt
Arigato GozaimasuBudi Khoirudin a.k.a X-ace a.k.a 0-day a.k.a zeroday (@x4ce)
Credit: AKB48
