Sunday, December 16, 2012

How to hack Facebook account pictures

A simple explanation of the Facebook photo URLs

Let's get an example Facebook URL and see what information can be found:

https://www.facebook.com/thehackernews = https://www.facebook.com/172819872731894

Example URL:
https://sphotos-b.xx.fbcdn.net/hphotos-ash3/562956_449111435102735_351919970_n.jpg

This is the photo's album id: 449111435102735
https://facebook.com/449111435102735

Here are different pictures that every user has stored, simply changing the letter at the end of the URL will change it's size.

Normal Picture:
https://sphotos-b.xx.fbcdn.net/hphotos-ash3/562956_449111435102735_351919970_n.jpg
Picture(small):
https://sphotos-b.xx.fbcdn.net/hphotos-ash3/562956_449111435102735_351919970_s.jpg
Small Picture:
https://sphotos-b.xx.fbcdn.net/hphotos-ash3/562956_449111435102735_351919970_t.jpg
Square Picture:
https://sphotos-b.xx.fbcdn.net/hphotos-ash3/562956_449111435102735_351919970_q.jpg



I found this on Pastebin a long time, so for the older Facebook photo ids:

    34330_1531425252044_1427142689_31473272_564909_n.jpg
      ^                    ^                       ^                  ^             ^
      |                      |                        |                   |               |
     No            image id                pid               id            No
    idea                                                                           idea
   
Example URLs:
   
    image id: 1531425252044
    profile.php?id=1531425252044
    redirects to the photo page
    photo.php?pid=31473272&id=1427142689
   
    pid: 31473272
    id of the picture page, needs user id too to work
    photo.php?pid=31473272&id=1427142689
   
    id: 1427142689
    user id
    profile.php?id=1427142689