CrazyDavinci’s Blog | Social Networking - Programming - Networking - Security

---

Some of you might already know about this old methode to see friendster private photo. This is the weaknesses of php, we can use CSRF methode to get the access to people’s private photos. How?

OK, as you are already know, when we tried to see private album on friendster profile, we need to request first, and we wont be able to see the photos inside before we’re granted to see them by the owner. Using CSRF, we can get the permission easily, just follow this step :

1. You must do the request thingy, proceed here :
   http://www.friendster.com/privatephotos.php?uid=TARGET_UID
2. Write anything on the box, click send
3. Next, send the automatic request through target comment, send comment contains this naughty code :

   <img alt="" width=" 1" height=" 1" src="http://www.friendster.com/privatephotos.php?action=acceptRequest&uid=YOUR_UID&_submitted=1"

4. Last, you just have to wait till the target see the comment page, you will get message telling that you have granted to see the photos

Note :
- This trick wont work if the target is on safe mode, so be safe guys, always set the safe mode on
- We should be aware that they make it private means they want to keep their privacy, this trick will only annoy the target, we share this just to tell you about the way CSRF works on friendster, you can try another trick like logout, or else..

UPDATE 2010 :
New Way of getting access to friendster private photos

---

47 Responses to “View Friendster Private Photo”

Pages: « 1 2 [3] Show All

1. 41
   † FeaЯ † Says:
   June 22nd, 2009 at 10:25 PM

   a litte question guys…where will i put “Step 3″?

2. 42
   Colors Says:
   June 27th, 2009 at 1:03 AM

   is this still working,,, it did not work for me.. so bad… Can anyone help me please…

   here’s my e-mail: colorblind_color@yahoo.com

3. 43
   norman Says:
   November 15th, 2009 at 7:05 PM

   hi… how about when the comment needs to be approved and he/she declined it? is it still works? pls reply here or on my e-mail. norman_flor04@yahoo.com tnx.. tnx so much.. your page is so cool…

4. 44
   Anissa Pappa Says:
   February 16th, 2010 at 9:09 AM

   This is certainly my first stop by and I love what I am discovering. Your site is indeed great to read, very enjoyable as well as enlightening. I’ll absolutely recommend it to my buddies. However, I did have a bit of difficulty with the commenting. It kept giving me an malfunction whenever I tapped on post comment. I hope, that can be repaired. Many thanks!

5. 45
   Joy Says:
   March 8th, 2010 at 3:55 PM

   thanks a lot anissa.. malfunction on post comment? i never knew that, could u please gimme a screenshot or something, i realy dont have any idea about it..

6. 46
   ogie Says:
   March 10th, 2010 at 11:02 PM

   mas.. nggak ada cara yang lebih ringkas yah?? kalau target bukan teman kita nggak bisa ya??

7. 47
   Joy Says:
   March 11th, 2010 at 10:30 AM

   @Colors & Norman
   ah yes, this trick doesnt work anymore, they added authoritation parameter on the request page. I’ll post the new way of getting access to friendster private photos today or tomorrow. just wait
   @Ogie
   Dulu walaupun bkn tmen bisa gie, tar tunggu aja update slanjutnya, cara ini udah ga bisa lagi

   UPDATE :
   http://crazydavinci.net/2010/03/get-access-to-friendster-private-photos/

Pages: « 1 2 [3] Show All