How To Save Pictures From Friendster

Posted by: Joy  :  Category: Friendster Tweaking, JavaScript

Friendster New LogoIs it true that Friendster is shutting down on May 31, 2011? Not exactly, the truth is that On May 31, Friendster will move to wipe out all photos, blogs, comments and groups uploaded or created by its users. The company will, however, keep all accounts alive, along with user friends lists, games details and basic profile information. Friendster is making the changes under the guise of reinventing themselves as a service focused on entertainment and fun (which sounds exactly like Myspace when they started feeling the Facebook heat for real.

I made this post to help people who want to save all their pictures/photos from Friendster before the day. Some friends even contact me through contact form, they ask me how to save pictures from Friendster? Friendster actually has created an application called Friendster Exporter which will enable us to export all of our profile information including photos. The problem is, when we cant login to our account and we dont even know the email associated with our profile, we cant use the Friendster Exporter app, we have to save all our pictures one by one, this will surely take so much time. By using this script, we dont have to login to Friendster and we can also save all of our friends pictures, as long as we can see the album, we can save all the pictures inside.

Kindly follow this instruction, i’m using Friendster official profile, The Republic of Friendster as an example, below are some steps you have to do to get all the pictures from a Friendster album : Read more…

Javascript Iframe Overlay Layout

Posted by: Joy  :  Category: JavaScript, Miscellaneous Trick

XSS Javascript Tips and TrickFor those who want to add an html iframe layout to their page, overlayed, covering the whole page, you can use this simple script. You can have a defaced-like page using your own site as the content of the page. Whenever you are able to insert an xss on certain site, you can also use this to deface the page using your own html page. I’m using html frameset to change the document content.

Below is the sample of this kind of javascript trick :
http://www.friendster.com/viewphotos.php?uid=108625641&a=351925224
Notice that on the xssed page above i’m using html frameset tag with frame src to blog crazydavinci.net. You can try to view the source after the page fully loaded.

Here is the javascript source code : Read more…

Loading Page Trick

Posted by: Joy  :  Category: JavaScript, Web Development

Loading Page ScriptSome of my friends asked me about how to do the loading page trick on this blog which hide the page content until all the elements loaded. Actually, this trick is using a very simple idea to hide all the elements until the javascript onload event triggered. While all the elements except the body itself hidden, we use gif animated image as a background image on the body tag. We need to hide the first element after body tag, inspect the structure of our site itself, for example :

<html>
<head>
blah blah…
</head>
<body>

    <div id="page">
    <div></div>
    blah blah…
    <div></div>
    </div>

</body>

Read more…

Friendster XSS Through FBML

Posted by: Joy  :  Category: Linker, Vulnerability

Friendster FBML Hole Status : Filtered (September, 2010)
Released : August, 2010
Author : no_one
Greetings : Angell de Ville & The Friendster Team

MyFeeling Widget Linker

The last shoutout linker has been filtered already about a month after being released. Now i’m trying to share again another persistent xss on friendster that can be used to add layouts to our profile. Here, we’re gonna use the old FBML platform on friendster applications. as you might already know, actually this platform was already removed from their developer page about a year ago, but some of the old ones are still intact.

OK, let’s just go straight to the steps. Follow these instructions carefully :
Read more…