DOCSEARCHbyAlgolia
Submit Docs

FBHT (Facebook Hacking Tool)

repository·master·Indexed 23 days ago

https://github.com/chinoogawa/fbht

A Python 2.7.3 CLI utility for Facebook-related tasks, including OSINT, phishing vectors, bruteforcing, and information gathering. The tool utilizes libraries such as Selenium, Matplotlib, Networkx, and Numpy to perform social graph analysis, friendship privacy bypassing, and credential testing. It supports Windows, Linux (Kali, Debian), and macOS.

Tokens
981
Snippets
1
Records
9
Agent score
32%

What's inside FBHT

  1. System requirements and compatibility for FBHT

    master

    FBHT is designed to run on Python 2.7.3. Supported operating systems include:

    • Windows: Tested on Windows 7 (64/32 bits).
    • Linux: Tested on Kali Linux and Debian 7 (Wheezy).
    • macOS: The tool includes path handling logic intended to work across Windows, Mac, and Linux systems.

  2. Install FBHT dependencies

    master

    FBHT requires several Python libraries to function. It is recommended to use setuptools to manage these dependencies. The required packages and their specific versions (as per the documentation) are:

    • Selenium
    • Matplotlib-1.2.1
    • Networkx-1.8.1
    • Numpy-1.7.1
    • Pygraphviz-1.1
    • Simplejson-3.3.0
    • Mechanize-0.2.5

    Additionally, gephi-0.8.2-beta (graph software) is listed as a requirement.

  3. Overview of FBHT Capabilities

    master

    FBHT (Facebook Hacking Tool) is a CLI-based utility organized into several functional modules for testing and information gathering. The main menu provides access to the following categories:

    1. Test accounts: Tools for creating, deleting, connecting, and managing test accounts.
    2. Phishing vectors: Methods for link preview spoofing, YouTube hijacking, and app message spoofing.
    3. OSINT (Open Source Intelligence): Tools for bypassing friendship privacy, analyzing social graphs, and retrieving user IDs.
    4. Bruteforcing: Utilities for email existence checking, credential testing, and cellphone number bruteforcing.
    5. Gathering information: Tools for downloading photos using single credentials or massive dumps.
    6. Miscellaneous: Features like broadcast messaging, Note DDoS, spamming fanpages, and 'Like' flooding.
    7. Configuration: Database status monitoring and global logging level adjustments.

  4. Perform OSINT and Friendship Privacy Bypassing

    master

    The OSINT module focuses on extracting social graph data and user information:

    • Bypass Friendship Privacy: Uses a 'transitive' user (a mutual connection) to uncover a victim's friend list.
    • Graph Analysis: Generates visual representations of social connections using simpleGraph or dotFile (DOT format).
    • Database Support (Beta): Uses a local database to track and analyze victim connections.
    • User ID Retrieval: Converts usernames to User IDs using getUserIDS.
    • Public Friends: Retrieves friends that are publicly visible on a profile.

  5. Use Phishing Vectors for Link and Video Spoofing

    master

    The Phishing Vectors module allows for several types of social engineering attacks:

    • Link Preview Hack (Simple/YouTube): Creates spoofed link previews using a 'real' link and an 'evil' link to deceive users.
    • YouTube Hijack: Redirects YouTube video views to a different video ID.
    • Private Message Phishing: Sends spoofed link previews or YouTube content via private messages to a specific victim ID.
    • App Message Spoof: Publishes a post that appears to come from a specific Application ID.

  6. Execute Bruteforce and Enumeration Tasks

    master

    The Bruteforcing module provides automated testing for credentials and identifiers:

    • User Enumeration: Checks a provided list of emails to see if they exist on the platform. Results are stored in PRIVATE/existence/verified.txt.
    • Credential Checking: Tests a list of email:password pairs to find working accounts. Results are stored in PRIVATE/loggedin/loggedin.txt.
    • Cellphone Bruteforce: Attempts to brute force cellphone numbers based on a zone code and a range of numbers.

  7. Gather Photos via Credentials

    master

    The Gathering module allows for photo extraction:

    • Single Credential: Uses a provided thread file to download photos. Dumps are stored in massive/photos.
    • Massive Steal: Attempts to steal private photos from previously verified password dumps.

  8. Configure FBHT Database and Logging

    master

    Under the Configuration menu, users can manage the tool's internal state:

    • Print database status: Displays the current status of the local database via status().
    • Increase logging level: Uses setGlobalLogginng() to increase verbosity, which significantly increases execution time.