Tool Allows for Hijacking of Facebook Accounts - [security] 08:39 PM EDT - May,06 2009 - post a comment According to CNET, a 'computer security enthusiast' in India that goes by the name of QuakerDoomer has come up with a tool to hijack Facebook accounts. The author claims it is a proof of concept and that writing tools like this have always been an 'adrenaline rush.'
FBController analyzes the communications that Facebook has with computers when they interact with the site and uses that information, along with the cookie data, to allow for accounts to be hijacked, said 26-year-old Azim Poonawala, who wrote the tool and provides details on his blog.
Cookies, meanwhile, can be obtained using network sniffing, cross-site scripting exploits, social engineering, and via open proxies where cookies are logged, he said in a recent interview over chat.
|