Untitled

Hi Ḱhalil,


I am sorry this is not a bug.

Thanks,

Emrakul
Security
Facebook

-----Original Message to Facebook-----
From: kh*****@hotmail.com
To:
Subject: urgent : post to non friends facebook users wall .

Name: Ḱhalil
E-Mail: kh*****@hotmail.com
Type: privacy
Scope: www
Description: dear facebook team .

my name is khalil ***** , iam ** years old from palestine .
i finished school with B.A degree in Infromation Systems .

i would like to report a bug in your main site (www.facebook.com) which i discovered  .


i'am reporting this bug for the second time and i know that you offer money to whitehat people .


repro:
the vulnerability allow's facebook use to share posts to non friends facebook users , i made a post to sarah.goodin timeline and i got success post

link - > https://www.facebook.com/10151857333098885

of course you may cant see the link because sarah's timeline friends posts shares only with her friends , you need to be a friend of her to see that post or you can use your own authority . i can see that post i made to sarah's wall cause i'am the one who post either whatever iam not on her friend list .

this is a picture shows that post :

https://fbcdn-sphotos-h-a.akamaihd.net/hphotos-ak-ash4/q71/s720x720/999429_10151857336258885_2061448780_n.jpg


-----End Original Message to Facebook-----
✅ Leaked Exploit Documentation:

https://docs.google.com/document/d/1dOCZEHS5JtM51RITOJzbS4o3hZ-__wTTRXQkV1MexNQ/edit?usp=sharing

This made me $13,000 in 2 days.

Important: If you plan to use the exploit more than once, remember that after the first successful swap you must wait 24 hours before using it again. Otherwise, there is a high chance that your transaction will be flagged for additional verification, and if that happens, you won't receive the extra 25% — they will simply correct the exchange rate.
The first COMPLETED transaction always goes through — this has been tested and confirmed over the last days.

Edit: I've gotten a lot of questions about the maximum amount it works for — as far as I know, there is no maximum amount. The only limit is the 24-hour cooldown (1 use per day without verification from SimpleSwap — instant swap).