Abusing Facebook's Mailing Service - Broken Authentication or Feature?(Write Up)

Hello,

In this article I will share to you my finding about creating a two different accounts in one email address in a vulnerable website.

I found this issue because of my research on Facebook mailing procedure. Last month, I was about to present this issue on TCON2 (Hack The North PH) Conference but I missed the whole event because of emergency reason.

So below is the mapping documentation of the issue.

So I hope you understand, enjoy and learn something new on this article.



Merry Christmas Everyone :)



Thanks,

Evan



You can download the Mapping Documentation here: Abusing Facebook Mailing Service - Broken Authentication or Not?



Please don't forget to leave a comment and share this article to everyone.

It is not how much we have, but how much we enjoy, that makes happiness.

~Charles Spurgeon