PfishBot:Autophishing: The Request: Part I

So we will jump back to messaging in a minute but first we need to go here:

https://m.facebook.com/findfriends/browser/

Where we can "find friends".


Now the JS here is really simple whip open console and we can do a test before we loop it

Successful

And now we use the location.reload(), this will reset the suggestions:

 and now time to automate:

1 2 3 4 5 6 7 8 9

while(1){ document.querySelectorAll("button[type='submit']")[0].click(); setTimeout(func, 3000); function func(){ location.reload(); } }

It may be best to use a for loop though but it works. You actually need a significant delay apparently facebook thinks the public is rather slow. So put as long as you need, a minute so that they never try to block you might be a good idea.

PfishBot:Auto Phishing: Messaging: Part I

Phishing is the process of creating fake IDs and making them appear real. I decided to automate the whole process from replying to messages to adding "friends".

First thing to do is set up the messaging system as this is doubtless to be the most difficult part.

First we find a weakpoint in the site to launch from, in the case of Facebook the page with the most functionality and least html to scan and possibly parse is:

https://m.facebook.com/buddylist.php?refid=7

Now I should mention that in order to create a fake account you will probably need a phone number, and getting past this is just not worth it as free applications such as text+ work just fine. Or use a payphone. I don't care.

Great now finding the  message box name is easy:

"composerInput"

however the button for send is a bit more dynamic, it changes each time and there is a convoluted js and php script which hides it unless text was dynamically entered". Two ways past, JS or .Net.

JS

So the JS code is real simple:

Inspect the text box. Lets say for our example it is running under the ID of "u_0_5":

 The errors happened because of button ID change. Now we can text the click again, once we have entered text so as to fake the button(we will get to doing this automatically shortly):

So our code is:

1 2 3 4 5 6 7 8

var content = document.body.textContent || document.body.innerText; var hasText = content.indexOf("Way to go")!==-1; if(hasText){ setTimeout(function(){ document.getElementById('composerInput').value="Second Check"; document.getElementById('u_3p_5').click(); },5000); } But that really is not too useful because we have not been able to send it free of user interaction, due to that messy script(or set of scripts) we have left to tackle.

Neural Synchronizer Application

Meant to follow the idea that the waves can be synced (right and left hemispheres of the brain) through stimuli, using audio and visual. Going to add a physical piece for the palms with a high speed solenoid. I used VB because of the libs for audio(.Beep())

Vis with Processing:

void setup() {
  size(600,600);
}
void draw(){
  noCursor();
background(random(0,255));

}

The rest is using VB:

Auditory:

1 2 3 4 5 6

Public Class Form2 Private Sub audodd_Click(sender As Object, e As EventArgs) Handles audodd.Click Console.Beep(250, 900000000) End Sub End Class

The auditory is emmitting at 250Hz and the 900000000 is for timing.

Visual:

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28

Public Class Form1 Dim I As Integer Private Sub Form1_Load(sender As Object, e As EventArgs) Handles MyBase.Load End Sub Private Sub Sync_Click(sender As Object, e As EventArgs) Handles Sync.Click vis.Visible = True Dim SecondForm As New Form2 SecondForm.Show() visual.Enabled = True visualone.Enabled = True End Sub Private Sub visual_Tick(sender As Object, e As EventArgs) Handles visual.Tick vis.Visible = True End Sub Private Sub visualone_Tick(sender As Object, e As EventArgs) Handles visualone.Tick vis.Visible = False End Sub End Class