Exploit
exploit:facebook_four_digit_pin_reset_exploit
Exploit described as repeatedly submitting possible four-digit account-recovery codes until the correct code was found.
Exploit described as repeatedly submitting possible four-digit account-recovery codes until the correct code was found.
“they could just keep submitting codes to Facebook over and over and over”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | Explicit | 139 | |
| incoming | USES | Default | Explicit | 139 |
Default USES Facebook four-digit PIN reset exploit
Default says he and the group used the Facebook four-digit PIN reset flaw to access accounts.
Explicit Confidence 96% · Default EP 139 Details
“I didn’t care if it was Facebook or Twitter, which we had a zero-day on”
Facebook four-digit PIN reset exploit AFFECTS Facebook
Jack explains that repeatedly submitting four-digit codes allowed attackers to reset Facebook passwords.
Explicit Confidence 99% · Jack Rhysider EP 139 Details
“they could just keep submitting codes to Facebook over and over”