It came to me while I was reading an article on Slashdot about sites popping up, offering the customer to hack into a Facebook, MySpace or another social site for 75$ to 100$. EWeek has a similar article[1]. Seems like those sites mostly use social engineering by sending a grammatically deficient e-mail to the victim and somehow, still working most of the time. Most of the time, the goal is to get access to private pictures or information. Hacking Facebook and MySpace accounts is the new “How do I hack Hotmail accounts” of the decade. Just search Google for “facebook hacking service” and plenty of websites will be returned.
Same thing with pictures from services like PhotoBucket or Flickr and such. Getting pictures from private albums is much easier thought and is done thru fusking. The goal is simply to access directly pictures from the private album by guessing the filename of the picture.
As you might know, most cameras have a default naming convention, i.e DSC0001.jpg, Picture0001.jpg etc… (see then end of this article for a complete list) and humans, being lazy as they are, don’t bother renaming them. Since I believe that an example is the best way to learn than 30 pages of detailed explanation, here how it’s done.
Let’s create an account on PhotoBucket first. I used a username I always take everywhere, but it seems that Photobucket didn’t liked it:
Anyway, just deleting the Photobucket cookie solves the problem. Registered using brand new data. Small tips, if you are looking for zip code, try this page: Find A Zip, it has about every zip code for every town in the US (I haven’t verified but looks like it…).
Once in, I created a private album and put two pictures in it; one I renamed and the other I left with a camera default filename.
I named one of those pictures DSC0005.jpg and the other an uncommon name: The URL of my private album ishttp://s991.photobucket.com/albums/af33/Cheetah897/Real%20Private%20Album/
The filename isDSC0005.jpg
So just to try out the concept, I signed out and look if, with the album’s URL and the filename, could access the picture. Oh! Look at that:
So you should be able to guess the rest from here. Nevertheless, there are tools out there to even do the guessing work for you. The one I will use is PHUSK. It’s especially done for PhotoBucket and is for Windows. This shouldn’t be hard to program for another website and another platform.
There is really not much to explain, just type the username of the victim and set up any properties you want (which are pretty much self-explanatory). On the first try, it didn’t found any private album, so I had to specify it by selecting “advanced mode” which show this window:
Select “Add Album”, type the album name and then it will appear in the list of albums (which is ordered).Started PHUSK again and this time it found the private album, it will then try to brute force filenames, which might take a while.
I changed the default lists to make it faster, otherwise, it might take a long time (411 albums name X 439 filenames X ~9999 file numbers each…).
Here is a list of filenames used by PHUSK. This can be used to build your own list.###.jpg | Unknown-#.jpg | Me.jpg |
##.jpg | Untitled-###.jpg | ME.jpg |
#.jpg | Untitled-##.jpg | mygirls.jpg |
Picture###.jpg | Untitled-#.jpg | Mygirls.jpg |
Picture##.jpg | untitled-###.jpg | MYGIRLS.jpg |
Picture#.jpg | untitled-##.jpg | fine.jpg |
Photo###.jpg | untitled-#.jpg | Fine.jpg |
Photo##.jpg | stuff###.jpg | FINE.jpg |
Photo#.jpg | stuff##.jpg | sexy.jpg |
#####.jpg | stuff#.jpg | Sexy.jpg |
####.jpg | Stuff###.jpg | SEXY.jpg |
CIMG####.jpg | Stuff##.jpg | hot.jpg |
CIMG####.JPG | Stuff#.jpg | Hot.jpg |
DSCN####.jpg | stuff-###.jpg | HOT.jpg |
PICT####.jpg | stuff-##.jpg | hott.jpg |
DSC_####.jpg | stuff-#.jpg | Hott.jpg |
DSC0####.jpg | mycamerapics###.jpg | HOTT.jpg |
Image###.jpg | mycamerapics##.jpg | really.jpg |
Image##.jpg | mycamerapics#.jpg | Really.jpg |
Image##.JPG | mypics###.jpg | REALLY.jpg |
Image#.jpg | mypics##.jpg | ass.jpg |
PICT####.JPG | mypics#.jpg | Ass.jpg |
IMG_####.jpg | Misc-###.jpg | ASS.jpg |
_MG_####.jpg | Misc-##.jpg | bad.jpg |
000_####.jpg | Misc-#.jpg | Bad.jpg |
001_####.jpg | misc###.jpg | BAD.jpg |
100_####.jpg | misc##.jpg | face.jpg |
100-####.jpg | misc#.jpg | Face.jpg |
100-####_IMG.jpg | misc-new###.jpg | FACE.jpg |
101_####.jpg | misc-new##.jpg | page.jpg |
101-####.jpg | misc-new#.jpg | Page.jpg |
101-####_IMG.jpg | New###.jpg | PAGE.jpg |
102_####.jpg | New##.jpg | tits.jpg |
102-####.jpg | New#.jpg | Tits.jpg |
102-####_IMG.jpg | New-###.jpg | TITS.jpg |
103-####.jpg | New-##.jpg | boobs.jpg |
103_####.jpg | New-#.jpg | Boobs.jpg |
0##########.jpg | new###.jpg | BOOBS.jpg |
1##########.jpg | new##.jpg | breasts.jpg |
0########.jpg | new#.jpg | Breasts.jpg |
1########.jpg | new-###.jpg | BREASTS.jpg |
########.jpg | new-##.jpg | naughty.jpg |
#######.jpg | new-#.jpg | Naughty.jpg |
######.jpg | Old###.jpg | NAUGHTY.jpg |
Cimg####.jpg | Old##.jpg | smile.jpg |
DCAM####.jpg | Old#.jpg | Smile.jpg |
DC####S.jpg | old###.jpg | SMILE.jpg |
DCFN####.jpg | old##.jpg | light.jpg |
DCP_####.jpg | old#.jpg | Light.jpg |
DCP0####.jpg | nude###.jpg | LIGHT.jpg |
dsc#####.jpg | nude##.jpg | kiss.jpg |
DSC#####.jpg | nude#.jpg | Kiss.jpg |
DSC####.jpg | Nude###.jpg | KISS.jpg |
dsc0####.jpg | Nude##.jpg | kisses.jpg |
DSCF####.jpg | Nude#.jpg | Kisses.jpg |
DSCF####.JPG | Sexy###.jpg | KISSES.jpg |
dscf####.jpg | Sexy##.jpg | muah.jpg |
DSCI####.jpg | Sexy#.jpg | Muah.jpg |
DSCI####.JPG | sexy###.jpg | MUAH.jpg |
dscn####.jpg | sexy##.jpg | mwah.jpg |
EX00####.jpg | sexy#.jpg | Mwah.jpg |
HPIM####.jpg | sexxy###.jpg | MWAH.jpg |
IM00####.jpg | sexxy##.jpg | drunk.jpg |
IMAG####.jpg | sexxy#.jpg | Drunk.jpg |
IMAGE_####.jpg | pictures###.jpg | DRUNK.jpg |
IMAGE####.jpg | pictures##.jpg | drunken.jpg |
IMG0####.jpg | pictures#.jpg | Drunken.jpg |
IMG####.jpg | Pictures###.jpg | DRUNKEN.jpg |
Img#####.jpg | Pictures##.jpg | sleep.jpg |
IMG_00####.jpg | Pictures#.jpg | Sleep.jpg |
IMG_#####.jpg | sexypic###.jpg | SLEEP.jpg |
IMG_####.JPG | sexypic##.jpg | sleeping.jpg |
IMGA####.JPG | sexypic#.jpg | Sleeping.jpg |
IMGP####.JPG | sexypics###.jpg | SLEEPING.jpg |
IMGP####.jpg | sexypics##.jpg | tongue.jpg |
IMPG####.jpg | sexypics#.jpg | Tongue.jpg |
KIF_####.jpg | Smile###.jpg | TONGUE.jpg |
mvc#####.jpg | Smile##.jpg | cute.jpg |
MVC0####.jpg | Smile#.jpg | Cute.jpg |
MVC-####.jpg | smile###.jpg | CUTE.jpg |
MYDC####.jpg | smile##.jpg | hehe.jpg |
P00#####.jpg | smile#.jpg | Hehe.jpg |
P10#####.jpg | mirror###.jpg | HEHE.jpg |
P101####.jpg | mirror##.jpg | us.jpg |
PC00####.jpg | mirror#.jpg | Us.jpg |
PANA####.JPG | single###.jpg | US.jpg |
PDR_####.JPG | single##.jpg | mesexy.jpg |
PDR_####.jpg | single#.jpg | Mesexy.jpg |
PDRM####.JPG | Happy###.jpg | MESEXY.jpg |
PDRM####.jpg | Happy##.jpg | underwear.jpg |
pdrm####.jpg | Happy#.jpg | Underwear.jpg |
pict####.jpg | happy###.jpg | UNDERWEAR.jpg |
Picture#####.jpg | happy##.jpg | thong.jpg |
Picture####.jpg | happy#.jpg | Thong.jpg |
Picture###-1.jpg | picture###.jpg | THONG.jpg |
Picture##-1.jpg | picture##.jpg | panties.jpg |
Picture#-1.jpg | picture#.jpg | Panties.jpg |
Picture###-2.jpg | cute###.jpg | PANTIES.jpg |
Picture##-2.jpg | cute##.jpg | bra.jpg |
Picture#-2.jpg | cute#.jpg | Bra.jpg |
Photo####.jpg | xxx###.jpg | BRA.jpg |
Photo###-1.jpg | xxx##.jpg | costume.jpg |
Photo##-1.jpg | xxx#.jpg | Costume.jpg |
Photo#-1.jpg | delete###.jpg | COSTUME.jpg |
S#######.jpg | delete##.jpg | heart.jpg |
S######.jpg | delete#.jpg | Heart.jpg |
S#####.jpg | Halloween###.jpg | HEART.jpg |
S####.jpg | Halloween##.jpg | bed.jpg |
SANY####.jpg | Halloween#.jpg | Bed.jpg |
SDC#####.jpg | halloween###.jpg | BED.jpg |
scan#####.jpg | halloween##.jpg | shower.jpg |
SPA#####.jpg | halloween#.jpg | Shower.jpg |
ST@_#####.jpg | Me###.jpg | SHOWER.jpg |
STA#####.jpg | Me##.jpg | bath.jpg |
STP#####.jpg | Me#.jpg | Bath.jpg |
PANA###.jpg | ME###.jpg | BATH.jpg |
{user}#.jpg | ME##.jpg | closet.jpg |
DSCI###.jpg | ME#.jpg | Closet.jpg |
DigitalCamera###.jpg | me###.jpg | CLOSET.jpg |
Image(##).jpg | me##.jpg | kitchen.jpg |
Image(##).JPG | me#.jpg | Kitchen.jpg |
mvc-###.jpg | 1-###.jpg | KITCHEN.jpg |
MVC-###.jpg | 1-##.jpg | fridge.jpg |
Sony#.jpg | 1-#.jpg | Fridge.jpg |
PhotoMoto_####.jpg | IMG_###.jpg | FRIDGE.jpg |
###-1.jpg | IMG_##.jpg | table.jpg |
##-1.jpg | IMG_#.jpg | Table.jpg |
#-1.jpg | naughty###.jpg | TABLE.jpg |
Picture###.png | naughty##.jpg | risque.jpg |
Picture##.png | naughty#.jpg | Risque.jpg |
Picture#.png | Naughty###.jpg | RISQUE.jpg |
stuff###.jpg | Naughty##.jpg | new.jpg |
stuff##.jpg | Naughty#.jpg | New.jpg |
stuff#.jpg | ass###.jpg | NEW.jpg |
stuff-#.jpg | ass##.jpg | old.jpg |
S###.jpg | ass#.jpg | Old.jpg |
S##.jpg | Ass###.jpg | OLD.jpg |
S#.jpg | Ass##.jpg | halloween.jpg |
s###.jpg | Ass#.jpg | Halloween.jpg |
s##.jpg | Pic###.jpg | HALLOWEEN.jpg |
s#.jpg | Pic##.jpg | cleavage.jpg |
unknown-###.jpg | Pic#.jpg | Cleavage.jpg |
unknown-##.jpg | pic###.jpg | CLEAVAGE.jpg |
unknown-#.jpg | pic##.jpg | pic.jpg |
Unknown-###.jpg | pic#.jpg | Pic.jpg |
Unknown-##.jpg | me.jpg | PIC.jpg |
So here you have it how to get pictures from Photobucket. Although I haven’t shown it here, this concept can be used for other picture sharing sites. As in anything that ever existed, this can be used for good and evil purposes. I started to get interested in computer security by reading that stuff when I was young so my goal here is to do the same, knowing that some script kiddies will probably use this.
Sayonnara