Charafantah's Cave

5 Jan 2008 Update: I found an application that does the same function on facebook, it can be found here, i have not tried it though and am not sure it provide the same functionality, but you can try

I wrote a small shell script in Bash and PHP, that takes the friends page from facebook and extracts the ID and names into a CSV file.

It could be useful to keep track of your friends and\or save a backup.
Or you could combine that with the “Hacking Facebook…Exposed” post and try to improvise with your own tricks
It could also be used as a reference, in case you want to check if someone blocked you, or deactivated their account (you can read here to check how to find if someone blocked you or deactivated their account)

• Open your facebook account
• Navigate to http://www.facebook.com/friends.php , make sure there is nothing after friends.php
• Save the page as HTML
• Copy\paste the code below to a text file (let’s call it fbf2csv.sh)
• Then chmod it (chmod 755 fbf2csv.sh)
• Then execute it (./fbf2csv.sh Friends.html output.csv)

 #!/bin/bash
echo 'Facebook Friends ID and Name extractor a.k.a FBF2CSV

by Achraf El Kashef (Charafantah) http:\\charafantah.wordpress.com\  11 Nov 2007

'

    if [ $# -ne 2 ]; then

         echo 1>&2 Usage: $0 friends.php.html output.txt

         exit 1

    fi


grep profile.php $1 | \

grep .jpg | \

grep -v sidebar | \

grep -oE 'id=[0-9]*&*[[:alpha:]]*;*[[:alpha:]]*">*[[:alpha:] -.]*</' | \

sed 's/id=//' | \

sed 's/">/,"/' | \

sed 's/<\//"/' | \

sed 's/&highlight//' > $2


cat $2

exit 0

I wrote this in 15 mins, so don’t complain about the code or tell me the regex could have been written in a better way(i suck at regex anyway)

Am going today to write this into a PHP script, and publish it online, should make it easier for people with no access to linux or cygwin.

You can get it here now: http://www.misr2000online.net/facebook/

If you can provide a better host for the php script (a decent one) please contact me.

Currently, the script will support names with the following:

• Multiple spaces in the name (e.g. John Doe Foo Bar)
• Dashes (e.g. John Foo-Bar)
• Single quotes (e.g. John Fo’ Bar)
• Dots (e.g. John F. Bar)

It will not support non Latin characters (e.g. accented characters like french é ê or anything like that, any entry like this will just be discarded,, you can however change the regex (on line 8 from bottom) to make it parse only the ID# and discard all the names) (anyone know how can i match these in regex?)

Please give me feed back if it doesn’t work as expected with you, i haven’t tested it on other lists than mine, but i expect it should work as fine.

NOTICE: THIS POST IS VERY OLD, AM NOT SURE THAT THIS INFO WILL BE WORKING AT THE TIME YOU TRY IT….DO NOT CONTACT ME ASKING TO HACK SOMEONE’S FACEBOOK ACCOUNT

d00d i0wn3d f4c3b00kzzzz!!! LOLLLLZROLFLMAO!!*!@!111

Ok, let’s be honest, it’s not exactly Hacking Facebook exposed, It’s merely some few tips for Facebook.

I found a few ways to know things that you should not know about, like who blocked you for example

First, let’s state a few fast facts about Facebook:

• Facebook give each user a unique ID
• A user can block an other user
• A user can deactivate his account
• You can see the name of any Facebook user
• Facebook has different privacy levels for each other
• You can get a certain user ID by checking any link he has (e.g. send message,add to friends etc) and check the id=XXXXXXXX in the URL, where the XXX is a number
• You can read here to know how to extract friends id’s from the friend’s page to a text(CSV) file.

Ok, so you have this person on your friends list, and s\he suddenly disappears from your contact, you want to know whether they deactivated their account, or they blocked you?

Here are a few more things i noticed in Facebook:

• If someone blocks you, his wall posts on your wall will not be removed,
  they will stay there with his name NOT hyper linked.
• If someone deactivates account, wall posts will be removed from your wall,
  but you can still view wall to wall. (read bottom)
• If someone removes you from friends wall posts will not be removed,
  they will stay there with his name hyper linked,
  when clicked u will see request friendship page.

You can view any wall-to-wall conversation between you and any user, even if he has his account deactivated, or if he removed you from his friends list using this URL:
 

You can also find out the name of anyone on Facebook, even if s\he blocked you, and even if the account is deactivated.
All you have to do is go to the send message page, and change the ID parameter, like this:
 Google to see other people’s photo albums, even if they do not have a public profile and you can’t see any of their details. This started to happen since facebook started to announce it will make records public.

put this in the search string: “site:facebook.com inurl:album” then view the “repeat the search with the omitted results included.”

also you can add another inurl:id=XXXXX to search for someone specific

—————————————————–

Also, i noticed that when you try to poke or send messages to non-friends simultaneously, it will tell you that you are about to get blocked, this happens after you poke\message more than 10 (i didn’t count exactly, am not too good with counting when it’s more than 10, math has never been my thing you know )

But you can send pokes\messages to your friends as much as you want (at least as much as i tried )

—————————————————–

It’s not much, but still could be useful

I spent a few days, trying to know if that person blocked or just deactivated their account after it disappeared suddenly from my friends list….well, i wish i didn’t know