facebook - Grabbing permanent access token which Never expir

facebook - Grabbing permanent access token which Never expires of your accounts and pages.

WEB: http://www.rootbyte.com.mx/
FaceBook: https://www.facebook.com/Rootbyte
Group FaceBook: https://www.facebook.com/groups/RootByte/
Twitter:  https://twitter.com/rootbytemx

Exploit:

1.      Make sure you are the admin of the FB page you wish to pull info from
2.      Create a FB App (should be with the same user account that is the page admin)
3.      Head over to the Facebook Graph API Explorer
4.On the top right, in "Application", select the app you created
5.      Click "Get Access Token"
6.      Make sure you add the manage_pages permission
7.      Convert this short-lived access token into a long-lived one by making this Graph API call:https://graph.facebook.com/oauth/access_token?client_id=&client_secret=&grant_type=fb_exchange_token&fb_exchange_token=
8.      Grab the new long-lived access token returned back
9.      Make a Graph API call to see your accounts using the new long-lived access token:https://graph.facebook.com/me/accounts?access_token=
10.     Grab the access_token for the page you'll be pulling info from
11.     Lint the token to see that it is set to Expires: Never!
PS: don’t share this access token anywhere and keep it in a secure place, anyone having this access token can control our Facebook Page. Hopes this was useful!! Happy programming :)




-----------------------------------------------------------------------------------------------------------------------------------------

android , symlink , root , deface , hack , backtrack , apache , litespeed , linux , windows , php , asp , aspx , c# , c++ , perl , python , localroot , shell , SSH , facebook , hacking , sqli , XSS , CSRF , 0day , exploit , carding , CVV , fullz , VBV , trojan , virus , worm , DDOS , zeus , botnet , carding , centos , plesk , redhat , ubuntu , unix , iOS , booter , hex , MD5 , Sha1 , crypt , base64 , SQL , MYSQL , VPN , scam , spam , RAT , keylogger , phishing , bruteforce , dox , joomla , wordpress , drupal , phpbb , mybb , RDP , SMTP , java