Disabling New Emails From Facebook Without Email Owner Interaction

Zahid Ali
Zahid Ali
Jul 26, 2017 · 2 min read

I was following lokesh kumar’s bug ‘Confirming new email/mobile-number bug in facebook’ https://www.youtube.com/watch?v=4euBQCMxlE8 …. He found this bug in 2016 and i was following in 2017 as i saw it to late. You can see the video he wrote ‘POC’ inside the video.

So i was following the steps and was like ‘wow’ bug has been fixed. Now what’s next???

I thought what if the whole account is disable. As you people know there are a few ways to disable facebook account for reporting fake account or that specific account violates facebook terms and conditions. So i did something fishy here ;d , i copied celebrities photos in my test account and set as a display and cover photos. After that reported from another account that this guy is violates facebook AUP.

After a few hours my account has been disabled from facebook and due to the disability unconfirmed email was also disabled permanently.

Proof of concept

  1. Create facebook account with the email you want to disable permanently and do not confirm email.
  2. copy the photos of any celebrity ‘‘verified one’’
  3. upload on your display and cover photo
  4. Now change your first name last name and set as it is the one from where you copied the photos. (celebrities first name last name)
  5. report that account from your another fb id.
  6. that’s it. In return facebook disable the unconfirmed email aswel.

WARNING.

This is a working bug so do not harm any user. Try to test it to your own email addresses.

According to Facebook policy only email owner can disable his email id permanently and for that facebook send that instructions in a very first email when we create facebook account.

Image for post
Image for post

But here attacker can disable any email id permanently from facebook without email owner interaction.

Got a reply from admin ‘Neal’

Image for post
Image for post

After all facebook knows their security best.

Report closed as . N/A

Welcome to a place where words matter. On Medium, smart voices and original ideas take center stage - with no ads in sight. Watch
Follow all the topics you care about, and we’ll deliver the best stories for you to your homepage and inbox. Explore
Get unlimited access to the best stories on Medium — and support writers while you’re at it. Just $5/month. Upgrade

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store