Using Facebook Notes to DDoS any websitePosted by chr13 on April 20, 2014 Leave a comment 50Go to commentsFacebook Notes allows users to include <img> tags. Whenever a <img> tag is used, Facebook crawls the image from the external server and caches it. Facebook will only cache the image once however using random get parameters the cache can be by-passed and the feature can be abused to cause a huge HTTP GET flood.Steps to re-create the bug as reported to Facebook Bug Bounty on March 03, 2014.Step 1. Create a list of unique img tags as one tag is crawled only once <img src=http://targetname/file?r=1></img> <img src=http://targetname/file?r=1></img> .. <img src=http://targetname/file?r=1000></img>Step 2. Use m.facebook.com to create the notes. It silently truncates the notes to a fixed length.Step 3. Create several notes from the same user or different user. Each note is now responsible for 1000+ http request.Step 4. View all the notes at the same time. The target server is observed to have massive http get flood. Thousands of get request are sent to a single server in a couple of seconds. Total number of facebook servers accessing in parallel is 100+.

via Using Facebook Notes to DDoS any website | A Programmer's Blog.