This POC demonstrates that exploiting a Facebook flaw it is possible the disclosure of Friends List even when your friend has blocked access to his friends list. The PoC is a Proof of Concept made by BHAVESH NAIK who discovered the loophole on July 17, 2013. The vulnerability was reported to Facebook but it has not been fixed by Facebook and is currently unfixed. The POC is a proof of concept that can be used to see who is in your friends list even if your friend blocks access to the list.”]

