Here’s a quick little (albeit limited) HOW TO using the mobile Photobucket pages. If you want to see the pics in, say, “test”s album, you have to start with a filename you already know is in the album, say, pic074.jpg. The universal URL is:

http://m301.photobucket.com/albumview/albums/*/*.html?

you then insert the album username and image filename into this address (in place of the asterisks)

http://m225.photobucket.com/albumview/albums/test/pic074.jpg.html?

By hitting Prev or Next you can see all the pics in the album. To see the full sized pic you’ll have to take the filename and tag it onto the end of the regular Photobucket URL, like this:

http://i225.photobucket.com/albums/dd85/test/pic074.jpg

The key is to make sure you leave that .html? after the .jpg (or .gif or .png) at the end, after the name of the pic in the bucket. This also works for sub-albums, however you must know the name of the sub-album and at least one filename in the sub-album. Gotta love passive security.

Filed under: exploit, howto