{"id":21396854,"url":"https://github.com/posixpascal/lovoo-data-breach","last_synced_at":"2026-03-17T18:02:32.266Z","repository":{"id":78430592,"uuid":"69267072","full_name":"posixpascal/lovoo-data-breach","owner":"posixpascal","description":"A python script which exploits a lovoo vulnerability to determine the (almost) exact location of any user","archived":false,"fork":false,"pushed_at":"2016-10-07T10:50:18.000Z","size":7,"stargazers_count":7,"open_issues_count":0,"forks_count":1,"subscribers_count":7,"default_branch":"master","last_synced_at":"2026-01-04T10:58:46.026Z","etag":null,"topics":["exploits","lovoo"],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/posixpascal.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-09-26T15:59:41.000Z","updated_at":"2025-04-21T22:24:21.000Z","dependencies_parsed_at":"2023-04-19T22:04:35.565Z","dependency_job_id":null,"html_url":"https://github.com/posixpascal/lovoo-data-breach","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/posixpascal/lovoo-data-breach","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/posixpascal%2Flovoo-data-breach","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/posixpascal%2Flovoo-data-breach/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/posixpascal%2Flovoo-data-breach/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/posixpascal%2Flovoo-data-breach/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/posixpascal","download_url":"https://codeload.github.com/posixpascal/lovoo-data-breach/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/posixpascal%2Flovoo-data-breach/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30628405,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-17T17:32:55.572Z","status":"ssl_error","status_checked_at":"2026-03-17T17:32:38.732Z","response_time":56,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["exploits","lovoo"],"created_at":"2024-11-22T14:29:43.118Z","updated_at":"2026-03-17T18:02:32.260Z","avatar_url":"https://github.com/posixpascal.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Lovoo - Private Data Leak\n\nThis repository contains scripts to gather the location of any lovoo user (approx. 10meters difference) without having\nto register an independent account. This script exploits an *public* API route.\n\nThis api route returns a JSON response of users near a given location, a typical user response will contain\nthe following data:\n\n```json\n{\n    \"_type\": \"user\",\n    \"id\": \"XXXXXXX\",\n    \"name\": \"XXXXXXX\",\n    \"gender\": 1,\n    \"age\": 27,\n    \"lastOnlineTime\": 1474896338,\n    \"whazzup\": \"\",\n    \"freetext\": \"XXXXXXX\",\n    \"isInfluencer\": 0,\n    \"flirtInterests\": [ ],\n    \"options\": {\n        \"profileShareable\": 1\n    },\n    \"isVip\": 0,\n    \"counts\": {\n        \"p\": 4,\n        \"m\": 8\n    },\n    \"locations\": {\n        \"home\": {\n            \"city\": \"XXXXXXXX\",\n            \"country\": \"DE\",\n            \"distance\": 4.4\n        },\n        \"current\": {\n            \"city\": \"XXXXX\",\n            \"country\": \"DE\",\n            \"distance\": 4.4\n        }\n    },\n    \"mutualHashtagCount\": 0,\n    \"isNew\": 0,\n    \"isOnline\": 0,\n    \"isMobile\": 0,\n    \"isHighlighted\": 0,\n    \"picture\": \"XXXX\",\n    \"images\": [\n        {\n            \"url\": \"https://img.lovoo.com/users/pictures/XXXXX/thumb_l.jpg\",\n            \"width\": 160,\n            \"height\": 160\n        },\n        {\n        \"url\": \"https://img.lovoo.com/users/pictures/XXXXX/image.jpg\",\n        \"width\": 958,\n        \"height\": 1280\n        }\n    ],\n    \"isVerified\": 0,\n    \"verifications\": {\n        \"facebook\": 0,\n        \"verified\": 0,\n        \"confirmed\": 1\n    }\n   }\n```\n\n\n\nThe interesting part of this response is the fact that you can specify any location and the users distance is calculated\nby the lat/lng you speicified. In the example above you can see that the user is 4.4kilometres away from my pseudo\nlocation. With this data you can basically triangulate a user with no more than 7 queries to the lovoo API.\n\nOther things exposed by this API:\n- locations\n- images (public)\n- facebook user\n- lastOnlineTime\n- username\n- gender\n- relationship status\n\nIf you are authenticated you can also get the following:\n- profile \"matches\" - this is a lovoo-thing I don't know.\n- flirt interests\n\nYou may run this script using the lovoo.py (this is also available as a module)\n\n```\npython lovoo.py\n```\n\nThis script starts with a preset location and then checks subsequent api responses in nearby locations.\nYou can get even higher accuracy by providing more samples.\n\nThe **geo.py#LocationMapper** does the calculation where the user currently is. The implementation is left blank intentionally\nbecause I don't want to encourage abuse of this API.\n\nAfter the script succeeded you can view the saved locations (on a per-user basis) in the **data.json** file.\n\n## Contribution\nI don't want any feature contribution\n\n## License\nLicense = WTFPL\n\n## Status\n-Working as of 26.09.2016-\nNot working as of 04.10.2016\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fposixpascal%2Flovoo-data-breach","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fposixpascal%2Flovoo-data-breach","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fposixpascal%2Flovoo-data-breach/lists"}