A lot of ways exists, The most easy is to do osint on the target and try...

U can check email address on HIBP and search a leaked db with password. U can try search email on fb leak. GL :)

W00W 😊

phishing or leak credentials.

(November 11, 2022, 12:45 AM)pooragelol Wrote: I'd probably recommend some sort of social engineering attack over hacking. If you have to ask how, it might be out of your skill range at the moment. You might be able to find breaches that the email used for the facebook account has been involved with, find the passwords from that, then test and see if the password has been reused for the account.

...would be my first idea as well