FIRESHEEP TUTORIAL (Http Session Hijacking)

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9y0BqW_g63weWiWrdE3IQEd-m_GKvH4sTLpkSUZAJhiT0ZfPb7JGYwNlfGtCR2dLgAP-oaP9uwxZm981fmESKWX6PkYAOqc2BTfidnld6PZRkn95OboZxS8J-vqsRv1lnKFycmRDl7iY/s1600/Firesheep.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="145" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9y0BqW_g63weWiWrdE3IQEd-m_GKvH4sTLpkSUZAJhiT0ZfPb7JGYwNlfGtCR2dLgAP-oaP9uwxZm981fmESKWX6PkYAOqc2BTfidnld6PZRkn95OboZxS8J-vqsRv1lnKFycmRDl7iY/s200/Firesheep.jpg" width="160" /></a></div>Firesheep a Firefox addon has recently become very popular for easily carrying out a HTTP session hijacking attack. Http session hijacking attack can't be considered as a very sophisticated attack but needs some technical knowlegde to be performed . But Firesheep makes the attack a child's play. Firesheep was developed by Eric butler for Firefox, it was released at Toorcon 12 to demonstrate how serious cookie stealing can be.<br />Now lets understand how Firesheep actually works. When you provide your username and password in login forms of different website and submit it, the browser first encrypts the password and then sends it over the network. The corresponding website compares the information against its internal database and if they match, it sends a cookie(a small text file) to your browser. The browser saves this cookie and uses it to authenticate the user on the website every time the user opens a different page of the website. When the user logs out of his account the browser just deletes the cookie. Now the problem is that this cookies are not encrypted before sending over the network, due to this a hacker can capture this cookies and using them authenticate himself as the user from whom the cookie was stolen.<br />Now lets see how to use Firesheep.<br /><a name='more'></a><br /><br /><b>Step 1</b>) First download and install WinPcap (WinPcap in Windows is used for capturing network traffic.)<br />            You can use Pcap in libPcap library for unix like systems.<br />            <a href="http://www.winpcap.org/install/default.htm" target="_blank"><b style="color: blue;">DOWNLOAD WinPcap</b></a><br /><br /><b>Step 2</b>) Download and open Firesheep in Firefox, it will automatically install it. Or just drag it and place it<br />             over Firefox shortcut (Firesheep at this instant is not supporting Firefox 4 ).<br />            <a href="http://codebutler.github.com/firesheep/" target="_blank"><b style="color: blue;"> DOWNLOAD Firesheep. </b></a><br /><br /><b>Step 3</b>) After it is installed, in Firefox go to View -->Sidebar --> Firesheep. A side bar will appear in the<br />            browser with a button "start capturing", press it and sit back. In few seconds you will see account<br />            details with photos of the target. Click on one of it and you will directly enter in his account. Simple<br />            as that.<br /><span id="goog_442889549"></span><span id="goog_442889550"></span><br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqkFvI_h2kZfy7mMrC7enzRr90UjWDwgVCPuA-vJo5MxJ3x-5cUz2F7ZR_U9PX5CK-ehiRON6wHr2SMB6XDst9rOKKPFR_q_X17dixmpyOYXbcPPYx0A0uahBbcp4TrPfOlJ0QpsAGn7U/s1600/firesheep%252Btutorial.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqkFvI_h2kZfy7mMrC7enzRr90UjWDwgVCPuA-vJo5MxJ3x-5cUz2F7ZR_U9PX5CK-ehiRON6wHr2SMB6XDst9rOKKPFR_q_X17dixmpyOYXbcPPYx0A0uahBbcp4TrPfOlJ0QpsAGn7U/s1600/firesheep%252Btutorial.png" /></a></div><b>Note</b>:- Using Firesheep to hijack others account is illegal under wiretapping Act.</div>

• 
• 

1. 1
2. 2

• Previous
• Next

FIRESHEEP TUTORIAL (Http Session Hijacking)

Firesheep a Firefox addon has recently become very popular for easily carrying out a HTTP session hijacking attack. Http session hijacking attack can't be considered as a very sophisticated attack but…

Read more »

REVEALING PASSWORD HIDDEN BEHIND ASTERISKS

<div dir="ltr" style="text-align: left;" trbidi="on"><br />When you type a password in the password form while logging into any of your account the letters of the password are hidden behind asterisk, so that nobody can have a sneak peak at your password. But many times you may want to know whats behind the asterisks. Here are some methods to reveal the passwords behind asterisks.<br /><br /><span style="font-size: large;"><b>1) Using Javascript</b></span><br /><br />Using a simple javascript you can reveal all passwords behind the asterisks, here is the procedure.<br /><b>1)</b>Open the webpage containing the login form with the password behind the asterisks.<br /><br /><a name='more'></a> <b>2)</b><code style="color: blue;"> </code><br /><code style="color: blue;">javascript:(function(){var s,F,j,f,i; s = ""; F = document.forms; for(j=0; j<F.length; ++j) { f = F[j]; for (i=0; i<f.length; ++i) { if (f[i].type.toLowerCase() == "password") s += f[i].value + "\n"; } } if (s) alert("Passwords on this page:\n\n" + s); else alert("No passwords in on this page.");})();</code><br /><br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi28Ij2vO3FUDqw7axP7Ica1bjP6kv7rOYxqzZR2HHbwQ532wD4bycxnfHKl6x1dhfmxEgoggTkGPGT1xAfYVlOYO5sSTERHwkq58eXI0Y9irgsDm3dxs3OSFOjDKmIJXaWrTdJKPYhYgs/s1600/password+reveal.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="124" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi28Ij2vO3FUDqw7axP7Ica1bjP6kv7rOYxqzZR2HHbwQ532wD4bycxnfHKl6x1dhfmxEgoggTkGPGT1xAfYVlOYO5sSTERHwkq58eXI0Y9irgsDm3dxs3OSFOjDKmIJXaWrTdJKPYhYgs/s200/password+reveal.jpg" width="200" /></a><br /><code><code><code>Copy the above javascript and paste it in the address bar of the browser and press enter. Instantly a box with the password pops out.</code></code><br /><br /><code><code><code>This method works on mostly all the browsers and all the websites like facebook, gmail etc. </code></code></code><br /><code><code><code><br /></code></code></code><br /><code><code><code></code></code></code><code><code></code></code><span style="font-size: large;"><b><br /></b></span></code><br /><div style="font-family: inherit;"><span style="font-size: large;"><b><code><code><code>2)Password Viewer</code></code></code></b></span></div><code><code><code><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjc_LdkfaNEn1-0ZaNqspNWOSpCfyR_6eBLtr5rLtGpS9pa53qRt47JiLiUiE3trWnijXqDnjMMdqt_KAc9v77b9CKi8c78akk20pVrO5Z3zwDJ7CAkHhyZn9LIldzW9RjMXk1kg8FhJlg/s1600/p-v.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjc_LdkfaNEn1-0ZaNqspNWOSpCfyR_6eBLtr5rLtGpS9pa53qRt47JiLiUiE3trWnijXqDnjMMdqt_KAc9v77b9CKi8c78akk20pVrO5Z3zwDJ7CAkHhyZn9LIldzW9RjMXk1kg8FhJlg/s1600/p-v.png" /></a><span style="font-size: large;"><span style="font-size: small;">Using password viewer you can take a quick look at the passwords hidden behind asterisks in the password Field. Using it you can also view password in the input field data on a page inside Internet explorer window.</span></span> It is very useful to see password in the instant messaging software like Gtalk and Yahoo messenger. Just click on the hand and place the telescopic pointer on the password field it will instantly reveal the password.</code></code></code><br /><code><code><code><br /></code></code></code><br /><code><code><code><span style="font-size: large;"><a href="http://www.softpedia.com/get/Security/Security-Related/Password-Viewer.shtml" target="_blank"><b style="color: blue;">DOWNLOAD</b></a></span></code></code></code><b><i><strike></strike></i></b> <br /><blockquote></blockquote></div>

• 
• 

1. 1
2. 2

• Previous
• Next

REVEALING PASSWORD HIDDEN BEHIND ASTERISKS

When you type a password in the password form while logging into any of your account the letters of the password are hidden behind asterisk, so that nobody can have a sneak peak at your password. But …

Read more »

SECURITY REDEFINED (Make your drive unhackable)

<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzGmTYaE0Sz12pGNi6_1B9VYdxdW-c08dOTkx1XZAZQeugeCXB6pCTOTJVZceO9KiQqrylpuOHBQNXinHsf-Dzai5BhKWMGUZqC3FyTlzeqd8JjLwIVPuJJg7XH25nHV__AYsFi2TrbWaC/s1600/ws1.jpg.jpg" onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}"><img alt="" border="0" id="BLOGGER_PHOTO_ID_5517198480768126482" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzGmTYaE0Sz12pGNi6_1B9VYdxdW-c08dOTkx1XZAZQeugeCXB6pCTOTJVZceO9KiQqrylpuOHBQNXinHsf-Dzai5BhKWMGUZqC3FyTlzeqd8JjLwIVPuJJg7XH25nHV__AYsFi2TrbWaC/s320/ws1.jpg.jpg" style="cursor: pointer; float: left; height: 114px; margin: 0pt 10px 10px 0pt; width: 320px;" /></a><br /><b>Make your drive virtually unhackable by enabling TPM on your machine.</b><br /><b><br /></b>We all know how easy it is for snoopers to get their hands on private and confidential data. That’s the main reason we need to constantly refine our security policies to keep confidential data safe. While there are many software applications that will do the job they could be easy to crack; at least for a seasoned hacker. That’s not the only reason to be worried. Imagine losing your laptop or even your portable drive which contains important data.<br /><br /><br />What we are referring to is hardware based encryption rather than the more common software based methods. To begin with you will need a PC with a motherboard that has an embedded TPM (Trusted Platform Module) chip. So before we even get into the intricacies of setting up the encryption system, let’s go a little further and understand the basic functionality of a TPM based motherboard.<br /><br /><a name='more'></a><br />In very simple terms, a TPM chip basically generates random encryption keys where half of the key is stored within the chip and is encrypted/decrypted using an incredibly strong 2048-bit RSA algorithm. This essentially makes it impossible to recover data from the encrypted drive, making it unique to the machine that was used for encryption. In other words, the contents of a protected drive are unreadable when connected to another machine or read by any unauthorized person.<br /><br />Before we start, make sure that your motherboard or laptop has the Trusted Platform Module chip. Refer to the manual to confirm this. If it does you will need to make sure it is enabled in the BIOS. Before we progress further make doubly sure that you have not already encrypted any files using this method. If the user information is ever cleared, encrypted files will become inaccessible. Please do back up any protected files first! We also suggest backing up important data before proceeding.<br /><br />Start your machine and press the [Delete] key to get access to the BIOS. For laptops it should either be the [F12] or the [F8] key. Search for the term “Security Chip Configuration” or a similar title and press [Enter]. Now select “Enabled” for the Security Chip and move to “Clear Security Chip”. Once the user information has been cleared save changes to the BIOS by pressing [F10], and restart.<br /><br />Once you have logged into Windows install the TPM driver (check your motherboard CD/DVD) and restart again. This workshop uses a Gigabyte board that had an Infineon TPM chip. If you have a different chip note that the steps will be a little different, so excercise caution and check all options first.<br /><br /><br />Activating the TPM chip<br /><br />Step 1: Bring up the “Infineon Platform Security wizard” by double clicking on the TPM icon. Click “Next” and select “Security Platform Initialization”. On proceeding you will need to feed in a password to initialize the process. Consider this to be your master password as you will need it whenever you want to make global changes.<br /><br />Step 2: The Features menu allows you to choose three basic options such as “Automatic Backups”, “Password reset” and “BitLocker Drive Encryption”. We suggest you use the “Automatic backup” and “Password reset” features. Click on “Next” and choose your backup location. You can also reschedule your backup if the default time is not convenient. Clicking on Next will take you to the “Password Reset” menu. Make sure “Create a new Token” is selected and choose a file location. Here it is advisable to save the token to a portable drive rather than the hard drive. Enter the password and click on “Next”. The wizard should now be ready to start initializing the TPM chip. Run an automatic backup once the wizard has initialized the chip.<br /><br /><br />User Initialization Wizard<br /><br />Step 3: Double clicking the TPM icon will now bring up the User Initialization Wizard; choose “Next”. You will be asked to feed in your “Basic User Key”. This allows you to make user specific changes. On proceeding you will again be asked to create a Basic User Password reset key. We again recommend saving it to a pen drive. Confirm the setting and click on Next to initialize the setting for the user.<br /><br /><br />Step 4: The next couple of steps will allow you to enable and disable features such as “Encrypting File System” and “Personal Secure Drive”. On the Security Platform Features menu uncheck the “Secure e-mail” while keeping EFS and PSD checked before proceeding.<br /><br /><br />Step 5: To create an encryption certificate click on “Select” and choose “Create”. Select the created certificate and hit “Select”. You should now be able to view the certificate that was chosen. The next step allows you to create your own secure hidden drive.<br /><br /><br />Step 6: Map your drive to any one of the alphabets in the dropdown menu and give your new hidden drive a name. Leave the “Load my Personal Secure Drive at logon” option unchecked and click on “Next”. Decide on the amount of storage space that you want to assign to the secure drive. Now choose an existing drive where this virtual drive will actually reside. Make sure that the drive that’s chosen has enough free space to allocate. Click on Next and enter your basic user password following which the wizard starts configuring the features selected. Click Finish and you are all set to secure your files and folders.<br /><br /><br />You can load and unload your protected drive by simply right clicking on the TPM icon and navigating to “Personal Secure Drive | Load/Unload”. You can choose to either copy or send files and folders to your secure drive by simply right clicking and selecting the appropriate option.<br /><br /><br />Bitlocker Drive Encryption<br /><br />For people who don’t own a TPM based motherboard or laptop there is yet another way of securing your valuable data. Windows itself comes with a utility known as BitLocker Drive Encryption. This feature can only be found in the Ultimate and Enterprise versions of Windows Vista, Windows 7 and Windows Server 2008 (Windows 7 comes with Bitlocker To Go for portable drives as well). This feature was designed to make use of a Trusted Platform Module (TPM) chip, but there is a way to work around this if you don't have one.<br /><br /><br />Follow the instructions carefully and back up your system before proceeding. Keep in mind that the Bitlocker Drive Encryption is designed to encrypt an entire partition or volume. Also the time taken to encrypt the entire drive depends on the overall size.<br /><br /><br />Step 1: Open the start menu and type “Group Policy” in the search box. Now in the Local Computer Policy window navigate to “Computer Configuration | Administrative Templates | Windows Components | BitLocker Drive Encryption | Operating System Drives”. Right click on “Require additional authentication at startup” and click “Edit”.<br /><br /><br />Step 2: On the opened page select “Enabled” under “Require additional authentication at startup” and under options check “Allow BitLocker without a compatible TPM”. Once checked other options will automatically change; ignore the automated changes. After you have enabled it to start without a compatible TPM chip, click on Apply and exit the Group Policy editor. The above process basically enables BitLocker but without its full range of effectiveness.<br /><br /><br />Step 3: To enable BitLocker you will need to search for a file named “BitLocker”. Open the Windows Vista or Windows 7 start menu and type “BitLocker” in the search bar. Run the program “BitLocker Drive Encryption”. You should now be able to view all drives currently connected to your system. Select the drive that you want to encrypt and click “Turn on BitLocker”.<br /><br /><br />Step 4: Now select “Use a password to unlock the device” and type in your password. Further on you will be asked to “Save the recovery key to a file”. Save the file either to the hard disk or a portable pen drive to proceed. The recovery key is now your only option to able to access your device in case you forget the password. Once you are done click “Start Encrypting”.<br /><br /><br />Note: Do not save your recovery key on the same drive that is being encrypted else you will not be able to unlock the device in case you forget the password!

SECURITY REDEFINED (Make your drive unhackable)

Make your drive virtually unhackable by enabling TPM on your machine.We all know how easy it is for snoopers to get their hands on private and confidential data. That’s the main reason we need to cons…

Read more »

HACK FACEBOOK PASSWORD USING EASY METHODS

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-FOZaGOdaZqj1p67iBaWFV3oxx83dBZrUXQXa9S9XsxN7a0SJcYrz2w5SV0hhu8xyQHpvdC7zeLJf8F26RMqAJUVqIh_H7g7-E_X24UTPTHwOf2IXjcsNYzxo_F5NZ3kvIF1EouB7hUM/s1600/images.jpeg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="75" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-FOZaGOdaZqj1p67iBaWFV3oxx83dBZrUXQXa9S9XsxN7a0SJcYrz2w5SV0hhu8xyQHpvdC7zeLJf8F26RMqAJUVqIh_H7g7-E_X24UTPTHwOf2IXjcsNYzxo_F5NZ3kvIF1EouB7hUM/s200/images.jpeg" width="200" /></a>Facebook is the latest teenage craze all around the world. I have seen many people wasting hours for finding different methods and ways for hacking their friend's or enemy's facebook account. Most of the sites claiming to teach easy facebook hacking methods are spam and try to sell you useless hacking ebooks or other senseless softwares.Some even claim to hack the facebook passwords for free for you. Wake up people and think logically. First let me make something clear to you, there is no such software or tool which will hack the Facebook account password for you, while you sit back and enjoy your cappuccino and don't even think of hacking into the facebook databases to get the passwords. But hacking facebook accounts is not completely impossible, i would say it can be done rather very easily if you decide to give your time and have some patience. There are may be hundreds of ways to <span style="color: blue;"><a href="http://www.hack-facebook-account.com/" target="_blank"><span style="color: blue;">hack facebook account password</span></a></span>, but here i am providing you some, which i am familiar with. This is a long post and i have tried to provide all the methods in great detail so bear with me.Now let us begin.<br /><br /><br /><span style="font-size: large;"><b>1) KEYLOGGING</b></span><br /><br /><u>Type</u>:- software and hardware<br /><u>Tools needed</u>:- Keylogger software or keylogger device <br /><u>Special skills needed</u>:- no special skills needed but some commonsense , some prior knowledge of the target and convincing power.<br /><u>Main enemy</u>:- Antivirus software and Firewalls.<br /><br /><a name='more'></a>Keylogging is one of the easiest and most widely used hacking method for hacking Facebook passwords. The word keylogging means to keep a track / log of the keys pressed on the computer.There are mainly two ways of keylogging, Software and hardware.<br /><br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTRXSmQUUNoAhEyfaiL7acH9WQ_4Igg5IXYUMgZU_-MdoD2onizWCHUdS6nXUEMMmlMyMOAc-uDl9X8L7DCU1sspVmR0plLu9Zw80zsmxmJE-haqkr_Xm8TrLr39hz365S31-fAJynFWY/s1600/Keylogger.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="90" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTRXSmQUUNoAhEyfaiL7acH9WQ_4Igg5IXYUMgZU_-MdoD2onizWCHUdS6nXUEMMmlMyMOAc-uDl9X8L7DCU1sspVmR0plLu9Zw80zsmxmJE-haqkr_Xm8TrLr39hz365S31-fAJynFWY/s200/Keylogger.jpg" width="120" /></a><b>1</b>) <b>Hardware</b>:- Special computer devices for keylogging are available. They are connected to the keyboard wire and then to the CPU. It looks like the keyboard wire's part and cant be easily detected.When needed the device can be disconnected and the logs can be viewed.<br />*Bad points:- This method is mostly not preferred for hacking facebook passwords, as the devices are costly and need physical access to the computer.<br /><br /><b>2</b>) <b>Software</b> :- There are thousands of different keylogger software which provide the user with a wide range of options.From them the keylogger which can be remotely installed is preferred for hacking Facebook passwords.They keep log of the keys pressed on the target's computer while remaining hidden and after some specific time send it as a email to the user without the target's knowledge..<br />*Bad points :-Most of the keyloggers are detected by the Antivirus and Firewall softwares, but some keyloggers are able to bypass the Antivirus and Firewall software. You also have to convince the target to install the keylogger while remote installing it.<br /><br /><b><span style="color: red;">Personal Tip</span></b>:- Try the keyloggers which come under the parental control category which are used by parents to keep an eye on the child's online activities. This keylogger are mostly Antivirus and Firewall friendly. The AV and firewall wont detect them because if they did detect it then the child will come to know about it and it will be of no use. The only short coming of these keylogger is that they dont have remote installation feature.<br /><br /><br /><span style="font-size: large;"><b>2) PHISHING</b></span><br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjD3lLCUCZGmFEMOugPriLDQuUByyUx6z91btZfmHfLck9YDCDHnLjk6Dp1OJeWZn7JAYmU8AozGCSQQ52ViiictCCAE9CQy1xhRKSAPTsyztiJXnEnw8U2TmIeAnVlrEt_lJ9ZaX_jtwA/s1600/Phishing.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="180" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjD3lLCUCZGmFEMOugPriLDQuUByyUx6z91btZfmHfLck9YDCDHnLjk6Dp1OJeWZn7JAYmU8AozGCSQQ52ViiictCCAE9CQy1xhRKSAPTsyztiJXnEnw8U2TmIeAnVlrEt_lJ9ZaX_jtwA/s200/Phishing.jpg" width="200" /></a><br /><u>Special skills needed</u>:- no special skills needed but some convincing power.<br /><u>Many enemy</u>:- Intelligent targets.<br /><br />Phishing is the most widely used hacking method for hacking Facebook passwords. In phishing the attacker sends the target a link. When the target clicks on the link, it takes the target to a fake website which looks same as the real Facebook login page. The attacker convinces the target to log in through that page. When the target types his password and clicks the log in button, the password is instead send to attacker and the target is again redirected to the real website.<br /><br />Here is a tutorial about phishing.<br /><br /><b>S</b><b>tep 1</b>) First you must sign for a free webhosting service like <a href="http://www.byethost.com/" target="_blank"><b style="color: blue;">www.byethost.com</b></a><br />And register your subdomain.<br />after signing you will have a subdomain like www.yourname.byethost.com<br /><br /><b>Step 2</b>) Now login to your account go to "control panel" then in site management option go to "online file manager" and open the folder "htdocs".<br /><br /><b>Step 3</b>) Now <b><a href="http://www.ziddu.com/download/17629539/FBPHIHER.rar.html" style="color: blue;" target="_blank"><span style="text-decoration: underline;">DOWNLOAD THIS FILE</span></a></b>  (<a href="http://wikisend.com/download/443272/FBPHIHER.rar" target="_blank"><b style="color: blue;">Alternate link</b></a>)to your computer add extract the file. Inside the folder you will find two files index.htm and write.php.<br /><br /><b>Step 4</b>) Now replace the index.htm file in the "htdocs" of the "online file manager" with the file index.htm of the phisher folder in your computer and also upload write.php file in "htdocs" thats it! you are done.<br /><br /><b>Step 5</b>) Now your homepage www.yourname.byethost.com has become a phisher. open it, you will see that your page www.yourname.byethost.com has become the login page of the site you want to hack.now all you have to do is send this link to the person whose account you want to hack.when he tries to login through it you will receive a file password.html in your "htdocs" folder of your phpnet.us account which contains the username and password of your victim. <br /><br /><b><span style="color: red;">Personal Note</span></b>:- The attacker must have a very good convincing power to hack the facebook password with this method. Please try this method carefully as now it is widely known and the target may soon guess the attacker's intentions. The target may report the fake site and you may get in trouble. <br /><br /><br /><span style="font-size: large;"><b>3) HTTP SESSION HIJACKING (Cookie Stealing)</b></span><br /><br /><u>Tools needed</u>:- FIRESHEEP software and a laptop, as this is a wireless Internet vulnerability.<br /><u>Special skills needed</u>:- No special skills is needed.<br /><u>Main enemy</u> :- Blacksheep  <br /><br />This method is a bit less known but in recent months it has become widely popular due to the introduction of the software 'FIRESHEEP'. <span style="font-family: inherit; font-size: small;">When you log in to your account at a website, your web browser sends your username and password to the website server. The password is first encrypted and then send over the network. Then the server checks the username and password against the database and if they both match then sends to the user's browser a "cookie" (a text which the browser uses for further requests to the web server) but unlike the password the cookies are not encrypted and are sent as it is over the network, this cookies can be easily captured as they travel through the network or a busy WI-FI. The newly released Firefox extension "FIRESHEEP" makes it more easy. Actually so easy that even a total nube can capture this cookies. For a detailed tutorial on Firesheep  <span style="font-size: large;"><a href="http://hacking-for-beginners.blogspot.com/2011/01/firesheep-tutorial-http-session.html" target="_blank"><b><span style="color: blue;">CLICK HERE</span></b></a></span></span><br /><br /><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><b><span style="color: red;">PERSONAL NOTE:- </span></b><span style="color: red;"><span style="color: black;">The addon Firesheep had become very popular recently so software Blacksheep was developed which stops Firesheep.</span></span> </span></span><br /><br /><br /><br /><span style="font-size: large;"><b><span style="font-family: inherit;"><span style="color: black;">4) SOCIAL ENGINEERING</span></span></b></span><br /><span style="font-size: large;"><b><span style="font-family: inherit;"><span style="color: blue;"><span style="color: black;"> </span></span></span></b></span><br /><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><span style="color: black;"><u>Type</u> :-Psychological</span></span></span><br /><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><span style="color: black;"><u>Special skills</u> :- Patience and Confidence.</span></span></span><br /><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><span style="color: black;"><u>Main enemy</u>:- intelligent target.</span></span></span><br /><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><span style="color: black;"><br /></span></span></span><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXbInT5F-K6T8dp_O7p2BPQvB1gxmXLzm39dScpeVR5keu2QOu5q2jmsyH_z3sgx9AL27TZcIyjqswLyeYreLdgwLYRAGZbj2I4daWesy6o9WONOoD1Jn0c6oZhzk6FKQc-MUp2ySihxA/s1600/social_engineering.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXbInT5F-K6T8dp_O7p2BPQvB1gxmXLzm39dScpeVR5keu2QOu5q2jmsyH_z3sgx9AL27TZcIyjqswLyeYreLdgwLYRAGZbj2I4daWesy6o9WONOoD1Jn0c6oZhzk6FKQc-MUp2ySihxA/s200/social_engineering.jpg" width="170" /></a></div><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><span style="color: black;">This is not a sure way of hacking facebook passwords but given the time and Patience can yield pretty interesting results.Social engineering attack means to gather information from the target or by using the prior knowledge of the target and then use it to hack the target's facebook password by guessing the password or resetting the password. Gather basic information about the target like </span></span></span><br /><ul><li><span style="font-family: inherit; font-size: small;"><span style="color: black;">Birth date</span></span></li><li>Mobile number</li><li>The skill he is good at.</li><li>favourite historical personality etc</li></ul><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><span style="color: black;">and from this information try to guess the target password you will be surprised to see how many people have such guessable passwords.</span></span></span><br /><br /><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><span style="color: black;"><b><span style="color: red;">Personal Note</span></b>:- Though this is a effective method don't waste too much time in it as there are other aspects of social engineering which i am know presenting in front of you try them.</span></span></span><br /><br /><b><span style="font-family: inherit; font-size: large;"><span style="color: blue;"><span style="color: black;">FORGOT PASSWORD HACK</span></span></span></b><br /><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><span style="color: black;"><u>Type</u>:- it is a type of social engineering.</span></span></span><br /><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><span style="color: black;"><u>Special skills needed</u>:- Logic.</span></span></span><br /><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><span style="color: black;"><u>Main enemy</u> :- Intelligent targets.</span></span></span><br /><br /><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><span style="color: black;">Every social networking site has a password retrieval system to help the user in case he or she forget their password. Facebook also has a password retrieval system which can be wisely used to hack facebook accounts.</span></span></span><br /><br /><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><span style="color: black;">I had written a post on how you can use the information from facebook to hack the targets account.</span></span></span><br /><span style="font-family: inherit; font-size: small;"><span style="color: blue;"><span style="color: black;">Click here to read the post </span></span></span><br /><h3 class="post-title entry-title" style="color: blue;"><a href="http://hacking-for-beginners.blogspot.com/2010/11/hacking-gmail-and-facebook-accounts.html" target="_blank"><span style="color: blue;">HACKING GMAIL AND FACEBOOK ACCOUNTS USING INFORMATION FROM FACEBOOK</span></a></h3><h3 class="post-title entry-title" style="color: blue;"><span style="color: black;"><b> </b></span></h3><h3 class="post-title entry-title" style="color: blue;"><span style="color: black;"><b>5) Revealing Saved passwords in Firefox.</b></span></h3></div>If you have access to the victims computer. You can check whether the passwords are saved in his browser. For more information read my post on it. <a href="http://cybertronic-devil.blogspot.com/2011/07/revealing-saved-passwords-in-firefox.html" target="_blank"><b style="color: blue;">CLICK HERE TO READ</b></a>.<br /><br /><b style="color: red;">NOTE</b>:- If any of the above procedure or link is not working properly, please report. I would be very grateful. Thank you.  </div>

• 
• 
• 
• 

1. 1
2. 2
3. 3
4. 4

• Previous
• Next

HACK FACEBOOK PASSWORD USING EASY METHODS

Facebook is the latest teenage craze all around the world. I have seen many people wasting hours for finding different methods and ways for hacking their friend's or enemy's facebook account. Most of …

Read more »