Showing posts with label Tracing. Show all posts
Showing posts with label Tracing. Show all posts
Saturday, 5 March 2016
Wednesday, 4 December 2013
Top 10 Ways to Hack Facebook Accounts
Facebook is one of the most widely used social networking site with more than 750 million users, as a reason if which it has become the number 1 target of hackers have , I have written a couple of post related to facebook hacking here. I mentioned the top methods which were used by hackers to hack facebook accounts, however lots of things have changed in 2013, Lots of methods have went outdated or have been patched up by facebook and lots of new methods have been introduced, So in this post I will write the top 10 methods how hackers can hack facebook accounts.
10 Ways How Hackers Can Hack Facebook Accounts
So here are the top 10 methods which have been the most popular in Everytime :
1. Facebook Phishing
Phishing still is the most popular attack vector used for hacking facebook accounts, There are variety of methods to carry out phishing attack, In a simple phishing attacks a hacker creates a fake login page which exactly looks like the real facebook page and then asks the victim to login into that page, Once the victim logins through the fake page the victims "Email Address" and "Password" is stored in to a text file, The hacker then downloads the text file and get's his hands on the victims credentials.
2. Keylogging
Keylogging, according to me is the easiest way to hack a facebook password, Keylogging sometimes can be so dangerous that even a person with good knowledge of computers can fall for it. A keylogger is basically a small program which once is installed on victims computer will record every thing which victim types on his/her computer. The logs are then send back to the attacker by either FTP or directly to hackers email address.
3. Stealers
Almost 80% percent people use stored passwords in their browser to access the facebook, This is is quite convenient but can sometimes be extremely dangerous, Stealers are software's specially designed to capture the saved passwords stored in the victims browser, Stealers once FUD can be extremely powerful.
4. Session Hijacking
Session Hijacking can be often very dangerous if you are accessing Facebook on a http:// connection, In a Session Hijacking attack a hacker steals the victims browser cookie which is used to authenticate a user on a website and uses to it to access victims account, Session hijacking is widely used on Lan's.
5. Sidejacking With Firesheep
Sidejacking attack went common in late 2010, however it's still popular now a days, Firesheep is widely used to carry out sidejacking attacks, Firesheep only works when the attacker and victim is on the same wifi network. A sidejacking attack is basically another name for http session hijacking, but it's more targeted towards wifi users.
6. Mobile Phone Hacking
Millions of Facebook users access Facebook through their mobile phones. In case the hacker can gain access to the victims mobile phone then he can probably gain access to his/her Facebook account. Their are lots of Mobile Spying softwares used to monitor a Cellphone.
7. DNS Spoofing
If both the victim and attacker are on the same network, an attacker can use a DNS spoofing attack and change the original facebook.com page to his own fake page and hence can get access to victims facebook account.
8. USB Hacking
If an attacker has physical access to your computer, he could just insert a USB programmed with a function to automatically extract saved passwords in the browser.
9. Man In the Middle Attacks
If the victim and attacker are on the same lan and on a switch based network, A hacker can place himself b/w the client and the server or he could also act as a default gateway and hence capturing all the traffic in between, ARP Poisoning which is the other name for man in the middle attacks is a very broad topic and is beyond the scope of this article,
10. Botnets
Botnets are not commonly used for hacking facebook accounts, because of it's high setup costs, They are used to carry more advanced attacks, A botnet is basically a collection of compromised computer, The infection process is same as the keylogging, however a botnet gives you, additional options in for carrying out attacks with the compromised computer. Some of the most popular botnets include Spyeye and Zeus.
Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.
Finding Ip Address Of A Website Using Command Prompt Or CMD
In
this tutorial i will teach you to find Ip Address of any website using
Command Prompt or in short CMD. Using IP Address you can find location
of the website server and do more stuff. I will demostrate this tutorial
with Google but you can use this method to find IP Address of any
website like twitter, facebook etc. So lets get started.
How to find IP ?
How to find IP ?
1. Go to Start > Type CMD and press Enter.
2. Now write Ping followed by website URL whose IP you want to find.
3. It will take less then a second and come up with the results as shown below.
In my next post i will show you another easy way to find website IP Address and teach you to use this IP to find its location.
15-Most Usefull Hacking Tools
Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do.
1. NMAP
Nmap (“Network Mapper”) is a free and open source (license) utility for network discovery and security auditing. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics.
DOWNLOAD IT FROM HERE
2. WIRESHARK
Wireshark is a network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network.
DOWNLOAD IT FROM HERE
3. METASPLOIT COMMUNITY EDITION
Metasploit Community Edition simplifies network discovery and vulnerability verification for specific exploits, increasing the effectiveness of vulnerability scanners. This helps prioritize remediation and eliminate false positives, providing true security risk intelligence.
DOWNLOAD IT FROM HERE
4. NIKTO2
Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6400 potentially dangerous files/CGIs, checks for outdated versions of over 1200 servers, and version specific problems on over 270 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software.
DOWNLOAD IT FROM HERE
5. JOHN THE RIPPER
John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version.
DOWNLOAD IT FROM HERE
6. ETTERCAP
Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols and includes many features for network and host analysis.
DOWNLOAD IT FROM HERE
7. NEXPOSE COMMUNITY EDITION
The Nexpose Community Edition is a free, single-user vulnerability management solution. Nexpose Community Edition is powered by the same scan engine as Nexpose Enterprise and offers many of the same features.
DOWNLOAD IT FROM HERE
8. NCAT
Ncat is a feature-packed networking utility which reads and writes data across networks from the command line. Ncat was written for the Nmap Project as a much-improved reimplementation of the venerable Netcat. It uses both TCP and UDP for communication and is designed to be a reliable back-end tool to instantly provide network connectivity to other applications and users. Ncat will not only work with IPv4 and IPv6 but provides the user with a virtually limitless number of potential uses.
DOWNLOAD IT FROM HERE
9. KISMET
Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and (with appropriate hardware) can sniff 802.11b, 802.11a, 802.11g, and 802.11n traffic. Kismet also supports plugins which allow sniffing other media such as DECT.
DOWNLOAD IT FROM HERE
10. W3AF
w3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend.
DOWNLOAD IT FROM HERE
11. HPING
hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping(8) unix command, but hping isn’t only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel, and many other features.
DOWNLOAD IT FROM HERE
12. BURPSUITE
Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application’s attack surface, through to finding and exploiting security vulnerabilities.
DOWNLOAD IT FROM HERE
13. THC-HYDRA
A very fast network logon cracker which support many different services.
DOWNLOAD IT FROM HERE
14. SQLMAP
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.
DOWNLOAD IT FROM HERE
15. WEBSCARAB
WebScarab has a large amount of functionality, and as such can be quite intimidating to the new user. But, for the simplest case, intercepting and modifying requests and responses between a browser and HTTP/S server, there is not a lot that needs to be learned.
DOWNLOAD IT FROM HERE
How to trace Exact Location of Mobile Phone
There are many instances when we want to know where our friends are, where our parents are, and for those who've got a pair, where is my girl-friend or boyfriend. ! Well there are many apps in the market which allow you to get exactly the pin-pointed location of any cellphone. But the problem is they cost too high. Well today I'm gonna show you a process by which you can trace the exact mobile location of any cell phone without the need to spend a single penny. What you need is listed below, and i'm sure most of us already have what is needed.
REQUIREMENTS:
• Any cell phone that supports Google maps. eg. iPhone , Nokia , Blackberry , Symbian etc.
• Google Latitude. Which you can download by going to google.com/latitude from your cell phone.
STEPS:-
• Go to www.google.com/latitude from your cell phone.
• Download the free app.
• Open the App.
• Enter You mobile number in the entry Field.
• Now You've set it up on your phone. Now you gotta set it up on your friends cell phone.
HOW TO SET IT UP ON YOUR FRIENDS CELL PHONE:
• You can add friends by their E-mail Addresses. Your friends will receive an E-mail with the download link of Google latitude.
• Or you can manually add yourself or ask your friend to add google latitude on his/her cell phone.
• Now you
and your friend can add each other as friends on google latitude and
you'll get the exact location of where your friends cell phone is.
• There is
exactly no limit to how many friends you can add in your latitude
circle. ( just make sure you dont add your parents :)
• Well so As soon as You and your buddy confirm each other as friends you get to see each others location.
HOW TO USE IT EVEN WHEN YOU DON'T HAVE YOUR CELL PHONE WITH YOU:
• Well the most eye catching feature of google latitude is that you can use it online even without a cell phone.
• Just go to google.com/latitude from you PC, Follow the instructions, log-in into your account. And track You friends Locations !!
Subscribe to:
Posts (Atom)