Tabnapping, Tabnabbing, Tutorial (A New Phishing Attack)

Requirements:

1. Phishing Pages by Hacking Loops click here to download

2. Register on my3gb website and upload these to them.

3. Send the link to victim.

How to hack Facebook account password using Tab nabbing:

I have explained this hack with complete video from very start till the end we receives the hacked passwords.

This technique hardly requires less than 5 minutes to hack the Facebook account password not like the last Facebook hack which requires 24hrs for approval. This is the first version of this hack. I will tell you the improvement in this technique in further tutorials. So watch the video and Enjoy it. The only thing i not included in this video is How to send Phishing emails. You all know the reason for this, we cannot discuss such things directly on internet because that can be misused by newbies and i don’t want that anybody should use my tutorials for wrong way. I make videos just to guide you how hackers do the things. My intention is to guide you latest things happening in security field and not to make you a cracker.

So Enjoy the Video and learn how ta nabbing is done…

Read More

FACEBOOK PHISHING: Complete Tutorial

This Tutorial is just for Education purpose from Waqas Haxor!


I agree that the efficiency of using suck tricks is quite less so now I would like so introduce you to a new and one of the most efficient way of hacking called 'PHISHING' .Phishing is essentially making a FAKE page which resembles to the real login page of sites like Yahoo!, Facebook,Gmail,etc. but with a modified URL(Ofcourse our's) .When someone Logins in this page, the username and password is secretly stolen away and stored in our database and the person get redirected to the real login page...so he/she doesn't even get to know that he/she has been HACKED!
                     

                          For this trick you need some basic knowledge of Web-hosting and PHP.Hey! don't worry even if you don't have any knowledge of it then just follow all these steps properly and you will get to it.
The following script is for making a Fake FACEBOOK page.


STEP 1:Creating Phishing.php file :
1. Even if you don't have any knowledge of php file simply copy the following script and save it as phishing.php .

 


STEP 2: Creating index.html page :

 2.1 Open the Facebook login page then, Right click>View page source and paste it in notepad and save it as
 index.html .
 2.2 Open that index.html file with a Notepad and search (By pressing Ctrl+F) for : action in it and replace the highlighted part (as in the following screenshot) with phishing.php .

STEP 3: Now create a completely blank text file with name password.txt.

 Now you have all the following three files with you :
1. phishing.php
2. index.html
3. password.txt
  If you don't have your own web hosting account, goto any free web-hosting site www.phpzilla.net ,and in file manager, upload all the three files.

Your fake page is now ready! With the Domain Name you registered on the Web-hosting site ask anyone to login and then check your password.txt file .You will find the Username and Password of that person stored in it.Also the person gets redirected to the original Facebook login page and he/she thinks that there must be some problem or he/she may have entered wrong Username or Password.

Though this method of hacking looks quite long yet, once you have created the fake page then you don't need  to have anyone login on your computer .Just send that URL to anyone saying 'Hey! Join my page on Facebook!' or whatever and after he logins you will have his/her password.


But the problem Facebook phishing has is, even if you get someone's Facebook password and change it, the person is notified by an email and he/she will get to know that someone is trying to access his/her password and will definitely change it :( . So, its better to directly hack their primary account to gain complete access to the victims account ;)

Read More

Gmail PHISHING: Complete Tutorial

Phishing is the process of stealing sensitive information (silently), such as usernames, passwords, and bank information, by pretending to be someone you’re not. I have already explained it in detail in FACEBOOK phishing. 

This step by step guide will show you how you can make your own Gmail Phishing (Fake) page easily...have fun! 

Files we will be creating:

1. phishing.php

2. index.html

3. password.txt

Step 1: Creating phishing.php file 

First of all we need a PHP script which will collect all the form data. Copy the following code in a text editor (notepad) and save it as phishing.php 

 

Step 2 : Creating index.html page

Goto Gmail.com (without logging in) , Right click anywhere in the browser and choose view page source. Open the source code in a text editor (notepad).

Step 3: Now a new window will pop-up where you can see all the HTML code.

 We need to look for word action. Press CRTL+F and search for action. You will find two action in the code so choose the right one by looking up the following screen-shot (ie, with form id="gaia_loginform"). Replace the link after action between the "..... " with phishing.php (as in the screen-shot)and save this page as index.html (not index.html.txt!!!).

Step 4: Creating text file (password.txt)

Now make a new empty text file and name it password.txt

Now you have all the three files required

Step 5: Final step

Upload all the 3 files in file manager of your web hosting. If you don't have your own web hosting at present, search for a free web hosing site which gives PHP access. I prefer www.phpzilla.net . 

Sign up for a free web hosting plan on this site. Goto file manager and Upload all the 3 files and save it.

Once everything is up and ready to go, go to the link your host provided you for your website and you should see the Gmail page replica. Type in a username/password and click Sign in. This should have redirected you to the real Gmail page.

Now whoever will try to login for Gmail through your Fake page, his/her Username and Password will be automatically saved in Password.txt file as plain text which you can view easily. Also the the victim won't have a hint that he/she has been hacked since, he/she will be redirected to the original Gmail page and will get a feel as if he/she entered a wrong password by mistake.

Read More

Password Cracking: What is Brute Force Attack?

Note:- This information is for educational purpose only so that you can know about various kinds of password cracking techniques. the author or http://desiteenentertainment.blogspot.com is not responsible for any kind of misuse of this information. We aim only to create awareness so that people can protect themselves from getting hacked and save themselves in this unsafe world of hacking.

In My previous post I covered Dictionary Attack used to crack passwords in detail. In this Post I am Going to cover Brute Force Attack.

Brute Force Attack:

With time, Brute Force Attack can crack any passwords. Brute-force attacks try every possible combination of letters, numbers, and special characters until the right password is found. Brute Force Attack can take a long time. The speed is determined by the speed of the computer running the cracking program and the complexity of the password. Below I will show you how Brutus can be used against the same FTP server but this time using the brute-force option.
1. Put in the target and port the same way you did for the dictionary attack. For the pass mode choose Brute-force and click range.

2. If you have an idea of what the password might be, then you can choose the right option. For example if you know a site that requires your password to be a certain length then you’ll know what to put down as a minimum length thus narrowing down the end results and shortening the cracking process.

3. I chose lowercase alpha which has the second smallest amount of combinations. Even at second smallest it came up with 321, 272,407 possible password combinations. Now you know why it can take so long to crack one password.

Read More