Join us on Facebook

Monday, 16 September 2013

Facebook Cookie Stealing And Session Hijacking?


HellOOoooO Guyz HaXoR is Here with an awesome trick and very easy trick. Cookie Stealing is one of the most famous ways to hack someone Facebook account.

Facebook Cookie Stealing And Session Hijacking:
                                                                                                                                 I observed that cookie stealing is neglected by some fellow hackers (even I was one of them). But, recently, I discovered that cookie stealing can be pretty handy to hack anEmail account. In the following article, I have covered basics of how to hack an Email account using Cookie Stealing.



Facebook Authentication Cookies

The cookie which facebook uses to authenticate it's users is called "Datr", If an attacker can get hold of your authentication cookies, All he needs to do is to inject those cookies in his browser and he will gain access to your account. This is how a facebook authentication cookielooks like:
Cookie: datr=1276721606-b7f94f977295759399293c5b0767618dc02111ede159a827030fc;
How To Steal Facebook Session Cookies And Hijack An Account? 

An attacker can use variety of methods in order to steal your facebook authentication cookies depending upon the network he is on, If an attacker is on a hub based network he would just sniff traffic with any packet sniffer and gain access to victims account.

If an attacker is on a Switch based network he would use an ARP Poisoning request to capture authentication cookies, If an attacker is on a wireless network he just needs to use a simple tool called firesheep in order to capture authentication cookie and gain access to victims account.

In the example below I will be explaining how an attacker can capture your authentication cookies and hack your facebook account with wireshark.

:Step 2 - Next open up wireshark click on analyze and then click on interfaces.

Step 3 - Next choose the appropriate interface and click on start.

Step 4 - Continue sniffing for around 10 minutes.

Step 5 - After 10minutes stop the packet sniffing by going to the capture menu and clicking on Stop.

Step 6 - Next set the filter to http.cookie contains “datr” at top left, This filter will search for all the http cookies with the name datr, And datr as we know is the name of the facebook authentication cookie. 

Step 7 -  Next right click on it and go to Copy - Bytes - Printable Text only.
Step 8 - Next you’ll want to open up firefox. 
You’ll need both Greasemonkey and the cookieinjector 

script. Now open up Facebook.com and make sure that you are not logged in.



Step 9- Press Alt C to bring up the cookie injector, Simply paste in the cookie value into it.


Step 10 - Now refresh your page and viola you are logged in to the victims facebook account.

Note: This Attack will only work if victim is on a http:// connection and even on https:// if end to end encryption is not enabled.

Countermeasures

The best way to protect yourself against a session hijacking attack is to use https:// connection each and every time you login to your Facebook, Gmail, Hotmail or any other email account. As your cookies would be encrypted so even if an attacker manages to capture your session cookies he won't be able to do any thing with your cookies.









Tuesday, 10 September 2013

WHAT IS UTORRENT? AND ITS USES

 WHAT IS UTORRENT?

µTorrent is a freeware, closed source BitTorrent client by BitTorrent, Inc. Its the Software Developed for Downloading Large Amount of Files. Its a peer-to-peer file sharing protocol used for distributing large amounts of data.
       µTorrent is Very Easy Way to Download Files. Its Very Convenient to Download through this Software. The Main & very Excellent Feature of this Software is that you don't have to worry about your Link Breakdown or wait to Shutdown your Computer till your Download is Completed. It works when it gets the Internet Connection and Starts its Work. It Resumes the Downloads from where it was Interrupted.
        Don't think that this Software is a Download Manager which Resumes Downloads. Its Not a Conventional Download. It uses different kind of Method to Download Files. It uses Peer-to-Peer File Sharing Method to Download Files.
Now I think the Introduction is Enough. 

Click Here to Download
                              

Download nd enjoyyyY!!!!



© 2013 Noobs-Acadmy. All rights resevered. Designed by Templateism