Hack Facebook Accounts With Reverting by Amit Khajuria !

Hii folks, howz u all? Sorry for offline for two months as I was busy in Exams. :-) So, today i will tell you how to hack a facebook account, bcoz some special people force me to write on it..  :))))

Facebook pays millions of dollars to security experts and penetration tester to keep the privacy of their users as safe as possible. So therefore we cannot use direct methods such asbruteforcing, dictionary attacks in order to hack facebook account due to account lockout feature. However, Also i would like to clear one more doubt that there is no such software which will hack a facebook password for you by just entering your email address. There are also methods such as Phishing, keylogging etc, which can help you hack facebook account, which are also suggested ones.

However here in this tutorial we will be exploiting a bug inside facebook in order to hack a facebook account. The vulnerability exploits trusted friends feature inside facebook which could be used to reset some one's facebook password. 

1. The thing which we use is to trick the Three Friend Account Recovery Method of facebook

2. The homework i was talking about is that you will have to make three fake account and make sure that they are in the friend list of the person you want to hack.

3. Once you are done with the above two steps you can start the hacking business.

4. Go to Forgot Password area of facebook.

5. It will show victims e-mail address and may be mobile phone at which he can be reached,choose ''no longer access to these'' option.

6. Now you will be prompted to enter an alternate e-mail address, type your e-mail address or create a new one.

7. Now you will be asked the ''Security question". Make random guesses,if you know the victim you might just get the right answer,if you don't-no worries !

8. If you have not succeeded in getting the answer right you will get to our main aim ''The Trusted Friends" recovery option.

9. Here click on ''continue'',choose  3 trusted friends-The Three fake accounts you have created and they are friends with the victim.

10. After you have chosen them,facebook will supply you with some codes on those fake accounts,follow the procedure and victims account is yours ! You've hacked them ! :)

Read more »

Posted in: EMAIL HACKING,FACEBOOK HACKING,HACKING TRICKS

Trace Facebook user account using Facebook’s Notification email header – Finding IP address of friend ! ~ Amit Khajuria ~

Is your ex-Boyfriend abusing you on Facebook? and you are pretty much not sure whether its him or not? If yes then this post is of real use for you. here i will show you how you can Find the IP address of your friend using Facebook’s Notification email header. ever noticed that whenever any friend of yours comments on your photo or sends you message, you also get notified via email from facebook and this email will help us to identify or trace your friend. Guys If you’re going to send messages from a fake Facebook account to fool or abuse your friends, there is 100% chances that you will get caught and even Proxies will not work here. Because Facebook is using client side scripts, as scripts execute on the users computer they have the ability to gather the IP directly from the TCP/IP stack before encoding it and passing it on as a payload using POST or GET.

Update: This Method No more Works.Please follow the alternative method to find ip below.

This method involves Sending a Unique Link To your friend. and when your friend clicks on the link, you will be able to see his IP. Follow the Steps;
Step 1: Goto My IP TEST Page, you will see 3 fields:
Link for person – link that you need to message your friend
Redirect URL(optional) – your friend will be Redirect to the Specified URL after he clicks the Link.
Link for you – This link is for you to check if your friend has clicked your link
Step 2: enter the Redirect URL (eg: www.facebook.com)
Step 3: Copy the link from ‘Link for person’ and send it to your friend via message or wall post

Step 4: Copy and ave the URL from ‘Link for you’ and do check it frequently. You will get your friends IP if he or she clicks on your link.
—————————————————————————————————————————————————-
Remember we have already seen how you can find IP address of any facebook user while on Chat and for that the user had to be online. so In this post i have come up with much simple method to get IP of your friend. There are lot of rumors that Facebook keeps the IPs of the users in their system. and i too believed the same until today, i found out this new method for looking out IP of Facebook user. For your knowledge, every email on the Internet has to have headers per RFC standards, and they’re added by the servers handling the email. The email client on the receiving end may omit these headers, but they will be there regardless. The Good part about this is when you receive Notification email from facebook saying for example:
" {Facebook user} sent you a message on Facebook." OR " {Facebook user} commented on a photo of you on Facebook"
Along with Facebook’s Server IP, They also include the IP address of the ‘Facebook user’ in the Header of the email. So why not we use this Bug? ofcourse you will need to enable ‘Full header’ in the email. If you don’t know how to view header of the email please read our previous post :

What is header, How to find the IP address of the email sender using header?

-I assume that you have the header opened. just look for the line that says “X-Facebook” in the headers. Here’s an example:
X-Facebook: from zuckmail ([MTI3LjAuMC4x]) by www.facebook.com with HTTP (ZuckMail);
The IP address above is Base64 encoded and Yes “MTI3LjAuMC4x” is the String that you got to decode. Now grab a good Base64 to ASCII text Converter and decode the string to get the IP address. After decoding “MTI3LjAuMC4x” will become 127.0.0.1. isn’t it so simple?.

-Worried about your Privacy?

If you are worried about your Privacy than it’s worth telling you that knowing an IP address isn’t necessarily a security risk. For example, Web sites and other servers must have their IP address publicized in order to get traffic. It’s like knowing the mailing address to a house: Sure, it’s better if someone doesn’t know where your house is, but if they do, they would still need to bypass the home security to break in. eventually IP address is enough for a hacker to break into your network if your Firewall is weak. so better be careful. May be facebook should use encryption instead of encoding for privacy purpose….but who cares?

Now that you have the IP, What next?

Now that you already have the IP address you can do lot of things. if you know some hacking, you would probably test you skills on that IP address. If it’s serious issue i would recommend take the IP address and go file FIR against that person. or you can always lookup more information about that IP. To do so we will be using IP tracer service. Go to the below address and paste the IP address in the box that says “lookup this ip or website”. and it will show you the location of the user.

http://www.ip-adress.com/ipaddresstolocation/

It will show you all the information about that user along with his ISP and a Location in the MAP. Now in the MAP Just click on “click for big ip address location” in the big picture you can actually zoom in. and try to recognize the area. If any serious matter just note down the ISP details in that page and contact them about the IP. they will respond you.

Read more »

Posted in: EMAIL HACKING,FACEBOOK HACKING,HACKING TRICKS

Someone has made your fake account | Don't Worry | Tracing facebook user by Amit Khajuria .

“ Someone has sent me messages on facebook from a fake account telling on my boyfriend. He called some of my friends fat and racist and threats on my album pictures. I have a feeling its one of the people i know. Can facebook trace the IP Address of this person to find out who the hell is this? I’ve sent a message to Facebook but they are slow responders. I need to know now. Please help! “
I often see these kind of messages, Someone calling you/your friends “fat” and “racist”? Big deal. It’s the Internet, the most public of public places. It’s completely your fault for adding some “random dude” that you don’t know. You must understand how web applications work.

 

Anyways here’s the way of doing it:

First you got to find out the IP address of that User.

To Do so we will be using “netstat” command in windows. If you want to know the IP address of a specific person on facebook or orkut or any chat service, there is only one way: Just invite or ping him for a chat and while chat is ON open ‘Command Prompt‘ on your PC (Start >Run>cmd).
note: before trying this make sure you close all the other tabs in your browser. and only facebook is open. also if possible delete all the history and cache from your browser.
When command prompt opens Type the following command and hit Enter.

netstat -an

And you will get all established connections IP addresses there. Note down all the suspicious IP’s

The Next Step is to Trace that user using his IP address.

To do so we will be using IP tracer service. Go to the below address and paste the IP address in the box that says “lookup this ip or website”. and it will show you the location of the user.

http://www.ip-adress.com/ip_tracer/

It will show you all the information about that user along with his ISP and a Location in the MAP. Now in the MAP Just click on “click for big ip address location” in the big picture you can actually zoom in. and try to recognize the area. If any serious matter just note down the ISP details in that page and contact them about the IP. they will respond you.
Other netstat commands:
-a Displays all connections and listening ports.
-e Displays Ethernet statistics. This may be combined with the -s option.
-n Displays addresses and port numbers in numerical form.
-p proto Shows connections for the protocol specified by proto; proto may be TCP or UDP.
-s option to display per-protocol statistics, proto may be TCP, UDP, or IP.
-r Displays the routing table.
-s Displays per-protocol statistics. By default, statistics are shown for TCP, UDP and IP; the
-p option may be used to specify a subset of the default.

Read more »

Posted in: EMAIL HACKING,FACEBOOK HACKING,HACKING TRICKS

How To Use Cain&Abel To Get Local Passwords !

I am here to show you how to sniff for local passwords that are stored in the computer using Cain&Abel...

I think you all should know that Cain&Abel is very useful and it can do a lot of stuffs...

If you do not have this tool,go and download at this link:
http://www.oxid.it/cain.html



Install and launch Cain&Abel...

If you are using this for the first time,it will look like this:



Choose the one that has IP,do not choose those with 0.0.0.0...

Now,you will be prompted by something like this:



Choose "Decoder" from the bar and you will see the this:



Choose the type of passwords that you want to search from the computer..

After that,click on the "+" button:



You are about to finish the job,you will see some passwords or hash...

This is the example of clear-text password:



This is the example of hash:



For hash,you can send it to the cracker...

Read more »

Posted in: FACEBOOK HACKING,HACKING TRICKS

6 Tips to Avoid Facebook Viruses and Spam Messages !

Facebook, the biggest social network with 500 million users, provides an interface to hit an unsuspecting crowd with malware and viruses. These viruses aren’t very difficult to detect  if you are cautious enough. These Facebook viruses appear on your wall in forms of a bizarre or eye-catching stories and videos and once the user has clicked/liked the link, it is already late. The next step will be getting rid of your Facebook virus which is a time-consuming  process.  Its better to avoid spam messages and trojan viruses in the first place.

How to avoid it?

1. Think before you Act. Viruses on Facebook are sneaky. The hackers and cybercriminals who want your information know that Facebook users will often click on an interesting post without a moment’s thought. If a post sounds a bit over-the-top like a headline out of a tabloid, this is your first warning sign.

2. Try to avoid Links and videos with Catchy words like  “funniest ever,” “most hilarious video on Facebook,” or “you’ve got to see this.” Do some keyword research to see if the post in question comes up in a search engine with information about a current virus or trojan.

3. Check the poster of the Suspicious content. If you receive a message from someone you do not know, this is an obvious red flag. Facebook video viruses also tend to pop up in your news feed or on your wall from friends you haven’t talked to in a while. Unfortunately, it’s likely this friend has already fallen victim to the latest virus on Facebook. After clicking on the story themselves, the message was sent out to all of their friends as well.

4 Avoid messages that have been posted by multiple users as the virus spreads among your friends who were not so cautious. If a link with title such as “Sexiest video ever” shows up all over your feed from all kinds of people (perhaps friends you would not expect to make such a post), this is another warning sign. Similar direct messages are a likely variant of the notorious Facebook Koobface virus which has used this approach in the past.

5. Do not fall for the “typical” money-transfer schemes. Chat messages from friends needing funds will usually sound suspicious. Everything can’t be screened before posting, so money transfer scams and hoax applications still find their way on to Facebook. You should also avoid applications that claim to do a full “Error check” or fix security problems related to your profile.

6. Update your anti-virus software frequently. If you do accidentally click on a post before realizing it is a hoax, do not click on any further links or downloads. If it’s too late and you have already been infected, the Facebook virus removal process may be effortless if you have a good anti-virus program to catch the virus, trojan or other malware early on.

What’s Next?

These were few important tips to safeguard your facebook account but your job isn’t done yet. Once you have detected that the link/post on your facebook wall is Malicious you should Mark it as SPAM so that the facebook support will stop it from spreading further and infecting other users.

If you have ever fallen victim of any such Malicious Scheme, please share your experience with all the users  in form of comments so that others don’t fall victim of it.

Read more »

Posted in: FACEBOOK HACKING,HACKING TRICKS