1.2.3 ur are now hacker

Sunday, August 24, 2008

Hack@karths.comm  .. Do you wanna hack yahoo/gmail accounts then you landed at correct place .. First things first . this tutorial is solely NOT written for educational purpose (karths  is very braveBig Grin).. i've written it intentionally to make you learn how hacking can be made simple with COMMON SENSE and observation.

Last night one of my NIT friends called me and said that he forgot  password of his account.I asked him to do a password recovery through "forgot password" option.He called once again and now this time to everybody;s expectations said that he even forgot his secret question's answer.huhhh!! and he asked to come to his house to do the troubleshooting...k I went and and retrieved his cookies (thank god! he didn't clear them off) and decoded them using cookie decoder software and found some interesting notes.I somehow managed to retrieve his password.I''ll give you the synopsis .The major point here is to trick the mail server that the date of birth,security question,and the answer you provided are true.U need to do all this by composing a mail from another account of same service provider. Next write down these steps onto a paper coz documenting is very important.

      1.open a mail account (yahoo/gmail etc..) and compose a mail with " subject : <Your victims id>"( as it is the same thing in session cookie).

      2.next <to address> : recover23496634_pswd@yahoo.com (for yahoo accounts .. careful with the number note it down on to a paper) &&& pass.rcvry@gmail.com ( for gmail accounts . remember gmail uses SSL so number over there)

      3.Now the actual part.. follow the same sequence in the message body field

a. ques#%sec(99) :#your mail-id question#  eg: if your question is "who is your childhood hero"  then your interpretation must be #who%20is%20your%20childhood%20hero#  [replace space by %20 ].

b.ans#%sec(72):#your-mail id answer#  ..

c.dob#%sec(3):#your D.O.B#  ..  must be in mm.dd.yy format for yahoo .. and in dd.mm.yy for google.

d.pins_sec:#your retrieval code#  .. only used for gmail.. write any number but make sure that u remember it as it is used later.

Then next send that mail .. now the mail server wouldn't recognize what to do since all the security details you mentioned ( details of your id) from which you sent the mail match .. but (there is always a buttt in security) the id mentioned in the subject field doesn't match .So now it gives the victim's password(id mentioned in sub field) instead of giving your password .

  HAAHhhh! that's it you'll generally get the password mail to you or else generates an error( in such case make sure U typed everything correctly)

This method would work most of the times i bet you would experience 90% success rate until and unless u wake up from your dream..I wish i would have been there with you at instance to see how many of you are seriously composing a mail with literal crap which i have taught in it.Rolling on the floor.This is all bogus.I am not insulting u guys .plz don't misunderstand me this is a very simple demonstration of social engineering attack showing how easily yo get fooled .I ve tried to fool u by using some technical jargon to make u believe..so u really wish to be a hacker then U must learn internals of software and should be good at socket programming..so now wake up dont' believe anything in this internet world.Never ever follow any method teaching hacking online coz hacking can be never taught it can only be learnt ..karths becoming too philosophical these daysWinking and one more thing never give your id details .coz dey end up mail bombing ur id with spam .So annalu,tambilu,chellelu ,akkalu...tokkalu leni dani gurinchi pote unnaadi kuda potadi .I never intended to insult anybody of you. Hope this post helps out

Thank you for patient reading .. next post will be ready very soon.

=============================================================================================================                                                                                                                                                                                                                                                   I never care for credit as long as people treat me as their best pal ..

1 comments:

Anonymous said...

This is called the art of deception!!!!!