Njia Gani Watu Wanazitumia Ku Hack Password

Njia Gani Watu Wanazitumia Ku Hack Password

SAYANSIKIMU

JF-Expert Member
Joined
Feb 27, 2014
Posts
1,132
Reaction score
260
Tunajua kabisa password za akaunti mbalimbali ni siri .Lakini Kuna Watu Wanazigundua .Kuna Rafiki yangu mmoja akaunti yake ya facebook iliibiwa na hacker akapost picha mbaya kuchafua jina lake,Mwingine akaliibiwa akaunti yake ya facebook pamoja na email address kwa hiyo akashindwa ku recovery .Sasa hawa ma hacker wanatumia njia gani kuiba passwords na nifanye nini kama akaunti yangu imeibiwa na nimeshindwa kui recovery.
 
Phishing: wanakutumia email ambayo itakufanya utoe taarifa zako binafsi then wanzitumia kurecover password ya email account yako au facebook.Hivyo unashauriwa usiwasiliane kwa email na mtu usiyemjua.

Njia nyingine ni kutumia fake websites,watumiaji wengi wa mitandao mna tabia ya kujisajili kwenye websites mbalimbali kwa kutumia email zenu na exact password ya hizo email zenu,so kuna baadhi ya websites zimetengenezwa kwa ajili tu ya kuchukua hizo details.Hivyo inashauriwa usijisajili kwenye website usiyokuwa na uhakika na dhumuni lake au kama unajisajili kwenye websites mbalimbali basi tumia password tofauti na unayotumia kwa ajili ya email account yako

Njia nyingine mpaka mtu awe na access ya kompyuta yako au awe ni mtu wako wa karibu,ambazo ni key logger(tool inayotumika kurekodi kitu chochote unachoandika kwa keyboard yako) na social engeneering(mtu kukuuliza maswali ya kidadisi kuhusu taarifa zako binafsi zitakazoweza kumfanya akisie password yako au aweze kurecover)

Zingine wadau wataongezea
 
mara nyingi tunasahau kudelete coockies!so coockie stealling n njia nzuri ya kupata username na password ambazo browser inahifadhi.ukitaka kuproof nenda internet cafe afu check browser coockies utapata jibu.
 
KUNA SOFTWARE kama fb hacker hii ni program ambayo unaweza kununua online na kufanya hacking kwa a/c za facebook


jinsi ilivyo ni kwamba!

Facebook wakiona software kama hiyo inafanya kazi ipasavyo!
Basi wanainunua na kuangalia ufanyaji wake wa kazi!
Wakiishajua jinsi inavyo fanya kazi!

Basi wao wana fix haraka ipasavyo !

Na ndiyo maana unaweza kupoteza tu muda wako kutafuta softwares za ku crack fb pass !

:sorry:
 
KUNA SOFTWARE kama fb hacker hii ni program ambayo unaweza kununua online na kufanya hacking kwa a/c za facebook

Kumbe hizi akaunti hazina usalama maana mimi kwenye akaunti yangu ya FB nili enable TEXT MESSAGE LOGIIN NOTIFICATION lakini kunakipindi niliingia nilihisi kabisa kuna mtu alikuwa anaitumia na TEXT MESSAGE LOGIN IN NOTIFICATION SIKUPATA.
 
Njia zipo nyingi sana it's just the execution na counter the outcomes kama
1. Dictionary attack (Brute Force)
2. Phishing (popular) now with evilginx out for 2FA bypass
3. Hijack OS firmware
4. Man in the Middle attack (pineapples) (Very effective) so rahisi kugindua.
5. Many more

Combine zote to one attack **Deadly**
 
Tunajua kabisa password za akaunti mbalimbali ni siri .Lakini Kuna Watu Wanazigundua .Kuna Rafiki yangu mmoja akaunti yake ya facebook iliibiwa na hacker akapost picha mbaya kuchafua jina lake,Mwingine akaliibiwa akaunti yake ya facebook pamoja na email address kwa hiyo akashindwa ku recovery .Sasa hawa ma hacker wanatumia njia gani kuiba passwords na nifanye nini kama akaunti yangu imeibiwa na nimeshindwa kui recovery.
Mimi mwenyewe ni mhanga wameshawahi kuhack akaunt zangu mbalimbali 2013 ikiwemo ya facebook, e mail na akaunt hii ya jamiiforums
 
Njia zipo nyingi sana it's just the execution na counter the outcomes kama
1. Dictionary attack (Brute Force)
2. Phishing (popular) now with evilginx out for 2FA bypass
3. Hijack OS firmware
4. Man in the Middle attack (pineapples) (Very effective) so rahisi kugindua.
5. Many more

Combine zote to one attack **Deadly**
Dictionary attack haitakuwa nzuri sana kwa kitu kam fb sababu mara nyingi fb huwa ila limit ya kulogin sasa wewe unajikuta una password 10000 kwa ajili ya victim hapo itakuwa sio rahisi kufanikiwa
Phishing ndio njia nzuri lakini kwa sasa naona fb wablock zile harmful links labda mpaka uzi shorten
 
Password huwa haziko save kama plain text kama =test1234
ila zinakuwa MD5 hash=eg1hf1hh34u434f53ke1h1e76f3d
hata kama hackers waki gain access to fb database wakapata info za watu kama username,age,e-mail,phone number bado watashindwa kulogin kwenye account sababu password zinakuwa encrypted kama hapo kwenye MD5
Hapo inatakiwa ku reverse hiyo hash eg1hf1hh34u434f53ke1h1e76f3d kwenda kwenye plain text form ambayo ndo password test1234
na uwezekano ni mdogo sana sababu algorithm ya hash ni one way function
hapo sasa kama unatumia password rahisi kama test1234 hacker ataweza kutumia rainbow tables ambayo inamuwezesha kuangalia common password na form ya hash zake hivyo ataweza ku obtain password kirahisi <<hapo ni kama password yako ni rahisi
Capture.PNG


kama password yako ni ngumu mfano test12342019JB33 hapo hawatumii rainbow tables hapo sasa ndo wanatumia Bruteforce attack na Dictionary attack
kwenye dictionary attack anatumia wordlist
ambayo ina password kama laki moja
ambapo anaandika code ambazo zinafananisha hash na password alizonazo kwenye wordlist kama hash zikifanana attack inakuwa success na anakuwa na plain text ya password
kwenye bruteforce attack inakuwa na numbers,symbols,letters ambazo anazibadili kuwa hash form then zinafananishwa na password hash ziki match attack inakuwa successfully
 
Njia Salama za kujilinda usihackiwe jamii forum
 
Dictionary attack haitakuwa nzuri sana kwa kitu kam fb sababu mara nyingi fb huwa ila limit ya kulogin sasa wewe unajikuta una password 10000 kwa ajili ya victim hapo itakuwa sio rahisi kufanikiwa
Phishing ndio njia nzuri lakini kwa sasa naona fb wablock zile harmful links labda mpaka uzi shorten

Nabadilisha ip address through tor portals so FBI wanaona different ip logins
 
Password huwa haziko save kama plain text kama =test1234
ila zinakuwa MD5 hash=eg1hf1hh34u434f53ke1h1e76f3d
hata kama hackers waki gain access to fb database wakapata info za watu kama username,age,e-mail,phone number bado watashindwa kulogin kwenye account sababu password zinakuwa encrypted kama hapo kwenye MD5
Hapo inatakiwa ku reverse hiyo hash eg1hf1hh34u434f53ke1h1e76f3d kwenda kwenye plain text form ambayo ndo password test1234
na uwezekano ni mdogo sana sababu algorithm ya hash ni one way function
hapo sasa kama unatumia password rahisi kama test1234 hacker ataweza kutumia rainbow tables ambayo inamuwezesha kuangalia common password na form ya hash zake hivyo ataweza ku obtain password kirahisi <<hapo ni kama password yako ni rahisi
View attachment 1062254

kama password yako ni ngumu mfano test12342019JB33 hapo hawatumii rainbow tables hapo sasa ndo wanatumia Bruteforce attack na Dictionary attack
kwenye dictionary attack anatumia wordlist
ambayo ina password kama laki moja
ambapo anaandika code ambazo zinafananisha hash na password alizonazo kwenye wordlist kama hash zikifanana attack inakuwa success na anakuwa na plain text ya password
kwenye bruteforce attack inakuwa na numbers,symbols,letters ambazo anazibadili kuwa hash form then zinafananishwa na password hash ziki match attack inakuwa successfully
Bute force with social engineering japokuwa itakuwa in chances kidogo kama 30%

So mtu ata jaribu ku exploit Google for saved passwords au chrome
 
Bute force with social engineering japokuwa itakuwa in chances kidogo kama 30%

So mtu ata jaribu ku exploit Google for saved passwords au chrome
Yani nimekaaa naaangalia hixi njia mnazotoa humu lakin jibu ni kwamba hackers wako smarts na clever than anything.....

Hizi acc za fb, insta, Spotify, Netflix, google, yani kila social networks unautumia kuweka ur email nilikuwa na batua since 2013- nikaaacha 2014 baada ya kuingia chuo

Yani naweza nikakutarget pasipo wewe kujua mfano Freak wewe una acc ya fb sawa na u have friends

Nachokifanya nafungua maltego natumia social links by bradson $12 na add face personal acc naweka id yako

Kisha na search for closed friends labda nikapata wanne

Nikawapata na look for their emails na mobile numbers ambazo ziko attached na fb

Nikizipata na convert ur relation to closed relationship maltego itanipa raman nzma ya urafiki wenu

Sasa naaanda my attack.... Na hapa nilikuwa natumia

1. Smtp servers email, sms

2. Sitoiweka waz ila ni my own coded rat nimecode na c# programming

Ninachokifanya na bind rat na pdf yyte hiii inatumia bind connection not as meterpreter reverse connection

Nakuja na spoof sms smbayo itaonekana imetumwa na mmoja wa rafiki zako wa karbu na sms au email inakuja inbox nabsender name ya yule mmoja wa rafiki zako either by no au name.
Nikiforce uchek ile pdf

Ukifungua ile pdf my malicious codes wataingia kwnye android yako na nitapata GUI connection vzr tubna wewe chchte unachofanya nakiona na naweza pia kupatabsaved items zote za browsers n. K

Sasa fb naipataje??

Io rat inasehemu ya fun with victim yani naweza nikavibrate ur device, chatting na wewe n. K

Nitasend fake friend request pop notification na uki accept tu AM IN

sasa yani kuna njia nyingi sana sema sasa unahack mtu fb ya mtu ili iweje na unapata faida gani ili swali ndilo lililonifanya niache huuu upupu na kuanza hack vitu ambavyo vitanipa maslai


Hio smtp spoof ukitaka uone kama una emails mbili nipe moja nitatumia ur email kukusendia ujumbe kwenye io email yako ingene for TEST

Thefreedom
 
Yani nimekaaa naaangalia hixi njia mnazotoa humu lakin jibu ni kwamba hackers wako smarts na clever than anything.....

Hizi acc za fb, insta, Spotify, Netflix, google, yani kila social networks unautumia kuweka ur email nilikuwa na batua since 2013- nikaaacha 2014 baada ya kuingia chuo

Yani naweza nikakutarget pasipo wewe kujua mfano Freak wewe una acc ya fb sawa na u have friends

Nachokifanya nafungua maltego natumia social links by bradson $12 na add face personal acc naweka id yako

Kisha na search for closed friends labda nikapata wanne

Nikawapata na look for their emails na mobile numbers ambazo ziko attached na fb

Nikizipata na convert ur relation to closed relationship maltego itanipa raman nzma ya urafiki wenu

Sasa naaanda my attack.... Na hapa nilikuwa natumia

1. Smtp servers email, sms

2. Sitoiweka waz ila ni my own coded rat nimecode na c# programming

Ninachokifanya na bind rat na pdf yyte hiii inatumia bind connection not as meterpreter reverse connection

Nakuja na spoof sms smbayo itaonekana imetumwa na mmoja wa rafiki zako wa karbu na sms au email inakuja inbox nabsender name ya yule mmoja wa rafiki zako either by no au name.
Nikiforce uchek ile pdf

Ukifungua ile pdf my malicious codes wataingia kwnye android yako na nitapata GUI connection vzr tubna wewe chchte unachofanya nakiona na naweza pia kupatabsaved items zote za browsers n. K

Sasa fb naipataje??

Io rat inasehemu ya fun with victim yani naweza nikavibrate ur device, chatting na wewe n. K

Nitasend fake friend request pop notification na uki accept tu AM IN

sasa yani kuna njia nyingi sana sema sasa unahack mtu fb ya mtu ili iweje na unapata faida gani ili swali ndilo lililonifanya niache huuu upupu na kuanza hack vitu ambavyo vitanipa maslai


Hio smtp spoof ukitaka uone kama una emails mbili nipe moja nitatumia ur email kukusendia ujumbe kwenye io email yako ingene for TEST

Thefreedom
Malware exploit hainaga chance sana inategemea vulnerability
unainclude izo bugs kwenye pdf,docx na lazma uwe na exploitation techniques atleast 2-4
 
Dictionary attack haitakuwa nzuri sana kwa kitu kam fb sababu mara nyingi fb huwa ila limit ya kulogin sasa wewe unajikuta una password 10000 kwa ajili ya victim hapo itakuwa sio rahisi kufanikiwa
Phishing ndio njia nzuri lakini kwa sasa naona fb wablock zile harmful links labda mpaka uzi shorten
Fb hata wakiblock kuna redirection.. Watu bado wanajaa tu

Sent using Jamii Forums mobile app
 
Malware exploit hainaga chance sana inategemea vulnerability
unainclude izo bugs kwenye pdf,docx na lazma uwe na exploitation techniques atleast 2-4
Inategemea na exploit yako.... Me nacode mwenyewe so naweka vile ninavyotaka na ikingia ndo utajua chance ikoje...... Mpka leo hiiii nina zaidi ya victim 50 ambao toka waingize hio kitu hawajachange simu wala kuformat so am start up with their system boot.... Sio exploitation kama unavyoijua wewe....
 
Inategemea na exploit yako.... Me nacode mwenyewe so naweka vile ninavyotaka na ikingia ndo utajua chance ikoje...... Mpka leo hiiii nina zaidi ya victim 50 ambao toka waingize hio kitu hawajachange simu wala kuformat so am start up with their system boot.... Sio exploitation kama unavyoijua wewe....
so ume gain full access to their system
 
Back
Top Bottom