mara nyingi tunasahau kudelete coockies!so coockie stealling n njia nzuri ya kupata username na password ambazo browser inahifadhi.ukitaka kuproof nenda internet cafe afu check browser coockies utapata jibu.
KUNA SOFTWARE kama fb hacker hii ni program ambayo unaweza kununua online na kufanya hacking kwa a/c za facebook
KUNA SOFTWARE kama fb hacker hii ni program ambayo unaweza kununua online na kufanya hacking kwa a/c za facebook
Mimi mwenyewe ni mhanga wameshawahi kuhack akaunt zangu mbalimbali 2013 ikiwemo ya facebook, e mail na akaunt hii ya jamiiforumsTunajua kabisa password za akaunti mbalimbali ni siri .Lakini Kuna Watu Wanazigundua .Kuna Rafiki yangu mmoja akaunti yake ya facebook iliibiwa na hacker akapost picha mbaya kuchafua jina lake,Mwingine akaliibiwa akaunti yake ya facebook pamoja na email address kwa hiyo akashindwa ku recovery .Sasa hawa ma hacker wanatumia njia gani kuiba passwords na nifanye nini kama akaunti yangu imeibiwa na nimeshindwa kui recovery.
Dictionary attack haitakuwa nzuri sana kwa kitu kam fb sababu mara nyingi fb huwa ila limit ya kulogin sasa wewe unajikuta una password 10000 kwa ajili ya victim hapo itakuwa sio rahisi kufanikiwaNjia zipo nyingi sana it's just the execution na counter the outcomes kama
1. Dictionary attack (Brute Force)
2. Phishing (popular) now with evilginx out for 2FA bypass
3. Hijack OS firmware
4. Man in the Middle attack (pineapples) (Very effective) so rahisi kugindua.
5. Many more
Combine zote to one attack **Deadly**
Dictionary attack haitakuwa nzuri sana kwa kitu kam fb sababu mara nyingi fb huwa ila limit ya kulogin sasa wewe unajikuta una password 10000 kwa ajili ya victim hapo itakuwa sio rahisi kufanikiwa
Phishing ndio njia nzuri lakini kwa sasa naona fb wablock zile harmful links labda mpaka uzi shorten
Bute force with social engineering japokuwa itakuwa in chances kidogo kama 30%Password huwa haziko save kama plain text kama =test1234
ila zinakuwa MD5 hash=eg1hf1hh34u434f53ke1h1e76f3d
hata kama hackers waki gain access to fb database wakapata info za watu kama username,age,e-mail,phone number bado watashindwa kulogin kwenye account sababu password zinakuwa encrypted kama hapo kwenye MD5
Hapo inatakiwa ku reverse hiyo hash eg1hf1hh34u434f53ke1h1e76f3d kwenda kwenye plain text form ambayo ndo password test1234
na uwezekano ni mdogo sana sababu algorithm ya hash ni one way function
hapo sasa kama unatumia password rahisi kama test1234 hacker ataweza kutumia rainbow tables ambayo inamuwezesha kuangalia common password na form ya hash zake hivyo ataweza ku obtain password kirahisi <<hapo ni kama password yako ni rahisi
View attachment 1062254
kama password yako ni ngumu mfano test12342019JB33 hapo hawatumii rainbow tables hapo sasa ndo wanatumia Bruteforce attack na Dictionary attack
kwenye dictionary attack anatumia wordlist
ambayo ina password kama laki moja
ambapo anaandika code ambazo zinafananisha hash na password alizonazo kwenye wordlist kama hash zikifanana attack inakuwa success na anakuwa na plain text ya password
kwenye bruteforce attack inakuwa na numbers,symbols,letters ambazo anazibadili kuwa hash form then zinafananishwa na password hash ziki match attack inakuwa successfully
Yani nimekaaa naaangalia hixi njia mnazotoa humu lakin jibu ni kwamba hackers wako smarts na clever than anything.....Bute force with social engineering japokuwa itakuwa in chances kidogo kama 30%
So mtu ata jaribu ku exploit Google for saved passwords au chrome
Malware exploit hainaga chance sana inategemea vulnerabilityYani nimekaaa naaangalia hixi njia mnazotoa humu lakin jibu ni kwamba hackers wako smarts na clever than anything.....
Hizi acc za fb, insta, Spotify, Netflix, google, yani kila social networks unautumia kuweka ur email nilikuwa na batua since 2013- nikaaacha 2014 baada ya kuingia chuo
Yani naweza nikakutarget pasipo wewe kujua mfano Freak wewe una acc ya fb sawa na u have friends
Nachokifanya nafungua maltego natumia social links by bradson $12 na add face personal acc naweka id yako
Kisha na search for closed friends labda nikapata wanne
Nikawapata na look for their emails na mobile numbers ambazo ziko attached na fb
Nikizipata na convert ur relation to closed relationship maltego itanipa raman nzma ya urafiki wenu
Sasa naaanda my attack.... Na hapa nilikuwa natumia
1. Smtp servers email, sms
2. Sitoiweka waz ila ni my own coded rat nimecode na c# programming
Ninachokifanya na bind rat na pdf yyte hiii inatumia bind connection not as meterpreter reverse connection
Nakuja na spoof sms smbayo itaonekana imetumwa na mmoja wa rafiki zako wa karbu na sms au email inakuja inbox nabsender name ya yule mmoja wa rafiki zako either by no au name.
Nikiforce uchek ile pdf
Ukifungua ile pdf my malicious codes wataingia kwnye android yako na nitapata GUI connection vzr tubna wewe chchte unachofanya nakiona na naweza pia kupatabsaved items zote za browsers n. K
Sasa fb naipataje??
Io rat inasehemu ya fun with victim yani naweza nikavibrate ur device, chatting na wewe n. K
Nitasend fake friend request pop notification na uki accept tu AM IN
sasa yani kuna njia nyingi sana sema sasa unahack mtu fb ya mtu ili iweje na unapata faida gani ili swali ndilo lililonifanya niache huuu upupu na kuanza hack vitu ambavyo vitanipa maslai
Hio smtp spoof ukitaka uone kama una emails mbili nipe moja nitatumia ur email kukusendia ujumbe kwenye io email yako ingene for TEST
Thefreedom
Fb hata wakiblock kuna redirection.. Watu bado wanajaa tuDictionary attack haitakuwa nzuri sana kwa kitu kam fb sababu mara nyingi fb huwa ila limit ya kulogin sasa wewe unajikuta una password 10000 kwa ajili ya victim hapo itakuwa sio rahisi kufanikiwa
Phishing ndio njia nzuri lakini kwa sasa naona fb wablock zile harmful links labda mpaka uzi shorten
Inategemea na exploit yako.... Me nacode mwenyewe so naweka vile ninavyotaka na ikingia ndo utajua chance ikoje...... Mpka leo hiiii nina zaidi ya victim 50 ambao toka waingize hio kitu hawajachange simu wala kuformat so am start up with their system boot.... Sio exploitation kama unavyoijua wewe....Malware exploit hainaga chance sana inategemea vulnerability
unainclude izo bugs kwenye pdf,docx na lazma uwe na exploitation techniques atleast 2-4
so ume gain full access to their systemInategemea na exploit yako.... Me nacode mwenyewe so naweka vile ninavyotaka na ikingia ndo utajua chance ikoje...... Mpka leo hiiii nina zaidi ya victim 50 ambao toka waingize hio kitu hawajachange simu wala kuformat so am start up with their system boot.... Sio exploitation kama unavyoijua wewe....