Wednesday, November 27, 2013

Facebook Hacking method Using Tabnapping (game method)

Facebook Hacking method Using Tabnapping (game method)

 

salam from mohammed faizan

welcome visiter,today i have a new post for you and a new method of facebook hacking,if you try this ,then i am ssure that you will able to hack any facebook account ,so

follow my steps:;;;;;;;

 

 


Facebook Hacking method Using Tabnapping (game method)
Days back i saw tabnapping by sonaldo it was awsome
so i started searching for more ways of tabnapping and found this..

What Is tabnapping ?

Tab Nabbing/Napping | A New Phishing Technique
The traditional way of phishing consists of a link sent to a victim.
The modern way is to use both Phishing and Tab Nabbing/Napping methods.
Using phishing to represent Facebook, and using tab nabbing/napping to redirect a webpage to a phishing page.
You know when they say 2 is better, in this case 2 is better.



Above is a screen shot of the webpage I will explain the arrows.
Let's first talk about the header "Hardest Game Ever " the header it self makes you want to challenge your self.
"The Game You Can't Beat" it's basically intimidating you to play the game.
"01 { Welcome Guest! }" just basically saying you are a guest until you log-in.
"Send To A Friend!" asking the user to send the page to a friend. clever thinking as a hacker to get more people using the site.
""http://localhost/wordpress/" this automatically changes upon the website url, I was using xampp server to test the site, ( original author)

Recommended : 00webhost.com or my3gb

Now the log-in page.
The log-in displays when a user decides to switch to another tab like YouTube, exactly after 10sec of switching, when the user returns, they'll have to log-in to get back to the game, but they will be directed to games.html a page that looks similar to index.html but displays that the user is logged on.
Games.html has a script also but instead of the normal 10sec script we changed it to about 2 mintues, when they reach that limit, the log-in process begins again.



I am using my3gb.com (forky)
Remember when you create the url make it similar to "Hardest Game Ever"

In my case i am using username hardestgame4ever

1 : Okii So First We will To Download the Tabnapping File
Click here  (rar file 1.1mb)
Click here (zip file)

Scan Report : 0 / 44
Click here

Im lazy to put a scan report for zip file

Oki..So Now after Downloading it Extract it by Using Winrar

We need To Edit Just One File

login.html
Okii we will Come To that later..

2 : So Lets make my3gb Account now


3 : Confirm Your Account

Check your Gmail their Will be An Activation Link (my3gb only gmail works )


4 : Now Since We have made an account .. we can now start the editing.

open login.html and search for >"localhost/wordpress/fb/post.php<;


We need To replace With our post.php direct link

In my case it will be like

hardestgame4ever.my3gb.com/post.php

If yuh Created an Account With the Username ( hardestgametoplay)

You post.php file will direct link will be hardestgametoplay.my3gb.com/post.php

So you need To replace localhost/wordpress/fb/post.php with hardestgametoplay.my3gb.com/post.php

Save It . And Upload everything
Those files inside the folders too..

5 : You can upload a zip file and uncompress too..

Also you can Edit file After Uploading. ( works in Chrome)


6 : After Finish Uploading

Give your victim your index link

my link hardestgame4ever.my3gb.com/index.html

As the example i showed your link will be like this
hardestgametoplay.my3gb.com/index.html

So i gave the link to my victim

I used Sonaldo as An Example
So yuh must have a good social engineering technic

forky : Hey man Can yuh Please finish Level 2 of this game and give me TuT on How to finish
This is the Hardest game i ever played


Sonaldo : Owkii Lets See. Nothin is hard for me ..Im gonna finish Take a snap of it And show yuh .

Forky : Owkii im waiting

7 : So He Was playing And chatting ..by the time he was replying to some one login to facebook comes up..

so he need to log now


When he logs and start playing he Will be welcomed as a user not a guest anymore..

now you can go to password.html file you will see his Details including ip adress



Sonaldo : i finished level 2 .. level 3 is pretty hard .

Sonaldo : hey man i played this mobile version thats y its lil easy but level 5 damn hard...

Your victim will be enjoying game he have no idea what exactly happend

Ps Note : Im not Original Author..I learned it and i made this TuT
Sonaldo : i Hope you dont mind me taking you as an example ..

As i see Pictures ain't so clear , so i have included pics in the tabnapping files

No comments:

Post a Comment