Nexus: facebook.python

How To Use facebook.py Script To Hack Facebook

Read

If you are not familiar with what is this Script Click Here

As Most Of the People Always asks How to Use facebook.py I have created a Video For It

I have used it in Ubuntu 14.04 but Its Same in Windows

Remember one thing before you run the script download python-mechanize in Linux you can download it by typing in Terminal sudo apt-get install python-mechanize

I will Soon Make a Windows Executable for this Script and Then It will be easy for Windows User Too ......

You can Download the Script Here

Video:

Read More Add comment

How To Use facebook.py Script To Hack Facebook

Reviewed by 0x000216 on Monday, April 21, 2014 Rating: 5

Phishing Page for Facebook

By 0x000216

Read

0 Comments

This Tutorial is a Video. If you don't understand and want it as Text then please Comment Below :)

Creating a phishing page for facebook using SET (This will only work on LAN. Soon I will make a tutorial for WAN)

This is only for Educational Purpose
Do it at your own Risk

-Admin (Zakir)

Have a Good Day

Read More Add comment

Phishing Page for Facebook Phishing Page for Facebook

Reviewed by 0x000216 on Wednesday, November 06, 2013 Rating: 5

Some Hacking Tools

By 0x000216

Read

0 Comments

Every Beginner In Hacking Requires some Hacking Tools Some To Hack and Some to understand Today I will provide you some of the Hacking Tools :)

Download

Read More Add comment

Some Hacking Tools

Reviewed by 0x000216 on Tuesday, November 05, 2013 Rating: 5

Phishing is one of the popular social engineering attack used by Cybercriminals. In this method, hackers host a fake webpage which looks similar to the original page of the website.

Then, hackers lure users to visit the phishing page by tricking them with legitimate-looking mails. When a user enter the login data in the phishing page, the info will be stored in hackers' database. At the end, users will be redirected to original website so that users won't realize that they are under attack.

From the above , it is clear that Cybercriminals need a webhosting for hosting their phishing page. But the recent research shows that hosting site is no longer needed for hosting the phishing page(but you still need a webhosting to run a script that stores the data ).

Henning Klevjer, an information security student at the University of Oslo in Norway, shows how a hacker can create phishing page using Data URI.

What is Data URI?
Data URLs are a Uniform Resource Identifier scheme that allow you to include data items inline in a web page as if they were being referenced as external resources. Data URLs are a form of Uniform Resource Locators, although they do not in fact remotely locate anything. Instead, the resource data is contained within the URL string itself . This saves the browser from having to make additional HTTP requests for the external resources, and can thus increase page loading speed.

For Eg:

alt='BTS_Image'/>

The above code will display the following image in the page.

The fun part of the Data URI is that you can directly enter the code in the browser address bar and load the content.

For Eg:
Pasting the following code in the browser address bar will load the image directly.

data:image/gif;base64,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

Not only Image, you can load text, html and other supported formats. You got my point?! Yes, Cyber Criminals are able to load the entire phishing page using the data URI method.

The simplified version Data URI example(without base64 encoding):

data:text/html,
BreakTheSecurity

Entering the above Data url in browser address bar will display the "BreakTheSecurity" text in the h1 format.

Data URIs follow this scheme:

data:[][;base64],

Here, are one of the MIME media types described in RFC 2046[1]. Base64 encoding is optional.

How an attacker can use it for creating phishing page?
This section is not suitable for the one who doesn't know how to create normal phishing page. Read this post before reading this section.

Step 1:
Copy the source code from the original site(right click and select 'view page source')
Step 2:
Modify the code such that transfer user credentials to another location.
step 3:
Now encode the source code with base 64.
step 4:
Once you got the encoded code, create data uri by following the above scheme.
For Example

data:text/html;base64, encoded_code_goes_here

Alternatively you can use the site for creating the data URI:
http://software.hixie.ch/utilities/cgi/data/data

As the data url is too long, hackers will use the url shortening service. But google chrome shows warning whenever redirected from url shortening service to data url.

Do It at your Own Risk

Read More Add comment

Phishing Attack