Hacking facebook on wifi LAN part 2

Im back with the second part of the post. At the end of the last post, we successfully re-routed all the traffic from the victim’s computer to the router through our computer.Next, we have to capture their facebook cookies through wireshark. So How do you go about doing that? It’s very simple actually.
  • Open up wireshark
  • Goto capture – > Interfaces in the top menu and select your interface. It’s usually the one which has an IP address and  a certain number of packets flowing through it.
  • Next goto capture and click on start.. It should look something like this
This window has all the packets sent from the victim’s/victims’ computer to the router and all the packets sent from the router to the victim.
Next in the filter type  “http.cookie contains datr”.  You ask why? Because, when a user logs in to facebook, he is given some cookies which is unique to him. If we replace our cookies with the victim’s cookies, we can login to his account as then facebook wont know the difference.
You now have the cookies. To get the information stored in the cookies,  right-click on any one of the cookie and click on Follow TCP stream.
In the TCP stream look for the line  Cookie: ( and all cookie names). If it doesn’t come, select some other packet in wireshark and click on follow tcp stream for that. You can see the source IP and destination IP in wireshark. So if you have more than one source IP , then you know you have the cookies of more than one account on your LAN. This is what I got when I did it.
So now you have it :D. The datr cookie, c_user cookie, lu cookie, sct cookie, w cookie and xs cookie. These are the main cookies you need.
Now open firefox and goto http://www.facebook.com. Once there, click on cookies in the web developer add on which you had installed in the last post. Then do the following
  • ·         Clear session cookies
  • ·         Delete domain cookies
  • ·         Delete path cookies.
IMPORTANT: Once you do this, again type http://www.facebook.com in the URL and click enter. Basically you are reloading facebook after deleting all cookies.
Now login to your account with your username and password. After logging in , click on cookies in web developer add-on and click on “view cookie information”.
And there you have all your cookies :p. Now what to do?! I guess you know it by now. !
Click on “edit cookie” for each cookie there and replace the cookie value with the value you got through wireshark.
If you did not get all the  cookies in wireshark its OK! But mainly, you should look to replace the datr cookie, c_user cookie, lu cookie, sct cookie, w cookie and xs cookie.

After replacing all the  cookie values with the ones you got in wireshark, just refresh the facebook page. And thats it! You are in to the victim’s account! You have HACKED a facebook account on LAN.:D

Popular posts from this blog

Tsum Valley Trek - Tsum Valley Trekking Itinerary

Image
Situated in northern Gorkha district Nepal.  Tsum Valley popularly knows as the ' Hidden Valley' disc by the Baudha Himal (6692m) and Himal Chuli (7893m) to the west Ganesh Himal (7422m) to the south and Sringi Himal (7161m) to the north. Tsum comes from the Tibetan word ' Tsombo' which means vivid. Traditionally Tsum valley was a culturally distinct geographical area called 'Tsum Tso Chucksums' which means thirteen provinces rules as a single territory. Situated at an altitude arise from a 1905m at Lokpa to over 5093m at Ngula Dhojhyan Pass on the tibetan border. The valley occupies an area of about 1663 km2. This includes two remote villages' development committee Chhekampar ' Upper Tsum' and Chumchet ' Lower Tsum'.  Click image for enlarge The Valley opened to foreign trekkers in 2008 so far  with initiative from  Trekking Agencies' Association of Nepal  (TAAN). Tsum  valley is rich in ancient art,culture and religion.The local people
Read more

Meditations on Relevance, Part 3: Who Decides What's Relevant?

Image
One of my favorite comments on the first post in this series came from Lyndall Linaker, an Australian museum worker, who asked: " Who decides what is relevant? The curatorial team or a multidisciplinary team who have the audience in mind when decisions are made about the best way to connect visitors to the collection?" My answer: neither. The market decides what's relevant. Whoever your community is, they decide. They decide with their feet, attention, dollars, and participation. When you say you want to be relevant, that usually means "we want to matter to more people." Or different people. Can you define the community to whom you want to be relevant? Can you describe them? Mattering more to them starts with understanding them. What they care about. What is useful to them. What is on their minds. The community decides what is relevant to them. But who decides what is relevant inside the organization? Who interprets the interests of the community and deci
Read more

Aspiring, Thriving, or Struggling Changemaker? Join us for MuseumCamp 2016.

Image
Each summer, the Santa Cruz Museum of Art & History hosts MuseumCamp , a professional development experience that is part retreat, part unconference, part adult summer camp. MuseumCamp will be August 31-September 2, 2016. This year's theme is CHANGEMAKERS. We will host 100 diverse people who are making change in the world, our communities, and our institutions for 2.5 days of fun, fellowship, and active learning. Whether you are dreaming about change, making it happen, or have faded battle scars to share, we want you here this year . As always, MuseumCamp will be a high-energy, all-in experience... with enough downtime for introverts, too. The 2.5 days include lightning talks from campers, team design bursts to tackle your thorniest change challenges, MAH community programming, movement and meditation, delicious food, and late-night conversations. Yes you can sleep at the museum. Yes you can swim with sea lions. Yes you can--and will--learn things about yourself and your work t
Read more