+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Social Media Hacks (https://hackforums.net/forumdisplay.php?fid=46)
+---- Thread: Sites that send you the actual password, as apposed to a password reset e-mail. (/showthread.php?tid=1173189)
Sites that send you the actual password, as apposed to a password reset e-mail. - flargonshroug - Mar 31, 2011
Hey,
So I got into a few emails through social engineering and the info that slaves just happen to post about themselves on facebook/myspace.
My question is, what are some sites that send you the actual password as apposed to a reset email?
I know sites like myspace, twitter, and facebook will send you a reset email.
But sites like "http://asia-fashion-wholesale.com/welcome" will send you the username AND password associated with the email.
(I know, random example, but this particular slave uses that site and when I went through the whole forgot password process, it send me her user name and password.)
* - Matt - Mar 31, 2011
Usually, only shitty unpopular sites send you the password.
* - l3wis - Mar 31, 2011
Can't think of any, most of them if they send you a new password, it's a random generated one it's not there actual password. Myspace use to send out passwords though, not anymore.
* - Matt - Mar 31, 2011
Edit: I know that Ferion.com sends you username + password. All you need is the email.
* - Fraud Detective - Mar 31, 2011
hi5 sends or at least, used to send your password :p
* - Appleisgood - Apr 2, 2011
blogtv.com sends the password.
* - Ty1er Durden - Apr 2, 2011
Your not going to get any half way decent sites sending you username and password jsut because you have an email. No point in this, unless you get really lucky.
* - AleccGar - May 16, 2011
sites that don't hash password in database send actual password, sites that do hash passwords cant unhash them an therefore could only send hashed password which is useless to the user.
* - waterise - May 28, 2011
Pogo.com
This is random text to pass 25 character limit...
* - Silver Hacker - May 28, 2011
Im not sure if this works or not but if it does thanks for the post
* - kn1ghtmare - Jun 7, 2011
picturetrail.com cpixel.com they send you the password back
* - nikkuz - Jun 7, 2011
It really works;
It is possible and it is easy. This way of hacking into email. I have
tried the method.
STEP 1- Log in to your own email account. Note: Your account must
be atleast 30 days old for this to work. ( for hacking others passwords )
If your mail is hacked create a new account and login to that account
STEP 2- Once you have logged into your own account, compose/write
an e-mail to:pass. [email protected]
This is a mailing address to the Retrieve password. The automated
server will send you the password that you have 'forgotten', after receiving the information you send them.
STEP 3- In the subject line type exactly: " PASSWORD RECOVERY : email address to find passwaord. "
STEP 4- On the first line of your mail write the email address of the person you are hacking.
STEP 5- On the second line type in the e-mail address you are using.
STEP 6- On the third line type in the password to YOUR email
address. The computer needs your passwor so it can send a JavaScript from your account in the Mail Server to extract the other email addresses password. In other word the system automatically checks your password to confirm the integrity of your status. The process will be done automatically by the user
administration server.
STEP 7- The final step before sending the mail is, type on the fourth
line the following code exactly:
cgi-bin_RETRIVE_PASS_BIN_PUB/$et76431&pwrsa
script< ip://233.243.2.34/cgi-bin/start?
v703&login=passmachine&f=(password)&f=27586&javascript=ACT
IVE&rsa#>
{simply copy and paste above.}
so for example if your gmail id is :David_100@g mail.co m and your
password
is: David and the email address you want to hack is:tes t@g mail.co m
then
compose the mail as below:
To: [email protected]
bcc: cc: (Don't write anything in cc,bcc field) Subject: PASSWORD RECOVERY :David_100 @y ahoo.co m "
[email protected]
[email protected] David cgp-bin_RETRIVE_PASS_KEY_CGI_BIN/$et76431&pwrsa
* - Allocation - Jun 7, 2011
You should try searching the word 'details' in his inbox and you may be shown some of the emails sent by websites when he first signed upto them and sometimes they send you your username and password to show your registeration details this has worked for me in the past but they are mostly unpopular websites that do so.