+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: close close close close close close close close close close close close (/showthread.php?tid=4940644)
close close close close close close close close close close close close - Tax - Aug 8, 2015
close close close close close close close close close close close close
* - SIM-2830142 - Aug 8, 2015
What is the forum you are going to hack the password from, if you do not want to tell it public, PM me.
If it is Hackforums, you're gonna have a bad time.
* - ipap0x28 - Aug 8, 2015
Try using a RAT on the victim's computer. (Remote Administration Tool) That way if you RAT has a keylogger og password recovery tool use that. Buy RAT here on HF, just simply go in the RAT section and you'll find someone. (pssst.. life isn't free you must most probably buy one).
* - Tax - Aug 8, 2015
@REKT
Can't send you a pm yet, anyway it's creativeDOTxippyDOTcoDOTuk
any little help is appreciated if u got time lol
////
@Marre, alrighty, anyhow, my old forum got fucked the same way I wanna fuck their forum, the hacker got access to several account who had permission to delete stuff from the forums, and none of them had a keylogger or what so ever on their pc.
* - bass booster - Aug 8, 2015
I usually send them an email and ask what they usually use. This is what I send in the body
Code
Hey man I'm trying to haxor your account but I'm to lazy to do research on the site and want to login as you. Can I haz your pazzword pl0x?kidding. That site is on a hosting sites subdomain(i think) so unless you hack the main site, I don't think you'll be getting any database
* - kostas22 - Aug 8, 2015
I agree with Marre69 use a RAT .A very good one is babylon or you can try the old darkcomet .You can find plenty of tutorials here just you the search.
P.S: You might need to buy a crypter that will cost you some money or ask somebody to crypt it for you ;)
* - Gr3yHat15 - Aug 8, 2015
Rat or Kl lol pretty much how its done
* - noobhat - Aug 8, 2015
won't sql injection be better than rat..you gotta crypt the rat bind the rat....rat the rat ;).....you gotta infect the person which is a pain in the ass...what the forum you trying to hack?
* - Viktory - Aug 8, 2015
you ask them for it politely
* - hyperhydration - Aug 9, 2015
So nobody has mentioned phishing? with an FTP / emailer function?
There's also good phishing and bad phishing.
Good phishing... you need to create a free domain that has a wild subdomain name similar to the target site.
aka thisIsTheTargetSitesDomain.Name
your new free domain name thisIsTheTargetSitesDomain.Name.Secure.Login.FREEDOMAINPROVIDER.com
Then just go to your targets site and use something like HTTrack to copy the site. Or just copy the source html, js and css.
Go into the html and modify the login forms action="" value to the location of your free FTP (with php) account on some random free FTP site.
Have a bit of php on the FTP site location that takes the form variables and writes them to a log file.
Now put the modified html page and files on the free site provider with the free domain name and copy an email from the target sites automated email notification emails and spoof the email name and address with the same as the targets name and address. send this spof email to your target having swapped the button to login to direct to your modified site.
Bad phishing wont spoof emails and the links will be to very obvious bad sites.
Now, lets get a little more advanced. You could make the phishing page both capture the details and login to the real site... I'm not too sure how you hide referrals (never bothered to look), but worth looking at... have a bit of php that loads up the real site after capturing the data.. and puts the login variables to whatever they first set.
Right, I have never looked at a single phishing tutorial, but having some knowledge in server and client sided programming languages so I decided to figure it out... phishing seems real obvious to me... would be interesting to hear others comments on this. I have never done this to anyone for real... as it's not legal if you're targetting someone other than youself. (aka learning). I just taught this to myself to expand my understanding of various attack concepts and to show some class mates how easy it is to do. I don't advise in using this on someone... but it's an interesting thing to try out and will raise your awareness towards emails you recieve... aka never click on any links in emails (unless theyre instantly created for a site account creation / lost pw etc)... To be extra careful for when you do need to open emails... make sure you read the email source code... this will reveil the real address source and server and not the spoofed details.
* - ProblemSolva - Aug 10, 2015
Phishing is not allowed to talk about on hf, so yea thats why nobody mentioned it lol.
* - jhon9480 - Aug 12, 2015
The easiest way is too ask her/him!