+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: OpSec and OSINT (https://hackforums.net/forumdisplay.php?fid=322)
+---- Thread: [Tutorial] How to bypass Google 2auth (/showthread.php?tid=5257925)
[Tutorial] How to bypass Google 2auth - Sift - May 3, 2016
Can't be sure if this works but it did for me.
What you need?
Target phone number.
Proxies/Vpn from different countries.
1st. Login into ithe from different countries.
2. When confirm the recovery phone number pops up.
Write his phone number then you should be in.
* - ๖ۣۜCitizen Z / Napalm - May 3, 2016
Vouch for analyse's method, his stuff works
* - Spl0ite - May 3, 2016
Yea @analyse I have tried that and it does work, Its very important to use a VPN or you can use TOR.
* - HiddenEyE - May 3, 2016
i don't really think this works cause gmail does not show the complete phone number.
please explain how this method works
* - Sift - May 3, 2016
(May 3, 2016 05:44 AM)spider1 Wrote: i don't really think this works cause gmail does not show the complete phone number.
please explain how this method works
If you doxed the person you should have his number.
* - th3c0rrupt3d0n3 - May 3, 2016
(May 3, 2016 05:44 AM)spider1 Wrote: i don't really think this works cause gmail does not show the complete phone number.
please explain how this method works
Thats why the tutorial says "Things you need: Target phone number." lol
And OP, this is hella interesting, surely will test it soon and report back :)
* - spooky hacker - May 3, 2016
Doesn't it then ask to send a text or call then #?
* - Sift - May 5, 2016
(May 3, 2016 11:05 AM)ℂɑʂɧ Wrote: Doesn't it then ask to send a text or call then #?
Not when it logs in from different countries and Ips it asks for phone number.
* - SkinX - May 5, 2016
Nice find, thanks for this. I'll try this out and hopefully it's not been patched yet.
* - N3xuz - May 5, 2016
Very interesting. This doesn't work when trying to doing a password reset, correct?
* - mlux81 - May 5, 2016
If this really works it could be very interesting, i'll try this.
Thanks
* - Glubz - May 7, 2016
This isn't 2 step verification. This is basic identification verification when you sign in from an unrecognized IP.
* - Sift - May 7, 2016
(May 7, 2016 03:00 AM)Glubz Wrote: This isn't 2 step verification. This is basic identification verification when you sign in from an unrecognized IP.
If they have 2auth this works sometimes lmao.
* - Enigmaz - May 9, 2016
Well why not try something else?
Since you know the phone number why not get the city were the person lives and from there get a socks5 proxy of the same city as the victim.
Because doing all of this I doubt it would work.