If one of my slaves is logged in on fb lets say , can I copy his browser directory files session cookie data and don't need to authenticate with username pw?
I can use his session?
If anyone knows a trick or two let me know thing is I have a corrupted keylogger which dosent give me the full pw in the keylogs.
so I need some other way to get in
thanks
you need password and username no matter what. you can get the cookies to bypass the security on Facebook e.g locking you out.
(Jan 1, 2016 08:24 AM)Biker BoyZ Wrote: you need password and username no matter what. you can get the cookies to bypass the security on Facebook e.g locking you out.
This sucks... I was really hoping there was a way to do this without username and password.
(Jan 1, 2016 08:30 AM)G-Hot34 Wrote: This sucks... I was really hoping there was a way to do this without username and password.
if it was that easy. everyone would be exploiting it :P
(Jan 1, 2016 08:31 AM)Biker BoyZ Wrote: if it was that easy. everyone would be exploiting it :P
That's true. I saw a plugin on a RAT which were sold on HF which actually could do this session stealing thing
Later on the plugin was removed prolly blackhat reasons not allowed.
Peace
(Jan 1, 2016 08:23 AM)G-Hot34 Wrote: If one of my slaves is logged in on fb lets say , can I copy his browser directory files session cookie data and don't need to authenticate with username pw?
I can use his session?
If anyone knows a trick or two let me know thing is I have a corrupted keylogger which dosent give me the full pw in the keylogs.
so I need some other way to get in
thanks
If you have Reverse proxy. it's easy
(Jan 1, 2016 10:28 AM)somenormalguy Wrote: If you have Reverse proxy. it's easy
I have a rat which supports reverse proxy. HEY how would you do it then?
Even if you don't have their password it's easy as hell to get in their facebook/other account.
Live keylogger, do something subtle and make chrome crash or something, they'll log back in and you will see their strokes
Yes, steal their cookies and inject them into browser + create a reverse proxy of them.
(Jan 1, 2016 02:46 PM)Debireff Wrote: Yes, steal their cookies and inject them into browser + create a reverse proxy of them.
Can't I just move the whole chrome folder with the cookies and replace it with mine ? I did so , it added all his bookmarks and such. Now I just need to waite to he gets online so I can try to reverse while he logged into accounts
g-hot
(Jan 1, 2016 02:46 PM)Debireff Wrote: Yes, steal their cookies and inject them into browser + create a reverse proxy of them.
This.
Steal or fork their sessions tokens, use reverse sock/http, enjoy
No login credentials needed
DO NOT DEAL WITH THIS MEMBER
It'd be so easy if you could, too bad you can't.
|
