Sep 18, 2014 08:11 PM
(This post was last modified: Sep 18, 2014 09:12 PM by Demoralise.)
🤝I can't believe I just figured this method out. This is one of the greatest hacking methods I have ever seen, it is enjoyable, hillarious and it perfectly illustrates peoples ignorance and how stupid they are. I even found it myself 😁
This method exploits vulnerabilities in both Facebook and Apple. Here is the method:
For quite some time it has been known that by creating a Yahoo Account and going to the contacts page that you can import your Facebook friends as contacts and view their private Facebook email addresses by allowing the Facebook Yahoo app to import the information by logging into Facebook via Yahoo Mail and clicking the okay button. Now is the great part.
By going to: https://iforgot.apple.com/password/verify/appleid you are able to reset somebodies Apple ID/account password via security question by entering their email and birth date. You have been provided their email via Yahoo, and you can find their birthday via their about page on their Facebook profile.
Enter their Apple ID as their email, then select Answer security questions. Enter the birth-date found via their Facebook about page. When you get to the security question, take note of their name and whether their security question is easy or not. Do this with every person until you find a security question which is so easy to answer, and trust me - there will be a few. Just today using this method I hacked three peoples accounts who had custom security questions set to:
1. What is my mothers name?
2. What is my current hometown?
3. What is my birthday?
One of these accounts was synced to iCloud and I was able to access their entire device.
How did I answer them? Facebook.
How I did it:
1: Family and relationships via Facebook about
2: Places He's/She's Lived via Facebook about
3: Facebook about overview tab
And I used Tor so my IP would not be logged. It is hilariously easy and illustrates the ignorance of people, also how stupid people can be.
Give it a shot 🎉
Using this technique you can potentially access the persons entire device via iCloud or change their security question by logging into their Apple account. Via iCloud you could ransom their entire device if it is an iPhone via Find My iPhone - put the device in lost mode and set a custom message, like "Hacked by ______". This will only work if they have no pincode or passcode on their device. This will also prevent them from restoring their device.
Sure it is time consuming but it will be worth it 🙂
This method exploits vulnerabilities in both Facebook and Apple. Here is the method:
For quite some time it has been known that by creating a Yahoo Account and going to the contacts page that you can import your Facebook friends as contacts and view their private Facebook email addresses by allowing the Facebook Yahoo app to import the information by logging into Facebook via Yahoo Mail and clicking the okay button. Now is the great part.
By going to: https://iforgot.apple.com/password/verify/appleid you are able to reset somebodies Apple ID/account password via security question by entering their email and birth date. You have been provided their email via Yahoo, and you can find their birthday via their about page on their Facebook profile.
Enter their Apple ID as their email, then select Answer security questions. Enter the birth-date found via their Facebook about page. When you get to the security question, take note of their name and whether their security question is easy or not. Do this with every person until you find a security question which is so easy to answer, and trust me - there will be a few. Just today using this method I hacked three peoples accounts who had custom security questions set to:
1. What is my mothers name?
2. What is my current hometown?
3. What is my birthday?
One of these accounts was synced to iCloud and I was able to access their entire device.
How did I answer them? Facebook.
How I did it:
1: Family and relationships via Facebook about
2: Places He's/She's Lived via Facebook about
3: Facebook about overview tab
And I used Tor so my IP would not be logged. It is hilariously easy and illustrates the ignorance of people, also how stupid people can be.
Give it a shot 🎉
Using this technique you can potentially access the persons entire device via iCloud or change their security question by logging into their Apple account. Via iCloud you could ransom their entire device if it is an iPhone via Find My iPhone - put the device in lost mode and set a custom message, like "Hacked by ______". This will only work if they have no pincode or passcode on their device. This will also prevent them from restoring their device.
Sure it is time consuming but it will be worth it 🙂
