I got the password of a pwned yahoo e-mail account and I would like to log into it.
Obviously, I'm going to use a VPN (should I use TOR as well?) when trying to log in.
I know gmail has tight security, 2FA, notifications when someone logs in from an unknown ip/device. But does yahoo have the same level of security?
Will the owner of the email address receive notifications of my login, and will I be able to log into the account? (I'm 100% sure he does not have 2FA enabled)
Not the same level, it's easier but you'll still need a clean, close ip to your victim and a vpn isn't just enough, you need good proxies for that. Also a matching user agents will also help you. As for notifications, it depends on the recovery options he got and how good was your ip/user-agent, if he logs in a lot, if he logs in from the same location or in different area, etc...
(Sep 19, 2017 02:53 AM)xfreedom Wrote: Not the same level, it's easier but you'll still need a clean, close ip to your victim and a vpn isn't just enough, you need good proxies for that. Also a matching user agents will also help you. As for notifications, it depends on the recovery options he got and how good was your ip/user-agent, if he logs in a lot, if he logs in from the same location or in different area, etc...
Mmmmm good post ;)
OP don't use tor, the tor network has been used and abused by spiders and what not, plus there is no real way to select what region you'd like to be in. Just use a proxy you'll be fine.
Can you hear my weed?
cuz it's loud
(Sep 19, 2017 02:53 AM)xfreedom Wrote: Not the same level, it's easier but you'll still need a clean, close ip to your victim and a vpn isn't just enough, you need good proxies for that. Also a matching user agents will also help you. As for notifications, it depends on the recovery options he got and how good was your ip/user-agent, if he logs in a lot, if he logs in from the same location or in different area, etc...
I know the location (home address) of the victim so I could get a proxy in the same city for example (do I need to go further)? Potentially I could send them an IP logger and learn their IP.
By matching user agents do you mean, that my machine which I use to access the account needs to have if possible a matching operating system and browser to the ones my victim uses?
Thanks :D
Same city is usually fine, and yes, that's a user-agent, some extensions in firefox, such as user-agent switcher allows that, you just need to find the user agent string to add some.
|
