[hackbh_0080]

If a hacker makes a bruteforce attack on my facebook or instagram account, how can he enter without blocking identity control? I made a bruteforce attack on my friends' accounts many times to test their security, I found their passwords with hydra but facebook and instagram do not allow me to enter if I do not check identity, the attack must be carried out from the server side ?

[Semmenial]

Can't be done through server side unless you have access to a facebook server. I believe the use of proxies,etc prevent the display from coming up. Also if your proxy is a residential one in their general area it'll also help.

[hackbh_0080]

I know this, but when I log into my own account using tor or a vpn, I can enter without problems, when I do it with someone else's account I am blocked, so I think facebook prevents access based on the mac address and not to the ip address, right?

---

Let me explain better, my ip is dynamic and changes, so facebook does not detect the identity of a user from the ip, besides this there is the type of machine, if facebook detects access from another device warns the owner of the account, so it is not something that depends on the ip ....

[nonma]

what FB asking from you when do you log in this account?

[hackbh_0080]

Because i am black hat, i had the password using hydra

---

I solved, I stole cookies with a rat

---

And I managed to get in, uuuuuuuu