Spoof Call and Spoof SMS set any caller ◆ ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Whitehat • Blue Team • Defensive Security Pentesting and Forensics › Session hijacking to bypass 2FA?

New Reply 

Session hijacking to bypass 2FA?
albyaty
albyaty Offline
[n00b@HF:]
*
Registered
Posts:
28
Threads:
5
Credibility:
100
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 17, 2020 01:12 PM
I am currently using a RAT, I am trying to get the cookies or login session for some victims but so far the cookie grabbing plugin that is intergrated in the RAT does not work.

Does anybody have any alternatives that I can use in this case? Will I have to run a kali virtual machine and use evilginx2? are there any other options?

if I already have access to the victim's PC, is it that hard to grab the cookie?

Thanks in advance for the help! 😁😁
Mr zero 0
Mr zero 0 Offline
[n00b@HF:]
*
Registered
Posts:
77
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 21, 2020 01:41 PM
You need to get a new rat friend, seems like your's is outdated, but then after you get it you can just use it in the browser that all the spoofers use I forgot the name atm tho lol xD but it allows user agents, cookies, proxy, and all other
all the carders use it
smokey1
smokey1 Offline
[n00b@HF:]
*
Registered
Posts:
20
Threads:
1
Credibility:
200
Popularity:
5
βytes:
β 0
Game XP:
0
Jan 11, 2021 05:57 AM
yes, a new rat is what u need. inbox me i might have an idea for u
Jaxsu
Jaxsu Offline
[n00b@HF:]
*
HF l33t
Posts:
13
Threads:
2
Credibility:
000
Popularity:
1
βytes:
β 0
Game XP:
0
Jan 11, 2021 10:15 PM
What browser are you trying to session hijack? Different browsers handle secrets differently. IE stores it in a Dat file, Firefox in a sqlite dB, and chrome (and edge) with dpapi encryption. So you need to target a specific browser
Sandikaaa
Sandikaaa Offline
[user@HF:]
*
Registered
Posts:
440
Threads:
66
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jan 12, 2021 02:16 PM
just use evilginx2 and patch hosts file its simple ?
Dolla$
Dolla$ Offline
Available for Security Services.
**
HF Ub3r
Posts:
358
Threads:
13
Credibility:
900
Popularity:
796
βytes:
β 656.88
Game XP:
573
Jan 13, 2021 01:44 AM
Just bind an exenstion on the target navitor, get the cookie throught it.
albyaty
albyaty Offline
[n00b@HF:]
*
Registered
Posts:
28
Threads:
5
Credibility:
100
Popularity:
0
βytes:
β 0
Game XP:
0
Jan 16, 2021 03:51 PM (This post was last modified: Jan 16, 2021 03:52 PM by albyaty.)
(Jan 11, 2021 10:15 PM)Jaxsu Wrote:  What browser are you trying to session hijack? Different browsers handle secrets differently. IE stores it in a Dat file, Firefox in a sqlite dB, and chrome (and edge) with dpapi encryption. So you need to target a specific browser

The victim's browser is chrome

I got the cookie file but it is encrypted and looks useless as far as i can tell.

(Jan 13, 2021 01:44 AM)Dolla$ Wrote:  Just bind an exenstion on the target navitor, get the cookie throught it.

What kind of an extension?

(Dec 21, 2020 01:41 PM)Mr zero 0 Wrote:  You need to get a new rat friend, seems like your's is outdated, but then after you get it you can just use it in the browser that all the spoofers use I forgot the name atm tho lol xD but it allows user agents, cookies, proxy, and all other
all the carders use it

If you can get me more info I'd really appreciate it, thanks friend.
gucciuser
gucciuser Offline
[n00b@HF:]
*
Registered
Posts:
29
Threads:
1
Credibility:
100
Popularity:
0
βytes:
β 0
Game XP:
0
Jan 23, 2021 05:25 PM
Just probably use something like hidden RDP and then capture the cookies from the requests?
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by JoKeR420Dec 23, 2020 04:14 PM 13 517 Dec 23, 2020 04:14 PM
Last Post: Mad76e.
by agabajhnDec 21, 2020 06:29 PM 8 413 Dec 21, 2020 06:29 PM
Last Post: Mad76e.
by OxycodoneDec 12, 2020 03:13 PM 5 479 Dec 12, 2020 03:13 PM
Last Post: 2xTheTap115