[Studentlearning]

Can any one tell me how to bypass google account 2 factor authentication.
I have email and password but it is 2FA protect, login confirmation goes to other device and ask to click two digit number

[DramaKing]

First of all, you're already screwed because the target has already been notified of your attempted hijacking. Aside from that, there are two methods: simjacking, which will make you the absolute worst, and 2FA-capable phishing platforms like Evilginx and EvilProxy. These will only work against TOTP/SMS. Security keys (including the built-in keys) and passkeys are secure against any attempts for a remote attacker to gain access. Session hijacking is still possible, but it's not guaranteed.

[resetti]

No, if there was, everyone everywhere would be getting hacked.

2FA is a secure way to prevent unauthorised access to your accounts, aren't you glad it's working so well and protecting that users account?

Anyways, to bypass it, you'd either have to perform a full SIM Swap against the target, which would require extensive social engineering skills, personal knowledge/information about the target such as full name, cell phone provider (obviously), date of birth, email address, full address, etc. And at the end of it you might not even be successful and their cell provider might tell you to fuck off and hang up.

Other options would be using something like EvilGinx which acts almost as a Proxy Phishing Page instead of a regular one that just logs username and password, these Proxy Phishing Pages send requests and render responses on the phishing page from the real website, so if 2FA is required to login to the email, this request for a 2FA code will render on your Proxy Phishing Page, when the user hopefully inputs the 2FA code into the site, it will be logged along with their cookies that they were assigned.

A less viable option would be using an OTP bot, which isnt really focused towards getting into email accounts, and is more focused on bank account access or Paypal access, still, if you customised one enough you might be successful with it.

Finally, if you are able to get malware installed on the victim device (phone (specifically Android, you're not hacking iPhone)) or computer) you can use stealer malware that will intercept the 2FA codes. Though this is not very common.

Overall, it aint easy to bypass 2FA, and it never will be. Furthermore, before you ask, nobodies gonna do it for you, people aint got time for that.

[bobbyjoe223]

No, if there was, everyone everywhere would be getting hacked.

2FA is a secure way to prevent unauthorised access to your accounts, aren't you glad it's working so well and protecting that users account?

Anyways, to bypass it, you'd either have to perform a full SIM Swap against the target, which would require extensive social engineering skills, personal knowledge/information about the target such as full name, cell phone provider (obviously), date of birth, email address, full address, etc. And at the end of it you might not even be successful and their cell provider might tell you to fuck off and hang up.

Other options would be using something like EvilGinx which acts almost as a Proxy Phishing Page instead of a regular one that just logs username and password, these Proxy Phishing Pages send requests and render responses on the phishing page from the real website, so if 2FA is required to login to the email, this request for a 2FA code will render on your Proxy Phishing Page, when the user hopefully inputs the 2FA code into the site, it will be logged along with their cookies that they were assigned.

A less viable option would be using an OTP bot, which isnt really focused towards getting into email accounts, and is more focused on bank account access or Paypal access, still, if you customised one enough you might be successful with it.

Finally, if you are able to get malware installed on the victim device (phone (specifically Android, you're not hacking iPhone)) or computer) you can use stealer malware that will intercept the 2FA codes. Though this is not very common.

Overall, it aint easy to bypass 2FA, and it never will be. Furthermore, before you ask, nobodies gonna do it for you, people aint got time for that.

could you recommend me a cheap OTP bot ??

[Paolo200217]

that's a guide or just a threads for learn???

[resetti]

could you recommend me a cheap OTP bot ??

@OTPValley on Telegram