Pages

Monday, July 25, 2011

Buzz Hacks – Facebook Hax – Google Haks

Firesheep

When logging into a website like facebook, you usually start by entering your username and password. The website then checks to see if an account exists with matching information, and if so, replies back with a “cookie” which is used by your browser for all subsequent page requests.Most websites protect your password by encrypting the initial login stage, but its surprisingly un-common for websites to encrypt everything after login. This leaves the cookie (and the users account) vulnerable to exploitation via HTTP session hijacking, sometimes reffered to as “sidejacking”, this when a hacker gets access to a user’s session cookie, allowing them full access to do anything that the original user can do when logged on to that website. On an open wireless network, cookies are sent un-encripted through the air, making these attacks extremely too easy.
This is a widely known problem that has been talked about many times, yet very popular websites like Facebook still fail to protect their users sensitive and private information. The only 100% effective fix to stop this Hack, is full end to end encryption, also known on the web as HTTPS or SSL. Facebook is constantly rolling out new “privacy” features in an endless attempt to silence the screams of unhappy users who are having their accounts hijacked daily, its utterly pointless when someone can just take over an account so easily with a Firesheep attack.

Download – Firesheep

and follow the guide below.
After installing the extension you will now see a new sidebar. Now connect to any open wifi network and click the “Start Capturing” button. Then wait a few secs.


As soon as anyone on the network visits an insecure website known to Firesheep, i.e: Facebook /Twitter / Google Buzz, and millions more, their user name, and profile photo will be displayed.

Double-click on the account you want to access, and you’re instantly logged in as them.

That’s it, you have now hacked Facebook.
Firesheep is free, open source software, and is available to download now for Mac OS X, and Windows. Linux will be supported very soon.
Enjoy, and please use this program sensibly :)

Download FireSheep

No comments:

Post a Comment