Dear Readers: HWS has recently started a new project for the students of engineering ====> The Engineering Projects


Write at HWS !!!

Guest Posting

Wednesday, September 7, 2011

Chapter 13 : What is Tabnabbing ? Hack facebook Using Tabnabbing


Hello Friends, i have posted about  Orkut fake login page and also about Tagged.com fake page , today i will teach you how to hack Facebook account password using Tabnabbing. Tabnabbing is a modern type of phishing method used to hack websites passwords. As we all know normal Phishing attack is easily detectable on Facebook because Facebook has implemented an extra code that validates the previous arriving URL and some basic functions. If it founds that page from which you arrived is a Facebook Phish or fake page, it displays a warning message to user that You have been arrived from fraudulent or fake page. So please change you Facebook account password immediately. So user easily came to know that was made lol by someone and he changes his password again. So overall the hacking attempt is failed.
Ahhaha... The old Phishing methods are for novice users who are just script kiddie's and doesn't ABC of hacking.. As technology is changing, to survive as hacker you also need to change your hacking techniques with time. And key to this is coding and language knowledge.

What is Tabnabbing and what advantage it provides over phishing ?

As i already told friends, tabnabbing is modern phishing technology that hacking experts to hack victims passwords. Tabnabbing is same as Phishing, the only difference between them is Phishing redirects you to particular page while Tabnabbing uses the meta refresh feature of web browsers to refresh the page after particular delay (delay is set by user). Meta refresh is just a meta tag that is used in header part of web pages for sending traffic from a source to destination website after few seconds delay depending upon setting. Since its a meta tag so its only processed but no data in cookies is stored. Here the advantage lies, when Facebook checks for the previous page or source from which we are arriving at Facebook, it founds none as we are dynamically refreshing the page which acts similar like we are opening a Facebook page in new tab. Now Facebook recognizes this as user intentionally opened Facebook and he hasn't arrived there through an script or automatic program. So we tab nabbed Facebook from the back end using the meta refresh tag.

Requirements:

  • Phishing Pages by HackWithStyle
  • Register on my3gb website and upload these to them.
  • Send the link to victim.

How to hack Facebook account password using Tabnabbing:

This technique hardly requires less than 5 minutes to hack the Facebook account password.This is the first version of this hack. I will tell you the improvement in this technique in further tutorials. Follow these Steps
  • Downlaod Phishing Pages by HackWithStyle.
  • Unzip the folder ,these are total four files.
  • Now Register on my3gb website and upload these to them.
  • Now open the index file and send its link to victim.
  • Check the password file to get the password of victim.
The only thing i not included in this tutorial is How to send Phishing emails. You all know the reason for this, we cannot discuss such things directly on internet because that can be misused by newbies and i don't want that anybody should use my tutorials for wrong way. I make videos just to guide you how hackers do the things. My intention is to guide you latest things happening in security field and not to make you a cracker.
So Enjoy the tutorial and learn how tabnabbing is done...

About the Author

I am XEO Hacker, the founder of Hack With Style (HWS). I am blogging since 2009 before that I just search things and now I am sharing my knowledge through this plateform.I'm also a freelance writer on topics related to Website Hacking,Website Optimization (SEO), blogger customizations and making money online.
In 61 people's circles

Subscribe To Get FREE Tutorials!


Respected Readers:
As a 21 year old student, the only income I rely on is my pocket money. Bearing the running costs of HWS Blog has become really difficult. We educate thousands of bloggers a week with our tutorials. To help us go forward with the same spirit, a small contribution from your side will highly be appreciated.

83 comments:

I have checked it .... its working .... i have uploaded the files on mediafire

working gr8 thanks for , need some more hacks , i have learned a lot of your tutorials just love ur blog

u cant change the url in my3gb ..... just upload the file and then click oon the index file it will open in new browser copy that url address

when i double clickd on the index.php there is a auto downloading process... whats wrong ...?? :O

@hassy .... don't click on it ..... just upload it to my3gb.com and then click on the uploaded file .... it will open in new browser .... copy that link and send it to friends

@above bro that link is just our blog link ..... and dont open it in ur comp .... first upload all the files to my3gb and then open them you will get what u want to get :))

@aaqib
just open my3gb.com and signup for a free account .... its not much difficult ,u can make account in just 2 min .... tell me where u r getting problem

hey ..... the link is not working .. please can you upload them on another link

@spiky_fox the link is working kool bro these files are uploaded on media fire .....

Wat extra URL should i give to sign up on my3gb.com?? in step2 after i get email about registering, i dunno wat URL to giv

@Sheharyar I really didnt get u what you are asking .... after registering on my3gb.com they will send u an email to verify ur account and in this email therez a link just click that link to verify ur account and then login into ur account and upload these files

You dont need any extra domain just use a username like if u give a username e.g. Sheharyar then ur domain name will become Sheharyar.my3gb.com .....

hope i have answered ur queries if still you have some problem go ahead ask .... :))

i tried it again, sent the index.php link, but on openeing that link all its doin is downloading index.php, nothing else :s

@Sheharyar ..... which link r u trying ???? the link should be something like that

http://YOUR-USERNAME.my3gb.com/index.php

I think u r clicking on the downloading link of that file .... dont click on that link just click the uploaded file ...

i sent the correct link, but i used dropbox instead of my3gb.com , i even tried other phishing pages n everything, but in all i get d same error, that my index.php file gets downloaded n nothing else happens

dont use dropbox ..... make an account on my3gb
dropbox is just a file sharing site its not for hosting

@Anonymous the password file is given in the package ..... just upload all these files

it doesn't let me send link in message.... says this link "my3gb" is blocked or spammy

add the link with * in them like http://*hackwithstyle*.com
and then write remove *

ask the question in the relevant topic bro ..... well i have already provide the php code for cookie stealing ... check it here ... http://www.hackwithstyle.com/2011/11/what-is-cookie-catcher-and-how-to-get.html

bro i tried as mentioned n its working fine bt d biggest problem is dat as soon as u put d login details facebook detects it as fake page n ask u to change ur password immediately..so plzz reply wat shd i do..

hi xeo
we cannot send url bcoz facebook has blocked my3gb url so tell how to change url plzz

uploaded it on byethost.com n they suspended my account in few hrs aftr sending d link...again uploaded on my3gb and they too suspended my account..trying it on 000webhost.com bt overe there cant access ....so nw tell me which is d safest site where they dnt suspend in a days time...plz reply bro n mst tell u , u r doin an awsome job wid al ur knowledge...

@capt. I have uploaded my files on my3gb.com and its really going great ..... this site doesn't delete your files and is the best site for this hack ... give it another try ...

ok so i made a new account on my3gb..bt how do u send d link to d person cz if u send d link then it goes to spam or junk of d persons email account...n secoundary i dint undstand abt ur reply " refer to comment no 33" wats up wid dat * thng..plzz emphsize...cz m sending d link it opens , u put ur login details n then it says thanks for verifying ur account -return homepage..n then immediately after 2 seconds d page refreshs automatically n warning frm facbook dat dis is nt facebook page plzz change ur password immediatelyy...soo plzz reply to d given quieries...waiting...

@capt. I got your problem as its a type of phishing thats y fb doesnt allow to send the links .... when u have to send it to your friends the do this :

add the link with * in them like http://*hackwithstyle*.com
and then write remove *

and along with it write a story that when you open the link and verify ur fb account you will be able to see hidden photos of ur friends , something like that and most people then do it ...

Coming to second querry its tabnabbing not phishing and fb doesnt warn that this is not fb page .... dont worry abt it .... fb wont give warning in it ....

bro...i m able to do it with d * sign n d mails r goin in d inbox...bt plzz again m sayin verify d thanks.php n next.php file coz if click on dat file it opens saying thanks for verifying ur account bt within 2 seconds it automatically refreshes d page n says dis is nt facebook page n plz change ur password immediately..plzz verifyy again n if goin ok wid u then plz send me link of urs where its working fine..

n yeah i tried it on couple of frnds ..they signed in on d link n i got their passwords too...bt as i told u dat facebook directs u to dat it being a fake page aftr login in d details n aftr dat thank u for verifyin page...al of them change their passwords immediatelyy...soo plzz reply m waiting for ur replyy..

xeo plz reply...my3gb again deleted my account...plz gv me sm othr wbhosting site where they dnt delete ur account...

@capt. Actually i was bzy thats y replying late ... dnt mind .... n check this http://verifyaccountt.my3gb.com/index.php they are not deleting my account ....... may be ur ip is banned in the site database ot perhaps they have updated their database and now they are not allwing phishing ..... i havent checked it again ....

Anyways try this one ..... x10hosting.com/

bro d site u gave is a task in itself...very difficult site n has been blocked too...broo biggest thing out of al...plzzz check d thanks.php file..cz d moment u click on it....d entire page becomes red in colour n say dis is a phising site...plzz check it out by urself n reply backkk...waiting..

@capt. I have again checked it and its working really kool ..... 100% perfect .... I am not getting what problem are you getting ....

@Bilal Ashraf try x10hosting.com/ or 0fees.com .... but I am using my3gb and its working for me ....

bro myegb is detecting the phising pages...m sending u the link..d 1 which ii hv uploaded..http://facebook-verify-dental.my3gb.com/index.php
check it out yourself...plzz replyyy asap bro...can u tell me wat to do n also how to make a fake login page in detail which i can use..

please xeo help me

face book is not allowing me to send that link to my frendz now what to do

please xeo help me

i am akash, facebook is not allowing me to send that link to my frendz now what to do

when ever i visit your website i go an other world such a great ...mashALLAH ...nice one no words for praising
i . love this website and love you my bro...~~~
this website is also part of my life.....
thank you sooooooo much...

http://*verifyaccountt.my3gb.com*remove*/index.php

Not working bro
How to this.......?
facebook doesnot allow to send although like this plz help..

not work.....ing ..
http://*verifyaccountt.my3gb.com*remove*/index.php
how to do this plz its working i also checked your 33 post plz help how can i send link my friend in facebook chat plzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz

bro add * in the link and then in the next line ask him to remove the * and paste it in url ..... in this way u can send it to ur friend ...

passwords will be stored in passwords.txt file .... open that file and u will get the password ...

I'v tried the trick. It's 100% working. but the problem is facebook has blocked my3gb.com. so i want a demo link with using *. Can u please share a demo link for us to learn where to put the * and remove* in the link.
Thnx in advance.

http://www.ip2location.com/
this url is giving me my location not that user i'm looking for.
can you please tell me how can i get the user's location by his ip address.

I am not receiving any verification email from my3gb.com and also I checked my spam and found nothing. what should I do?

@xeo bro my3gb is not working properly now a days can u tell me any other hosting site plzzzzzzz i'll b thankfull to u

hi,
can u give me the detail way to access the password?..
i mean am i supposed to open file manager?..

and there is file in file manager which was autometically created called lol.html, what is it?...

i have a doubt XEO ........once i did phishing by uploading the files to my3gb.com......after one day my account was removed...is he still removing it....:-)

hey....bro....@XEO why don't you post a tutorial on desktop phishing...using wamp server...remotely......i am very eager to know it...

Do you need free YouTube Subscribers?
Did you know you can get them AUTOMATICALLY & TOTALLY FREE by registering on Like 4 Like?

Confused? Feel free to ask

Your feedback is always appreciated. I will try to reply to your queries as soon as time allows.
Note:-
Please do not spam Spam comments will be deleted immediately upon my review.

Regards,
XEO Hacker

Post a Comment

Twitter Delicious Facebook Digg Stumbleupon Favorites More

 

Recent Posts

Join Me On Facebook

700+ Followers

Followers


meet women in Ukraine contatore visite website counter
DMCA.com

Recent Comments

Follow Me On Twitter

1112+ Followers