Most are under the illusion that there's this "hack" button you can press and you instantly get their password, however this is not the case.
Most newb's are put off by the fact that they have to keylog or phish their way into getting a password, and they resort to asking the "hackers".
But i'll provide an easy alternative.
This method is called Reverting, and you will be sending a form in to microsoft customer support to reset the password for your (or somebody elses) hotmail account.
For this method, it helps to know the person, even a little, but i'll still give you a step-by-step tut on how to find the information and fill out each part of the form.
NOTE: THIS TUTORIAL IS FOR EDUCATIONAL PURPOSES ONLY, I AM NOT RESPONSIBLE IN ANY WAY FOR HOW THIS INFORMATION IS USED, YOU USE IT AT YOUR OWN RISK. YOU MAY LEARN ALSO HOW TO GET YOUR OWN ACCOUNT BACK FROM THIS.
Step 1: go here:
https://support.live.com/eform.aspx?prod...mcs&scrx=1
Step 2: Give them your victims full name.
Now, if you do not know their first name, try the following things to find it.
First, try using these two sites, simply enter their email and hit return.
http://www.pipl.com/email
http://com.lullar.com
if you want more, google their hotmail account(s), for example, type into google:
"victimshotmail@hotmail.com"
Include the quotes, cause this searches for only the hotmail account.
If you gain any results, it will most likely be forums or if you're lucky, social networking sites, that they have filled out their info on.
Go through these searches, and look at every one, even make a .txt file in notepad pasting down all the info you can on them.
Once you're done, if you havnt got their last name, keep reading..if you have, goto step 3.
Presuming you dont yet have their last name, try going to social networking sites, like:
http://www.myspace.com
http://www.facebook.com
http://www.bebo.com
http://www.friendster.com
Or any others you can think of, and search for their hotmail account using the websites search feature.
if you get any results, you're in luck, most of the time people include alot of information on themselves in there. Follow any leads you can find on the info, and even ask them or their friends (look up a tutorial on social engineering info out of people first, it will help).
Now another thing you can do is use http://www.whois.com IF your slave has their own website.
If you dont have it by now, maybe you should find an easier target, or if you're desperate, use this technique to hack one of their rl best friends, and alot of the time they have their full name assigned to your victims hotmail address, in their addressbook.
Or, I sometimes just say "I'm pretty sure I only put in my first name at registration, I'm paranoid like that" or something along those lines... It's worked for me.
BTW: This is called d0xing, or "documenting", basically harvesting info on people, it's completely legal as long as you get all your info from the public domain (forums, social networking sites etc).
Step 3: The e-mail address for us to send a response:
Simple, give them your email address... could use a fake one if you're paranoid (one you got access too), but I don't see any risk.
Step 4: Primary e-mail address/member ID
associated with the account you are inquiring about:
Here you put in your victims email address (the one you're trying to hack). Then clickContinue.
Step 5: Date of birth.
You can simply give them the year, if you dont know any further then that..but if you want to be on the safe side, read step 2, and use those techniques to find their date of birth.
Step 6: Country
If you dont know their country, which you probably should, use their IP address which you will have in one of the next steps to find it, by using
http://www.ip-adress.com/ip_tracer/
Step 7: State
same deal, use their IP addy if you dont know it already
Step 8: ZIP or postal code
Same deal again, it's usually correct if you use the IP addy...just use http://www.ip-adress.com/ip_tracer/
and find their town/suburb or whatever, and google the ZIP code for it.
Step 9: The secret answer to your question
simply put "i dont remember"
Step 10: Your alternate email address
for this, you just put in the email address you're trying to hack, you dont need their alternate email address.
Step 11: Your IP Address
Okay so here's probably the toughest one, but it's still easy. (NOTE: It's very hard to revert an account unless you successfully complete this step)
There's alot of ways to get their IP, i'll give you the easy ones.
Email: Get them to send you an email somehow, it doesnt matter how, you can just send an email saying:
"hey, how are you?" and they'll probably reply. Once you have their email (dont use old emails, please, everybody uses dynamic IP's these days)
right click on it, and click "view source", you will see something like this:
...now you want to find "X-Originating-IP: [XX.XXX.XX.XX]" That is their IP address. If the email source is all jibberish and looks encrypted, try what one user suggested:
(09-24-2010 07:59 AM)TOMMIE Wrote: This is from Hotmail? Right? I get this too..
I forwarded these emails to my broadband providers base email (NOT Webmail), then selected each one and `Save as`, it will prompt you to save in .eml format - save to desktop, then right-click and open in Notepad. You will see detail then.
hth
Website: Go here http://www.syntaxmaster.info and register an account for free, it's real easy.
Now once you're registered, go to Software/Tools > IP Stealer; and then you can type in the URL you want your IP stealer to redirect to.. so just google or myspace or something will do. Now you'll see above that they give you your URL, you just send them there and it'll grab their IP, redirect them to google (or whatever site you choose), and then show their IP down at the bottom of the page.
I suggest using spam or http://www.doiop.com/ to shorten your URL and make it custom, you could make it something like:
http://www.doiop.com/profile-329479
And viola it'll look like a social networking site "Hey, I'm katie. :) I'm looking to meet new people and was wondering if you wanted to be friends? ^_^ This is my profile btw: <give fake link>"
Something like thaat. :P
MSN: if you can talk to them on msn, then you can get their IP that way too..there's two ways, either download a easy-to-use script, or do it manually with cmd,
i'll show you how to do it manually first.
Manually: Send them a file, or get them to send you a file.
"hey, i love that song, can you send me it?" or "omg, this is the funniest picture ever".
Before you start the transfer though, goto start > run (if you're using vista, just press the windows key) and type in cmd, and hit enter.
type in the following: netstat -n
and hit enter, it will show you a list of active connections to different IP's.
Remember or take a screenshot of those IP's, because once you start the transfer, type in netstat again while it's transferring and check for any new IP's, that is your victims IP.
With a script:
IF you have windows live messenger plus (probably the best WLM IMO), download this script:
http://rapidshare.com/files/133356881/IPGet_1.50.rar
It's called IP-Get, and will show you your current msn contacts IP addresses IF you're currently connected to them with a fileshare. It will also allow you to save the IP addresses, and look up their locations.
Here is a screenie of IP-get:
There are other ways, but surely, you should have been able to get their IP by now...if not, look up a tut on it, using the search feature.
Step 12: Your internet service provider
very easy to find, use their IP, either using the IP get script if you have it, orhttp://www.ip-adress.com/ip_tracer/
Step 13: The last date and time that you successfully signed in
Unless you know this as a fact, either take your best guess, say you dont remember, or yesterday.
Step 14: The names of any folders that you created in addition to the default folders
leave this blank, or say you dont know (unless you know this for a fact).
Step 15: Names of contacts in your hotmail address book
give them all the contacts you know are definately or most likely in there, including yourself, and even their other accounts (they might add themselves, everybody seems to). Also give them wilma@live.com and smarterchild@hotmail.com, as most people have them added.
Step 16: Subjects of any old mail that is in your inbox
okay just use common sense for this one, things to include are:
hey, how are you, RE:, FW:, admin, windows live, hotmail staff, recovery, registration, support, lol, password, comfirmation, noreply, delivery status notification (failure).
Also, if they are subscribed to any forums (like hackforums(but please dont hack other HF members :P)), social networking sites (like myspace, bebo) or online games (like RuneScape, WoW), then be sure to include them too.
Step 17: Names of contacts on your messenger contact list
If you happen to know any of their friends, this is where you put their display name...if you dont have them added, put their first names, and if you dont know them at all, just leave it blank, or say you dont remember.
Step 18: Your Messenger nickname
If you know it, put it in..if you dont, say "i cant remember it exactly" or leave it blank.
Step 19:
The rest you dont really need to worry about, except for in additional info, can put anything else that might make you sound more convincing..like:
"please do your best to recover my account, i dont want to go and have to add all my friends again, it'd be a great help if you got it back for me, thank you in advance."
obviously dont put exactly that, but you get the gist of it :)
Okay, i believe that is it, within 24 hours you will recieve an email from customer support, they will either give you a link to reset your (victims) password, or ask for you to send it again with more info, as an email reply..and in that case, you dont have much luck, cause they can just get your IP address from the email and know you're lying :) so try again, and hope you get a more gullible staff member. If you have firefox, click the spoiler.
I did give you a link to download earlier, here is a virus scan for you guys who arent sure.
Quote:File Info
Report generated: 1.7.2009 at 14.45.40 (GMT 1)
Filename: IPGet_1.50.plsc
File size: 721 KB
MD5 Hash: 081f4ed7f145689e1911b16fc49fa4b4
SHA1 Hash: 3B9348B972ACA7006F9E38951EE76AB632F54EF0
Self-Extract Archive: Nothing found
Binder Detector: Nothing found
Detection rate: 0 on 24
Detections
a-squared - -
Avira AntiVir - -
Avast - -
AVG - -
BitDefender - -
ClamAV - -
Comodo - -
Dr.Web - -
Ewido - -
F-PROT6 - -
G-Data - -
Ikarus T3 - -
Kaspersky - -
McAfee - -
Malware Hash Registry - -
NOD32 v3 - -
Norman - -
Panda - -
QuickHeal - -
Solo Antivirus - -
Sophos - -
TrendMicro - -
VBA32 - -
VirusBuster - -
Scan report generated by
NoVirusThanks.org
If you have any questions, ask here, do not PM me. I didn't rip any of this from other tuts, typed it up myself. Thanks for reading, I know it's long, I've reached the max character limit :(
FAQ:
Q: My target has moved location since he/she registered, do I put in old or new info?
A: Put in the information they registered with, the old information.
Q: I looked up where they live, there's atleast 20 post codes for that area! How do I know which one is theirs?
A: You'll most likely find they all start with the same two digits, if they do, it doesnt matter which one you pick all will work. Since they only go by the first two digits when validating the zip/postal code, you dont need to know their address or anything, you could even go by IP location.
Q: I dont know their age! What should I put in?
A: If you dont know their age, try 1992, that usually works for some reason.
Q: They wont reply to emails from me, I dont know how else to get their IP?
A: If you dont want to add them on MSN and use IP get or CMD, a way that has worked for me is using the site I showed you: http://www.reza24.com/ip and masking your link with a URL shortening site. Three sites I know of are:
* http://www.tiny url.com <<< I need to put a space in it, otherwise it's censored for obvious reasons.
* http://rickroll.it/ <<< dont worry, it's not a real rick-roll lol.
Or one somebody just showed me and it's worked like a treat:
* http://doiop.com/
The first one you could pretend is some kind of picture site, the second one you could say something like "omg dude check this out, this site makes free links that redirect to a rickroll! http://rickroll.it/custom-rickroll", but dont actually go there i'm not sure where that link leads to lol.
The third is great though, it could pass as a social networking site like myspace.
Q: Do any other webmails hosts like yahoo mail or Gmail use this? Can I use this method on there too?
A: They have revert forms too, but they log your IP when you submit it, so they will know you're not the owner of the account. Hotmail doesnt log your IP.
Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.
Share This :
0 comments:
Post a Comment