How To Hack Facebook By Social Engineering Attack

This video is specially for educational purpose only. I'm not responsible for your any illegal activity. Thanks!

 Social Engineering Attack

Phishing is the fraudulent attempt to obtain sensitive information such as usernames, passwords, and credit card details (and money), often for malicious reasons, by disguising as a trustworthy entity in an electronic communication. The purpose of this video tutorial is to show you How hackers hacked any thing by Social Engineering Attack.

Phishing is a cybercrime in which a target or targets are contacted by email, telephone or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data such as personally identifiable information, banking and credit card details, and passwords. The information is then used to access important accounts and can result in identity theft and financial loss.

Kali Linux has many tools for doing social engineering attacks. Setoolkit is the most powerful tool in Kali Linux to do a social engineering attacks over the same and different networks. 

Social Engineering over the same network requires the local IP address of your system just like this one 192.168.1.2. Now how you can get your local IP address from your system. To find local IP address just open up your terminal in Linux distribution:

Type: ifconfig wlan0 (if you are using WiFi)
Type: ifconfig eth0 (if you are using eth0)
Type: ifconfig (It display all information about your network)

Now you've another thing to do is that you just have to clone a web page you wanna clone like Facebook, g-mail, twitter etc. Similarly, If you wanna clone a facebook page so for this you just have to type www.facebook.com over your system's terminal for cloning a login page for Social Engineering attack.Still If you don't know how to do that so don't be worry, I did all the process practically in the below just go down and watch it!

Download Video Lab Example Code:

Download Sample Code:

CC Labs GitHub

//Underflow Example Code: 

//Can you bypass the restriction? 

//--------------------------------------------

 pragma solidity ^0.5.12;

contract Underflow{
     mapping (address =>uint) balances;

     function contribute() public payable{
          balances[msg.sender] = msg.value;  
     }

     function getBalance() view public returns (uint){
          return balances[msg.sender];     
     }

     function transfer(address _reciever, uint _value) public payable{
         require(balances[msg.sender] - _value >= 5);
         balances[msg.sender] = balances[msg.sender] - _value;  

         balances[_reciever] = balances[_reciever] + _value;
     }
    

}

This next video walks through exploiting the code above, preferably hand coded by you into the remix environment. As the best way to learn is to code it yourself and understand each piece:

 

Conclusion: 

We covered a lot of information at this point and the video series playlist associated with this blog series has additional information and walk throughs. Also other videos as always will be added to this playlist including fixing integer overflows in the code and attacking an actual live Decentralized Blockchain Application. So check out those videos as they are dropped and the current ones, sit back and watch and re-enforce the concepts you learned in this blog and in the previous lab. This is an example from a full set of labs as part of a more comprehensive exploitation course we have been working on.

Related articles

1. Pentest Firewall
2. Pentest Book
3. Pentest Security
4. Pentest Dns
5. Pentestbox
6. Pentest Online Course
7. Pentest Network
8. Hacking Forums
9. Pentest Dns
10. Pentest Red Team
11. Pentest Report Generator
12. Pentestmonkey Cheat Sheet
13. Pentest Linux
14. Pentesterlab
15. Hacking Lab

BASICS OF METASPLOIT – BASIC COMMANDS OF METASPLOIT

Metasploit is an advanced hacking tool that comes itself with a complete lack of advanced penetration testing tools. Penetration testers and hackers are taking so much advantage of this tool. It's a complete hack pack for a hacker that he can play almost any attack with it. Here I am going to discuss the basics of Metasploit. I am not covering attacks in this article, as I am just making sure to share the basics of Metasploit and basic commands of Metasploit. So, we can get back to cover attacks of Metasploit in the next articles.

BASICS OF METASPLOIT

The Metasploit framework has three types of working environments.

1. msfconsole
2. msfcli interface
3. msfweb interface

However, the most preferred and used is the 'msfconsole'. It's a very efficient command-line interface that has its own set of commands and system's working environment.

First of all, it's most important to know and understand all the useful commands of Metasploit that are going to be used.

BASIC COMMANDS OF METASPLOIT

Metasploit have a huge number of command that we can use in different type of attacks, but I am just going to share the most used and useful commands here that a beginner can easily understand and follow 'em.

• help (It will give the basic commands you need to launch an exploit.
• search (Finds out the keywords in the selected attack method).
• show exploits (Shows list of an available exploit in the selected option).
• show payloads (It lists all the payloads available).
• show options (It helps you to know all the options if you might have forgotten one).
• info (This is used to get information about any exploit or payload).
• use (It tells Metasploit to use the exploit with the specified name).
• set RHOST (Sets the address of specified remote host).
• set RPORT (Sets up a port that connects to on the remote host).
• set PAYLOAD (It sets the payload that gives you a shell when a service is exploited).
• set LPORT (Sets the port number that the payload will open on the server when an exploit is exploited).
• exploit  (It actually exploits the service).
• rexploit (Reloads your exploit code and then executes the exploit without restarting the console).

These are the most used Metasploit commands which come in handy in most of the situations during any sort of attack. You must give all the commands a try and understand 'em how it works and then move to the next part of designing an attack.

Related posts

1. Hacker Forum
2. Hacker Google
3. Hacking Wifi
4. Pentest Dns
5. Pentest Wordpress
6. Pentest Tools Github
7. Hacking Websites
8. Hackerrank
9. Hacking Youtube
10. Hacker Wifi Password
11. Pentest Os
12. Hacking Browser
13. Hacking Device
14. Hacking Typer
15. Pentest Tutorial
16. Pentest Questions
17. Hacking Growth
18. Pentest+ Vs Ceh
19. Hackerrank
20. Pentest Book