Hack Like a Pro: How to Hack Facebook (Facebook Password Extractor) « Null Byte :: WonderHowTo

Welcome back, my novice hackers!As we saw inmy first tutorialonFacebook hacking, it is not a simple task. However, with the right skills and tools, as well as persistence and ingenuity, nothing is beyond our capabilities.One of the cardinal rules of hacking is: "If I can get physical access to the computer... GAME OVER!" This means that if I were given even just a few moments to the machine itself, I can hack anything I want from that computer—including Facebook passwords.I recognize that not all of you are technically savvy, though, that doesn't mean you can't be withsome hard work. So this Facebook hack is for those of you without either the technical savvy or the work ethic to become so. All you need is a moment or two of unfettered physical access to the target's computer and you can easily have their Facebook password.Remember Me?This hack relies upon the fact that most of us want websites to remember us when we return. We don't want to put in our username and password every time we want to access the site, so we tell the browser to "Remember me." In that way, we don't need to re-authenticate and provide our password, our system simply remembers it and provides it to the website.Of course, those passwords must be stored somewhere on our computer. The key is to know where those passwords are stored and how to crack the hashed passwords when we find them. For instance, Mozilla stores the users passwords at:c:/Users/Username/AppData/Local/Mozilla/Firefox/Profiles/**.default/cache2/entriesAs you can see in the screenshot below, I have displayed that directory and password hashes from a Windows 7 computer running Firefox 36. These are all the saved passwords from various websites that Firefox has stored.Note that the location of these passwords is in different places for each browser and sometimes in different places on different operating systems with the same browser. Look for more on this subject in myDigital Forensicsseries in the near future.Elcomsoft's Facebook Password Extraction ToolFortunately for us, there is a company in Russia named Elcomsoft.This company employs first-rate cryptographers and they develop and sell software to crack various password encryption schemes. (As a side note, a cryptographer from Elcomsoft was the first person arrested and prosecuted under the DCMA when he came to the U.S. for a conference. He was eventually acquitted.)Their software is listed as digital forensic tools, but they can just as easily be used for hacking purposes. One of their tools was used forthe iCloud hackthat revealed nude photos of Jennifer Lawrence and other Hollywood stars in August 2014.Elcomsoft developed a Windows tool named Facebook Password Extractor (FPE, for short) that extracts the user's Facebook password from its location on the user's system (the user must have used the "Remember me" feature) and then cracks it. Of course, we need physical access to the system to do this in most cases. Alternatively, if we can hack their system, we could upload this tool to the target system and then use itorwe could simply download the user's browser password file and use this tool locally on our system.You can download this free tool fromElcomsoft's website, which officially supports the following web browsers (though it may work on newer versions).Microsoft Internet Explorer (up to IE9)Mozilla Firefox (up to Firefox 4)Apple Safari (up to Safari 5)Opera (up to Opera 11)Google Chrome (up to Chrome 11)The process of using this tool is almost idiot-proof. (Almost a requirement for Facebook hacking, wouldn't you agree?) You simply install it on the system whose Facebook password you want to extract and it does everything else.One of the drawbacks to using this tool is that Elcomsoft released it back in 2011 and it has not been updated since. Maybe we should make this a Python project for the Null Byte community in the near future?Look for more onFacebook hackingand developing the skills and arts of a professional hacker here in the near future, my novice hackers!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHow To:Get Your Hacked Facebook Account Back.News:New iWork Update Lets You Unlock Password-Protected Documents with Touch IDHow To:4 Ways to Crack a Facebook Password & How to Protect Yourself from ThemHack Like a Pro:How to Get Facebook Credentials Without Hacking FacebookHow To:Disable iOS 12's Annoying Password Creation Feature on Your iPhoneHow To:Easily See Passwords for Wi-Fi Networks You've Connected Your Android Device ToHack Like a Pro:How to Hack Facebook (Same-Origin Policy)How To:Dashlane & LastPass Can Now Automatically Strengthen All of Your Weak PasswordsNews:You Can Now Save Your Live Instagram VideosHow To:Disable Password Prompts When Downloading Free Apps in the Mac App StoreHow To:Make Siri Show Your Account Passwords to You Quickly in iOS 12How To:Chat with Friends on Messenger Without a Facebook AccountThe Clone Wars:The Russians Flirt with Instagram & Fake Follower Vending MachinesHow To:Protect Yourself from the Biggest Jailbreak Hack in HistoryHow To:Delete Your Facebook Account & Scrub Your DataInstagram 101:How to Break 1,000 Instagram Followers by Linking Your Other Social Media AccountsHow To:Freeze a Facebook account with Facebook FreezerHow To:Facebook Generated Temporary Password to Login App or Website Through FacebookHow To:Secure Your Instagram Account by Adding 2-Factor Authentication & Managing Privacy SettingsHow To:Hack Any Account That Has Recovery via Phone Option Enabled (SMS) On Android:How To:Hide All of the Social Numbers on Your Facebook Page with the DemetricatorHow To:Facebook Freezer with crack!!News:iOS 10 Will Be Released on September 13, but the Gold Master Is Available NowHow To:Set Your Android to Atomic Time for a Perfectly Synced ClockHow To:Create, AutoFill & Store Strong Passwords Automatically for Websites & Apps in iOS 12How To:The Official Google+ Insider's Guide IndexHow To:Really Connect Your Words with Friends Mobile Account to FacebookSocial Engineering, Part 2:Hacking a Friend's Facebook PasswordNews:Should district be allowed to demand middle-schooler's Facebook password?News:Student Sentenced to 8mo. in Jail for Hacking FacebookNews:Bricked iPad Pros, Error 56, & How to FixNews:Facebook Messenger Brings 1,500 Diverse Emoji to Its App