Way To Hackintosh

Top 10 Password Cracking tool

Admin Jixxi 0 Hacking tools, Password Creaking, Software, Top 10

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
1. Cainand Abel : The toppassword recovery toolfor Windows UNIX users 
often smuglyassert that the best freesecurity tools supporttheir 
platform first, andWindows ports are often</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
an afterthought. They are usually right, but Cain &Abel is a 
glaringexception. This Windows-only password recoverytool handles an 
enormousvariety of tasks. It can recover passwords bysniffing the 
network,cracking encryptedpasswords usingDictionary, Brute-Forceand 
Cryptanalysis attacks, recording VoIPconversations, decodingscrambled 
passwords,revealing passwordboxes, uncovering cachedpasswords and 
analyzing routing protocols</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
2. John theRipper : Apowerful, flexible, andfast multi-platformpassword 
hash cracker Johnthe Ripper is a fast password cracker,currently 
available formany flavors of Unix (11are officially supported,not 
counting differentarchitectures), DOS, Win32, BeOS, and OpenVMS. 
Itsprimary purpose is todetect weak Unixpasswords. It supportsseveral 
crypt(3) passwordhash types which are most commonly found onvarious Unix
 flavors, aswell as Kerberos AFS andWindows NT/2000/XP LMhashes</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
3. THC Hydra : A Fastnetwork authentication cracker which supportmany 
different services Whenyou need to bruteforce crack a 
remoteauthentication service,Hydra is often the tool of choice. It can 
performrapid dictionary attacksagainst more then 30protocols, including 
telnet,ftp, http, https, smb,several databases, and much more</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
4. Aircrack : Thefastestavailable WEP/WPAcracking tool Aircrack is a 
suiteof toolsfor 802.11a/b/g WEP and WPA cracking. It canrecover a 40 
through 512-bit WEP key once enoughencrypted packets have beengathered. 
It can alsoattack WPA 1 or 2 networks using advancedcryptographic 
methods orby brute force. The suiteincludes airodump (an 802.11packet 
captureprogram), aireplay (an 802.11 packet injectionprogram), aircrack 
(staticWEP and WPA-PSKcracking), and airdecap(decrypts WEP/WPAcapture 
files)</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
5. L0phtcrack : Windowspassword auditing andrecovery 
applicationL0phtCrack, also knownas LC5, attempts to crackWindows 
passwords from hashes which it canobtain (given properaccess) from 
stand-aloneWindows NT/2000workstations, networkedservers, primary domain
 controllers, or ActiveDirectory. In some cases itcan sniff the hashes 
off thewire. It also hasnumerous methods ofgenerating password guesses 
(dictionary, bruteforce, etc). LC5 wasdiscontinued by Symantec in2006, 
but you can stillfind the LC5 installerfloating around. The free trial 
only lasts 15 days,and Symantec won't sellyou a key, so you'll 
eitherhave to cease using it orfind a key generator.Since it is no 
longer maintained, you areprobably better offtrying Cain and Abel, John 
theRipper, or Ophcrackinstead.</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
6. Airsnort : 802.11WEP Encryption Cracking ToolAirSnort is a wireless 
LAN(WLAN) tool thatrecovers encryption keys.It was developed by theShmoo
 Group and operates by passivelymonitoring transmissions,computing the 
encryptionkey when enoughpackets have beengathered. You may also be 
interested in the similarAircrack.</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
7. SolarWinds : Aplethoraof network discovery/monitoring/attack 
toolsSolarWinds has created and sells dozens of special-purpose tools 
targeted atsystems administrators.Security-related toolsinclude many 
networkdiscovery scanners, an SNMP brute-force cracker,router 
passworddecryption, a TCPconnection reset program,one of the fastest and
 easiestrouter config download/uploadapplications available andmore.</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
8. Pwdump : A windowpassword recovery toolPwdump is able to extractNTLM 
and LanMan hashes from a Windows target,regardless of whetherSyskey is 
enabled. It isalso capable of displayingpassword histories if theyare 
available. It outputs the data in L0phtcrack-compatible form, and 
canwrite to an output file.</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
9.RainbowCrack : AnInnovative PasswordHash Cracker The RainbowCrack tool
 isa hash cracker that makesuse of a large-scale time-memory trade-off. 
Atraditional brute forcecracker tries all possible plaintexts one by 
one,which can be timeconsuming for complexpasswords.RainbowCrack uses 
atime-memory trade-off to do all the cracking-timecomputation in 
advanceand store the results in so-called "rainbow tables". Itdoes take a
 long time toprecompute the tables but RainbowCrack can behundreds of 
times fasterthan a brute force crackeronce the precomputationis 
finished.</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span><div style="background-color: white; color: #333333; line-height: 16px; padding: 0px; white-space: pre-wrap;">
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">
</span></span></div>
<span style="font-family: Arial,Helvetica,sans-serif;"><span style="font-size: small;">

10 Brutus : Anetwork brute-force authenticationcracker This 
Windows-onlycracker bangs againstnetwork services ofremote systems 
trying toguess passwords by using a dictionary and permutationsthereof. 
Itsupports HTTP, POP3, FTP,SMB, TELNET, IMAP, NTP,and more. No source 
codeis available. UNIX users should take a look at THCHydra.</span></span></div>

Top 10 Password Cracking tool

1. Cainand Abel : The toppassword recovery toolfor Windows UNIX users often smuglyassert that the best freesecurity tools supporttheir ...

Syrian Electronic Army Hacked The True Caller Database

Admin Jixxi 0 hacked, news, Truecaller

<div dir="ltr" style="text-align: left;" trbidi="on">
Once again Syrian Electronic Army back on the news. After hacking the 
major organisation twitter accounts there was no news for hacking from 
SEA. But now the hackers of SEA have breached the security of the the 
world’s largest collaborative phone directory "True Caller"<br />
<br />
As on there twitter accounts they wrote<br />
<blockquote class="tr_bq">
“Sorry @Truecaller, we needed your database, thank you for it,” the hackers <a href="https://twitter.com/Official_SEA12/status/357298063167070211">wrote</a> on Twitter.</blockquote>
 As per the <a href="http://www.ehackingnews.com/2013/07/truecaller-database-hacked-by-syrian.html">post of EHN</a>,
 it is being stated that hackers have breached the True Caller 
security by exploiting a vulnerability in the company’s outdated 
WordPress site.<br />
Hackers have stolen data from the 7 database, including the main data 
base which is of size 450 GB.  The stolen data contains over 1 million 
Facebook, Twitter, LinkedIn and Gmail accounts.<br />
<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhnVHweaF6YuW8tViVSU_PBpDhInMLk1EdHGOG2wdE97kIYjbcstWmcPr57CHVXXNLlj18WoTU4fEllRKGaMzHXc1rX3Ttk3cV61nXf3UqeZDWlRNXs5455-wiZYVzewm3_gCl5zM4jXq9/s1600/Syrian-electronic-army-hacked-truecaller-database.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="372" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhnVHweaF6YuW8tViVSU_PBpDhInMLk1EdHGOG2wdE97kIYjbcstWmcPr57CHVXXNLlj18WoTU4fEllRKGaMzHXc1rX3Ttk3cV61nXf3UqeZDWlRNXs5455-wiZYVzewm3_gCl5zM4jXq9/s640/Syrian-electronic-army-hacked-truecaller-database.jpg" width="640" /></a></div>
True caller have not notified any kind of the announcement for this 
incident, but they have shut the website down, with the message, "We are
 doing some upgrades. Thank you for your patience." </div>

Syrian Electronic Army Hacked The True Caller Database

Once again Syrian Electronic Army back on the news. After hacking the major organisation twitter accounts there was no news for hacking fr...

WiFiSlax v4.3 Final (WiFi Hack BootCD) | 551 Mb

Admin Jixxi 0 Hack a WiFi Network In 8 Easy Steps, Hacking tools, Software, WIFI HACKING, wireless software

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="color: #333333; font-family: 'Segoe UI', Calibri, 'Myriad Pro', Myriad, 'Trebuchet MS', Helvetica, Arial, sans-serif; line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding: 0px; text-align: center;">
<b><span style="font-size: medium;">WiFiSlax v4.3 Final (WiFi Hack BootCD) | 551 Mb</span></b></div>
<div style="color: #333333; font-family: 'Segoe UI', Calibri, 'Myriad Pro', Myriad, 'Trebuchet MS', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding: 0px;">
WifiSlax is a type of Slax OS made exclusively for wireless hacking. It 
comes with a bunch of wireless tools preloaded into it. These include 
Aircrack, Airsnort, kismet, madwifi drivers and many more…<br />
Features<br />
- Focused on Wireless Audit<br />
- Latest tools for Wireless Audit<br />
- Drivers of the most common chipsets in our laptops (innovating with packet injection support)<br />
- Ease of use for the uninitiated in GNU/Linux<br />
- Launchers and GUI tools<br />
- GNU/Linux distribution<br />
- Debian Stable based<br />
- Nowadays, not only Wireless Security: /NETWORK VULNERABILITY & 
PENTESTING /BLUETOOTH /RFID /IRDA /SERIAL PORT /CRACKING /REVERSING 
/FORENSIC<br />
- Compatible with other system<br />
- GRUB as boot loader<br />
- Live CD/DVD/USB<br />
- Kernel 2.6.32.5 SMP<br />
- KDE 3.5.10|KDE 4? Compiz Fusion included Drivers ATI / Drivers NVIDIA<br />
- Automount new drives RO/RW over NTFS, HFS and NAS<br />
- Automount new devices Wireless devices / mouse / etc<br />
- Ease of use regardless of driver<br />
- Launch GUI: Broadcom bcm43xx Intel IPW2200, IPW3945, IPW4965 Ralink 
rt2570, rt73 Prism, Prism2 Realtek rt8180/rt8185, rt8187 Atheros mode 
managed, monitor, master<br />
- Problems with your chipset? usbview, lsusb, lspci, dmesg, etc…<br />
- Audit & security tools<br />
- Wireless chipsets for auditing & pentesting<br />
- Wireless tools Kismet, machanger, aircrack-ng, aircrack-ptw, etc<br />
- Cryptanalysis tools (WEP/WPA/WPA2, cookie entropy, etc)</div>
<div style="color: #333333; font-family: 'Segoe UI', Calibri, 'Myriad Pro', Myriad, 'Trebuchet MS', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding: 0px;">
Basic Instructions:<br />
1)Boot from cd<br />
2)Get the wep key<br />
3)Write it down<br />
4)Reboot into windows<br />
5)Connect using wep key.</div>
<div style="color: #333333; font-family: 'Segoe UI', Calibri, 'Myriad Pro', Myriad, 'Trebuchet MS', Helvetica, Arial, sans-serif; line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding: 0px;">
<b><span style="font-size: medium;">Download Links:</span></b></div>
<script src="http://ro2.biz/ad_js.php?zone=2820&w=468&h=60" type="text/javascript"></script>

WiFiSlax v4.3 Final (WiFi Hack BootCD) | 551 Mb

WiFiSlax v4.3 Final (WiFi Hack BootCD) | 551 Mb WifiSlax is a type of Slax OS made exclusively for wireless hacking. It comes with a bu...

Vodafone TCP VPN Config.Trick working in many States - June 2013

Admin Jixxi 0 Airtel hack (only for india), Vodafone 3G hack

<div dir="ltr" style="text-align: left;" trbidi="on">
After a short interval we are sharing a Working TCP config for 
Vodafone. This config is working all over India. This is completely new 
Un-shared VPN config. Speed is much better as compared to other TCP 
configs.    <br />Vodafone VPN Trick which are virally scattered over the 
web. But Not all are working and some are locked with boring surveys.But
 we will provide this working TCP config without any survey.  <br />
<br />
  <h5>
Features Of Vodafone TCP VPN Config.</h5>
<ul>
<li>No balance deduction </li>
<li>No disconnection issues </li>
<li>No sim blocking </li>
<li>No speed capping </li>
<li>Downloading Speed 300-500 kbps </li>
<li>No Registration Required</li>
</ul>
<h5>
How To Configure Vodafone TCP VPN Config. ?</h5>
User’s who are using our VPN Tricks are much familiar with the Steps, for the newbies, Please follow the steps properly.  <ul>
<li>First Download Vodafone TCP Config. from below link </li>
<li><a href="http://www.mediafire.com/?1asxcb9pvl85tv7">Download Vodafone TCP Config.</a> (Password : vmtricks.blogspot.com)</li>
<li>Extract it, and Paste it into NMD VPN Config folder </li>
<li>If you do not have NMD VPN, Then download NMD VPN </li>
<li>Connect with apn Portalnmms </li>
<li>Run NMD VPN as Administrator and connect with given Configs </li>
<li>Connection will be established instantly.</li>
</ul>
</div>

Vodafone TCP VPN Config.Trick working in many States - June 2013

After a short interval we are sharing a Working TCP config for Vodafone. This config is working all over India. This is completely new Un...

How To Open/Fix Blocked Adf.ly Links in India ?

Admin Jixxi 0 news, Tricks

<div dir="ltr" style="text-align: left;" trbidi="on">
Probably you may be noticed that the Adf.ly has blocked in India 2 
days ago.Adf.ly site which allows you to shorten your URL link and on 
every visit of your short Adf.ly link you get earned, because its shows 
advertisement on every shortened link of Adf.ly.<br />
So after the 
blocking of the same so many users were annoyed and many of our visitors
 and users requested us to provide them a powerful trick to open the 
blocked Adf.ly in India inorder to open the download links.Hence we are 
here to provide our visitors the powerful trick to open the blocked 
Adf.ly.Please follow the simple and powerful trick:<br />
<br />
<ul>
<li>First of all collect the download link which is shortened by Adf.ly. </li>
</ul>
       Which may be like this : <br />
<ul>
<li><b><span style="font-size: small;">http://adf.ly/abcd </span></b></li>
<li>Then Add <span style="font-size: small;">“<span style="color: red;">v2</span>.”</span> in the links … as shown below: </li>
<li><b><span style="font-size: small;">http://<span style="color: red;">v2</span>.adf.ly/abcd</span></b> </li>
</ul>
</div>

How To Open/Fix Blocked Adf.ly Links in India ?

Probably you may be noticed that the Adf.ly has blocked in India 2 days ago.Adf.ly site which allows you to shorten your URL link and on ...

Hacking Facebook Account with just a text message

Admin Jixxi 4 facebook hacking, Hacking tools, How to hack Facebook (All Methods)

<div style="text-align: justify;">
Can you ever imagine that a single text message is enough to hack any Facebook 
account without user interaction or without using any other malicious stuff like 
Trojans, phishing, keylogger 
etc. ?</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Today we are going to explain you that how a UK 
based Security Researcher, "<b><i>fin1te</i></b>" is able to hack any Facebook 
account within a minute by doing one SMS.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Because 90% of us are Facebook user too, so we 
know that there is an option of linking your mobile number with your account, 
which allows you to receive Facebook account updates via SMS directly to your 
mobile and also you can login into your account using that linked number rather 
than your email address or username.</div>
<div style="text-align: justify;">
According to hacker, the loophole was in phone number linking 
process, or in technical terms, at 
file <i>/ajax/settings/mobile/confirm_phone.php</i></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
This particular webpage works in background 
when user submit his phone number and verification code, sent by Facebook to 
mobile. That submission form having two main parameters, one for 
<b><i>verification code</i></b>, and second is <b><i>profile_id</i></b>, which 
is the account to link the number to.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOYKUYaxuZKp9_Bm5j-kM_IgpurbvjY3FYFlQGgxONbCtLxtesayjNy3KcVdtlXmXqrv3ahdV-x_zG0jbf5nmcpnSOBhUkDLkdz6tcJD9TY0JzwNeAf9Dz0ttj6roI1PnKX6HqnZQZIfph/s1350/Hacking+Facebook+Account+with+just+a+text+message.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="146" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOYKUYaxuZKp9_Bm5j-kM_IgpurbvjY3FYFlQGgxONbCtLxtesayjNy3KcVdtlXmXqrv3ahdV-x_zG0jbf5nmcpnSOBhUkDLkdz6tcJD9TY0JzwNeAf9Dz0ttj6roI1PnKX6HqnZQZIfph/s640/Hacking+Facebook+Account+with+just+a+text+message.png" width="640" /></a></div>
<div style="text-align: justify;">
<div style="text-align: justify;">
<b>As attacker, follow these steps to execute 
hack:</b> </div>
<div style="text-align: justify;">
<ol>
<li>Change value of <b><i>profile_id</i></b> to the 
Victim's <b><i>profile_id</i></b> value by tampering the parameters.</li>
<li>Send the letter <b>F</b> to 32665, which is Facebook’s SMS shortcode in the 
UK. You will receive an 8 character verification code back</li>
</ol>
 </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEfT1aTuLM_FId6amIYMuDnV08VUmc9PrnktpLpqdQY4TFd4cf32CunrYbDTBWzq5aG4g7tlJGyLfHzdhdL0o8vD4SXmjPp3z5_Km6AXrzg0r_WoQKbGpZMx5loV8vQK5xfNzXP3b8tASS/s1600/facebook-sms-3-1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEfT1aTuLM_FId6amIYMuDnV08VUmc9PrnktpLpqdQY4TFd4cf32CunrYbDTBWzq5aG4g7tlJGyLfHzdhdL0o8vD4SXmjPp3z5_Km6AXrzg0r_WoQKbGpZMx5loV8vQK5xfNzXP3b8tASS/s1600/facebook-sms-3-1.png" /></a></div>
<div style="text-align: justify;">
 
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
3.Enter that code in the box or as <b><i>confirmation_code</i></b> parameter 
value and Submit the form.</div>
<div style="text-align: justify;">
 </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggQzkWXJ6i7BfXymVcwArOX_aPXBQDatXu601m-QZNXU-lkbmmn8NUvtFjVzQHRB3ap2Vs__dc7GMJcRunVFIaCH5la-q0izWRA6KCr5sAXvilnNJfFGeJ2ddYihBvUgb49bEYICCrLtq7/s1136/facebook-sms-4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggQzkWXJ6i7BfXymVcwArOX_aPXBQDatXu601m-QZNXU-lkbmmn8NUvtFjVzQHRB3ap2Vs__dc7GMJcRunVFIaCH5la-q0izWRA6KCr5sAXvilnNJfFGeJ2ddYihBvUgb49bEYICCrLtq7/s1600/facebook-sms-4.jpg" /></a></div>
<div style="text-align: justify;">
 
<div id="aim23465796534476246168">
<div dir="ltr" style="text-align: left;">
<div style="text-align: justify;">
<div>
<div class="separator" style="clear: both; text-align: justify;">
Facebook will 
accept that confirmation code and attacker's mobile number will be linked to 
victim's Facebook profile.</div>
<div class="separator" style="clear: both; text-align: justify;">
<br /></div>
</div>
<div>
In next step hacker just need to go to Forgot password option and initiate 
the password reset request against of victim's account.</div>
<div>
<br /></div>
<div>
Attacker now can get password recovery code to his own mobile number which 
is linked to victim's account using above steps. Enter the code and Reset the 
password!</div>
<div>
<br /></div>
<div>
Facebook no longer accepting the profile_id parameter from the user end 
after receiving the bug report from the hacker.</div>
<div>
<br /></div>
<div>
In return, Facebook paying $20,000 to <b><i>fin1te</i></b> as <a href="http://www.google.com/cse?cx=017931741230951650006%3Apksj3nwgyw4&q=Bug+Bounty&ie=ISO-8859-1&sa=Search&siteurl=thehackernews.com%2F&ref=&ss=31772j1005907376j5#gsc.tab=0&gsc.q=Bug%20Bounty&gsc.page=1" rel="nofollow">Bug Bounty</a>.</div>
</div>
</div>
</div>
</div>
</div>
</div>