EH-Net

Ethical Hacking Discussions and Related Certifications => Other => Topic started by: jdgonzales on September 24, 2008, 11:33:44 PM



Title: email password hacking
Post by: jdgonzales on September 24, 2008, 11:33:44 PM
Hello Again Guys,

I have been doing a lot of research for my class on how to conduct email hacking. I want to know if it is true that there are applications that can be used to crack the password of email accounts in yahoo, aol, gmail and so on. I have seen some demonstration over YouTube  :o. I want to know from you guys if this is true. Are there anyways for this to be done? Let's say we can email a server from the Yahoo side to give us a password? Are there any software involve? Over the network we can use Cain and Abel to listen for this password. But in the wild (Internet) is it still possible to grab this accounts with or without any tools?

Thanks again in Advance
JoGo


Title: Re: email password hacking
Post by: Kev on September 24, 2008, 11:55:49 PM
Sorry, but it cant be done with the methods you mentioned.


Title: Re: email password hacking
Post by: jason on September 24, 2008, 11:59:49 PM
An excellent example of email hacking was in the news recently. You might look at that.


Title: Re: email password hacking
Post by: jdgonzales on September 25, 2008, 12:01:01 AM
Ok. I was just doing some more research and I stumbled across a website that says that you need to email a specific email address that would reset the password. Thanks for the Advice

JoGo


Title: Re: email password hacking
Post by: jdgonzales on September 25, 2008, 12:03:06 AM
Yeah, I saw that one. I think the person was a public figure that is why it is easy to gather information about her. But what if an ordinary user? Would that still be possible? Is there a way to trick the mail server into actually providing you the password?

Thanks and Regards

JoGo


Title: Re: email password hacking
Post by: Kev on September 25, 2008, 12:30:03 AM
Is there a way to trick the mail server into actually providing you the password?

Nope. I love urban myths.


Title: Re: email password hacking
Post by: xXxKrisxXx on September 25, 2008, 12:55:07 AM
I want to know if it is true that there are applications that can be used to crack the password of email accounts in yahoo, aol, gmail and so on. I have seen some demonstration over YouTube  :o. I want to know from you guys if this is true. Are there anyways for this to be done? Let's say we can email a server from the Yahoo side to give us a password? Are there any software involve?

Coming from a side where I spent time in the Anti-Yahoo arena, I can say that there are programs known as NCC and Proxy Crackers. NCC Using Yahoo Servers to crack the passwords. I have also used an aim recovery tool to recovery my -coughz- password, so your question regarding are their applications out there to help obtain passwords from Free E-Mail services such as Aim, Msn, Yahoo, Etc, I've got to say yes there is. Don't know if the admins approve or not but if they do, I can post a couple links to some well known sites that offer Yahoo! Password Recovery Tools?


Title: Re: email password hacking
Post by: Kev on September 25, 2008, 01:00:55 AM
LOL, yes you should do that.

Its true that in the past Yahoo and a number of others were subject to some interesting vulnerabilities including some simple SQL attacks, things have now changed.  I dont know why but hacking email accounts has always been the target for every newbie in hacking.  They see it as such a juicy target. Because of this, so much misinformation gets spread around to take advantage of this. Every hacker forum or IRC channel is filled with requests about teaching how to hack emails. Usually I think they just want to freak out their friends.  I am so jaded with it that if anyone comes to a forum now and asks how to hack emails I automatically have a question mark. Although it is a legitimate question because we do need to be concerned if such a thing is possible.  In a pentest hacking emails is almost never allowed in my experience, but if it is it can be a bonus.  In reality hacking email is best done with social engineering, keylogging and capturing sessions.  If you see a link on your favorite forum that sells a book about the  untold methods of hacking emails or a special program, just laugh and save your money! 


Title: Re: email password hacking
Post by: xXxKrisxXx on September 25, 2008, 01:20:49 AM
As for sites with Yahoo Password Recovery Tools, you may want to look into:

www.dark-assault.com

www.blackwidow-softbytes.com

www.Voodowares.com

www.Boon-Dog.com

I have other links as well, but these sites are PHP and have Supporters section where you can go to alternate Anti-Yahoo! Related sites that obtain similar tools, etc so it's unnecessary to post all the one's I know. After all, don't want to pile this thread up with about 70+ links. I've heard similar things too Kev. Enjoy guys.


Title: Re: email password hacking
Post by: Kev on September 25, 2008, 01:32:27 AM
Awesome graphics as far as websites goes. Okay, if you can hack this simple email with one of those tools I will pay the money I disclosed in this email at knvtu1055@yahoo.com.  Lets test it.


Title: Re: email password hacking
Post by: Kev on September 25, 2008, 01:44:26 AM
I am serious and I will pay the amount of money I disclosed in that email! We have thousands of viewers here.  If you can hack my email with any of those tools I will gladly pay you the amount I mentioned plus 10% of all my contracts in the next 2 years.  Please believe me that's not bad money and way better than Vegas!  I even put a wimpy password on it , lol!


Title: Re: email password hacking
Post by: jdgonzales on September 25, 2008, 02:42:00 AM
Can I ask what tools can I specifically use crack a yahoo password?  ;D Thanks


Title: Re: email password hacking
Post by: xXxKrisxXx on September 25, 2008, 02:56:06 AM
This thread seems to be turning into UnEthicalHacker.net. LMFAO.
I provided the links to where the toys are at. I don't want to piss off the admin. I also highly suggest not using these tools for illegal use.


Title: Re: email password hacking
Post by: Kev on September 25, 2008, 03:09:29 AM
Kris and I are are talking about how to make this equal. I am currently  trying to make this fair. I am thinking I will make it  2 levels on this. Hey I want you to crack this. If you can you will be safe as as far as who you are, I swear to god!   CRACK ME BRO!  We need to know! That's  it. 


Title: Re: email password hacking
Post by: jimbob on September 25, 2008, 07:41:07 AM
I'd like to claim my $250.

Jimbob


Title: Re: email password hacking
Post by: sgt_mjc on September 25, 2008, 10:25:04 AM
There are other way to crack a password. I recently posted an article on here about using public information to reset a password. Chances are that is what happened to Gov Palin. There are plenty of ways to gather public information about any target out there not just a person regularly in the public spot light. Any way, try taking Kev's email down.

FYI here is the article again: http://tech.yahoo.com/blogs/null/104079.


Title: Re: email password hacking
Post by: Kev on September 25, 2008, 11:36:23 AM
LOL! Good job as far as social engineering goes Jimbob. I had actually thought of a figure like that but changed it at the last second because it was too obvious. Very good!   


Title: Re: email password hacking
Post by: Kev on September 25, 2008, 11:54:24 AM
Ok try this account:  Kvntu10@yahoo.com. I set this up with some easy possibilities for people to crack to make it more interesting.


Title: Re: email password hacking
Post by: don on September 25, 2008, 02:21:41 PM
Apparently many are trying this as the account is locked out for 24 hours.

Don


Title: Re: email password hacking
Post by: Kev on September 25, 2008, 02:28:08 PM
LOL, greedy bastards!  Hey being a hacker is like being a wealthy Doctor. You know, a person with lost of "patients", Ha Ha! 


Title: Re: email password hacking
Post by: Kev on September 25, 2008, 02:33:19 PM
Apparently many are trying this as the account is locked out for 24 hours.

Don

Dang Bro you were trying? If you need the bread that bad I will just send it to you, lol.  Interesting because I am not locked out . Let this ride for a little because we in security need to see if someone can. So far no results and its actually very easy.


Title: Re: email password hacking
Post by: xXxKrisxXx on September 25, 2008, 03:04:34 PM
LOL, greedy bastards!  Hey being a hacker is like being a wealthy Doctor. You know, a person with lost of "patients", Ha Ha! 
LMFAO


Title: Re: email password hacking
Post by: Kev on September 25, 2008, 04:13:31 PM
Since no one has cracked it yet, I felt it was fair to make a condition for the pay off. If you do crack it, you must disclose how you did it here on EH-NET. Remember there is an easy way and a hard way and if you do both,  I wil pay both amounts I mentioned in the account.


Title: Re: email password hacking
Post by: jdgonzales on September 25, 2008, 08:36:25 PM
Wow, this thread has already become a contest. I believe there are ways and there are infinite ways to do this. I also agree with Kev that you have to post how you did this to be fair. As far as reset password is concern, well that has been the known solution so far. This is more of becoming a mythbuster. Is there truth behind hacking a yahoo mail password or not? I hope we can answer this one once and for all.

Thanks and Regards

JoGo


Title: Re: email password hacking
Post by: $w33p3R on September 25, 2008, 11:50:50 PM
I would try it, but I would need an ROE, Contract and a Get out of Jail free letter with business card before attempting it.  LOL

Wait, you are not the owner of that site, wtf was I thinking...nope can't try it.  :D


Title: Re: email password hacking
Post by: sgt_mjc on September 26, 2008, 09:32:06 AM
Well at least there is one ethical person here. I was thinking of trying ti myself. Oh well.....:)


Title: Re: email password hacking
Post by: Thegmandrive on May 12, 2009, 04:55:37 PM
I know this is an older topic, but I'm curious, did anyone hack your email? :)


Title: Re: email password hacking
Post by: UNIX on May 14, 2009, 08:43:04 AM
I succeeded in terms of getting your credentials for your Kvntu10@yahoo.com account. Maybe you send me from somewhere else an email to this account and as proof I copy it 1:1 into here.

What do you think about it, Kev? ;)


Title: Re: email password hacking
Post by: Kev on May 14, 2009, 03:52:46 PM
Ha Ha, nice try, but I terminated the account that I used for this about a month after the post.  However somebody just registered that account today. Hmm I wonder who, lol? 


Title: Re: email password hacking
Post by: UNIX on May 14, 2009, 11:57:53 PM
Heh, that's right. :D
I already started a writing how a true scenario could have looked like to get those credentials from someone and at the end I wanted to write something like "But as the account seemed to be none existing anymore I just reregistered it and all the previous explained stuff was not necessary".

 ;D