Hack Facebook Account by stealing cookies

Introduction

In this tutorial i will explain how you can hack a Facebook/twitter accounts by stealing cookies. This method works only when the victims computer is in a LAN (local area network ).Best place to try out this is in schools ,collages ,cafes . where computers are connected in LAN .Before i proceed let me first explain "cookies".

What are Cookies ? And What is the use of stealing cookies ?

Cookies are small files that stored on users computer by websites when a user visits them. The stored Cookies are used by the web server to identify and authenticate  the user .For example when a user logins in Facebook a unique string is generated and one copy of it  is saved on the server and other is saved on the users browser as Cookies. Both are matched every time the user does any thing in his account

So if we steal the victims cookie and inject them  in our browser we will be able to imitate the victims identity to the web server and thus we will be able to login is his account . This is called as Side jacking .The best thing about this is that  we need not no the victims id or password all we need is the victims cookie.

Hacking Facebook By Stealing Cookies

Thing We Need

1. Ettercap or Cain and able for ARP poisoning the victim
2. Wire shark for sniffing and stealing cookies
3. Firefox browser and Cookie logger add on for injecting the stolen cookies in our browser

Procedure 

STEP 1

ARP Poisoning 

Address Resolution Protocol (ARP) spoofing, also known as ARP flooding, ARP poisoning or ARP Poison Routing (APR), is a technique used to attack an Ethernet wired or wireless network. ARP Spoofing may allow an attacker to sniff data frames on a local area network (LAN), .
download Ettercap and installAfter installation open  Ettercap , select sniff mode and select your network interface as shown

Now scan for hosts in your sub net  by going to Hosts ---> scan for hosts

Now open host list from hosts tab and select the IP address of the victim as target 1 and IP address of the router as target 2

Now start ARP poisoning by going to mitm ---> ARP Poisoning

 Finally start the sniffer by going to start ---> start sniffing . Now if the victim logs into gmail , face book yahoo mail...etc .

STEP 2

After ARP poisoning open Wire shark ,click capture button from the menu bar , then select interface .Now select your interface (usually eth0 ) finally click start capture .

Now you can see the packets being captured , wait for a while till the victim logs in his account( Facebook)

STEP 3

Mean while Find the IP address of Facebook ,for this you can open  CMD (command prompt ) and enter .Ping Facebook.com to find its IP address

Now filter the packets by entering the the IP address (Facebook) in the filter bar and click apply

Now Locate HTTP Get /home.php  and copy all the cookie names and values in a note pad as shown

STEP 4

Now open Firefox and open add and edit cookies ,which we downloaded earlier , add all the cookie values and save them as shown

Now open Facebook in a new tab , you will be logged in the victims account .

Voilà ......you have hacked the victims Facebook account by stealing cookies , You can also follow the same steps to hack  Twitter accounts

Hope you enjoyed this tutorial , If you have any doubts please feel  free to post a comment.