Hack a Facebook account with wireshark (cookie stealing)

Description:

In this article i am describing a way of hacking a Facebook account with wireshark (stealing your victim's cookies) also known as session hijacking

The cookie which facebook uses to authenticate it's users is called "Datr", If an attacker can get hold of your authentication cookies, All he needs to do is to inject those cookies in his browser and he will gain access to your account. This is how a facebook authentication cookie looks like:

Cookie: datr=1276721606-b7f94f977295759399293c5b0767618dc02111ede159a827030fc;

How To Steal Facebook Session Cookies And Hijack An Account?

An attacker can use variety of methods in order to steal your facebook authentication cookies depending upon the network he is on, If an attacker is on a hub based network he would just sniff traffic with any packet sniffer and gain access to victims account.

If an attacker is on a Switch based network he would use an ARP Poisoning request to capture authentication cookies, If an attacker is on a wireless network he just needs to use a simple tool called firesheep in order to capture authentication cookie and gain access to victims account.

In the example below I will be explaining how an attacker can capture your authentication cookies and hack your facebook account with wireshark.

Step 1 - First of all download wireshark from [here] and install it.

Step 2 - Go to Facebook or any other social media websites, Chat with your victim for 5 to 10 minutes. File sharing is better like shown in the image below:

Step 3 - Next open up wireshark click on capture and then click on interfaces.

Step 4 - Next choose the appropriate interface and click on start.

Step 5 - Continue sniffing for around 10 minutes.

Step 6 - After 10minutes stop the packet sniffing by going to the capture menu and clicking on Stop.

Step 7 - Next set the filter to http.cookie contains datr at top left, This filter will search for all the http cookies with the name datr, And datr as we know is the name of the facebook authentication cookies

Step 8 - Next you’ll want to open up firefox. You’ll need both Greasemonkey and thecookieinjector script. Now open up Facebook.com and make sure that you are not logged in.

Step 9- Press Alt C to bring up the cookie injector, Simply paste in the cookie value into it.

Step 10 - Now refresh your page and voilla!! you are logged in to the victims facebook account. In the picture below, I hacked into the girl;s account i was chatting with. You can send any file like .jpg image etc during file sharing

2 hea ack 2 ck 2 hea k 2 he Hac k 2 hea heart k 2 he rtHack 2 he 2 h 2 heartHa heartHack 2 rtHac hear hear eartHack 2 eartH 2 h heartHack Hack eartH k 2 heartHac artHa artHack 2 h tHack 2 hear 2 Hac tHack Hac hear ck ar rtHa 2 he he ck eart 2 h ck 2 k 2 rtH 2 art ck art 2 h k 2 he 2 Hack hea ac k 2 rtHa tHa hea ck heart eartHack 2 ck ck rtH ear Hac art Hack 2 ck 2 2 Hac heartH tHa k 2 ack 2 hea hea heartHack 2 Hack 2 he ck 2 heart hea artHack 2 h Hack 2 k 2 heart heartHa Ha Hack ear 2 heartHa he rtHack rtH ck 2 e rtH 2 heart eartHack tHack 2 h 2 h 2 h ack artH 2 h Ha ar k 2 ear ck hea hea k 2 rtH Hack hear 2 rtH k rtH rtH he ck rtH 2 h ack ear ack 2 hea tHac Hac ear k 2 tHa 2 h ack art k 2 he k 2 ck 2 rtHac 2 hear ck 2 h tHack 2 he Hack heartH artHack 2 h 2 he Hack heartHa k 2 eartHa 2 hear ack 2 eartHa heartH heart k 2 h rtHack heartH 2 heart 2 hea tHack 2 ck 2 heartH artHa 2 hea Hack 2 heart ack 2 rtHack hear ck 2 tHack 2