(10-16-2018, 02:12 AM)monkeyz Wrote: I have a friend who has videos of me he wont take down. What's the easiest way to get them off without him noticing?

(12-21-2017, 04:52 AM)mothered Wrote: The recovery options of any account Is the weakest point of security. It provides you with Information that (when researched further), can Identify the victim or his/her subsequent accounts.

For example, I've just entered a random name In Instagram's account recovery options and It's provided me with the first & last chars AND the email provider associated with the account:

Spoiler:

This Is an excellent starting point.

If I were to research this further with the recovery options In other major accounts, some may reveal (for example) the first 2 chars or characters In the middle, last 3 characters etc and without too much effort, I could formulate an entire email address. I'd then compromise that email account, send a "password reset link" to It (from Instagram's recovery options), reset the password and have full control of the target's Instagram's account.

Or I could use the email address to perform a reverse email lookup, see If It's associated with a Facebook account etc and build an Identity/profile of the target, then social engineer and compromise his/her account directly. Or alternatively, send a keylogger to the target's email address.
EDIT: Info added.

(01-07-2021, 09:25 PM)xibalanque Wrote:

(12-21-2017, 04:52 AM)mothered Wrote: The recovery options of any account Is the weakest point of security. It provides you with Information that (when researched further), can Identify the victim or his/her subsequent accounts.

For example, I've just entered a random name In Instagram's account recovery options and It's provided me with the first & last chars AND the email provider associated with the account:

Spoiler:

This Is an excellent starting point.

If I were to research this further with the recovery options In other major accounts, some may reveal (for example) the first 2 chars or characters In the middle, last 3 characters etc and without too much effort, I could formulate an entire email address. I'd then compromise that email account, send a "password reset link" to It (from Instagram's recovery options), reset the password and have full control of the target's Instagram's account.

Or I could use the email address to perform a reverse email lookup, see If It's associated with a Facebook account etc and build an Identity/profile of the target, then social engineer and compromise his/her account directly. Or alternatively, send a keylogger to the target's email address.
EDIT: Info added.

Geez!

Will you be my Senpai!? lol

(12-24-2017, 02:14 AM)mothered Wrote:

(12-23-2017, 06:26 PM)Mom Wrote: Do keyloggers even still work when sent over email? Don't most computers ask for manual permission for anything to get into the computer from said email if not everywhere? Or do you just disguise it as something the recipient would want to download?

If the keylogger Is FUD and binded to a legit file, the user wouldn't know the difference- permissions prompted, UAC or otherwise.

(03-06-2021, 07:13 PM)xibalanque Wrote: I would like to learn how to do this but for iPhones. I would like to send something through a message may it be through txt, email, or social media and have a keylogger automatically install. Any ideas where I should look to learn this?