+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.li/Forum-Hacking-Tools)
+---- Forum: Hacxx's Posts (https://sinister.li/Forum-Hacxx-s-Posts)
+---- Thread: Tutorial Leaks - Introduction how to use leaks to hack accounts (/Thread-Tutorial-Leaks-Introduction-how-to-use-leaks-to-hack-accounts)
Leaks - Introduction how to use leaks to hack accounts - hacxx - 12-01-2016
In this thread i will teach how to use Leaked databases to access common services.
The databases in question are:
000webhost breach in March 2015
Gmail/Yandex/Mail.ru breach in September 2014
The software to use:
Email Recon 1.4
Both databases and the software cost $25 payable by paypal or btc.
Let's start with an example then i will publish one live hacked account as proof.
===================================
1) First i will start to verify if the email is leaked in the databases i have posted above. For that i use the site https://haveibeenpwned.com which already comes in Email Recon 1.4. If the email is associated to one of the two databases that means that the password is visible in plain text.
2) Download the database using "Email Password Databases" available in Email Recon 1.4 and open with EmEditor Txt Editor. Search for the email and the password should be there.
3) Copy the email and password to a text file and launch Email Recon 1.4. Now navigate between the services available and check if the email is associated with that service. If the email is associate with the service just try to break in using the password you have found.
=================================
Live Example: (Found by me)
=================================
The email for this live example is castarnet@Gmail.com
1) By using https://haveibeenpwned.com i know that this email was leaked in 000webhost breach in March 2015. So i open the database and retrieve the password which is "uopl12".
2) Using Email Recon 1.4 i know which services are registered with this email.
Has Twitter? Yes
Has LinkedIn? Yes
Has Instagram? Yes
Has Paypal? Yes
Has Wordpress.com? Yes
Has Steam? Yes
Has 4shared? Yes
Has Dropbox? Yes
Has Mega.nz? Yes
3) Now we try to login in those services using the email and password. In almost all the services the password didn't match
Except Mega.nz. That's right Mega.nz account uses the same password. Yes i just gain access to a Mega.nz File hosting account
4) Repeat this 3 steps with diferent emails...
RE: Leaks - Introduction how to use leaks to hack accounts - hacxx - 03-12-2017
Hi,
This is an update that Email Recon is still working.
Here is a account i hack just a few minutes ago
Email: winquerque@Gmail.com
Pass: tomase12
Site you can access.
> http://www.4shared.com - Has lot of files, Citizen Card and a bill copy
> http://www.dropbox.com - Has pdf files
Printscreen 1: (4shared)
http://i.imgur.com/ttNFCcI.jpg
Printscreen 2: (Dropbox)
http://i.imgur.com/O4jl5jd.jpg
The owner has been notified!!!!!
Regards
RE: Leaks - Introduction how to use leaks to hack accounts - mickjan - 03-13-2017
i go see That thanks for information
RE: Leaks - Introduction how to use leaks to hack accounts - rey_rockstreet - 03-28-2017
i can't find email recon on google, can you post the link? thank you
RE: Leaks - Introduction how to use leaks to hack accounts - hacxx - 03-29-2017
Hi,
@rey_rockstreet
Due to the nature of the program, Email RECON is not available for download because the legality of this tool is questionable.
You can adquire the tool for $20 payable by paypal or btc but there are a few rules that you should comply with.
Regards