Hack Twitter Accounts With Phishing
Twitter is one of the topmost widely running social networking sites,Its alexa ranking is 14(As per now).So therefore it is largely becoming target of hackers,Many requests keep coming to me ,please tell us a way to Hack twitter accounts or How to hack twitter accounts,so therefore i today i have written a post on How to hack twitter accounts
Well for this purpose i will tell you the most used method to hack twitter accounts i.e phishing
Hacking Twitter Accounts With Phishing
First of all download:Twitter fake login page
First extract the contents into a folder
Then edit login.php .(right click and then select edit)
In that ,find (CTRL+F) 'http://rafayhackingarticles.blogspot.com' then change it to your destined URL but don't forget '\'.
Now rename the script to pass.php and save it
Now open twitter fake page in wordpad and seach for the term action=,Change action=pass.php
Create an id in www.110mb.com , because i know about that site quite well.
Then upload the contents into a directory
For that,after creating an id you should go to file manager and upload all these files.
Then just go to your fake page and enter user name and password and try out whether its working .
After you type the file , a password file will be created in the same directory .
Then you can see what username and password you have entered.
Now you are ready to hack twitter accounts
Distribute the Yahoo.HTML URL (ie: yoursite.com/yahoo.HTML) to your friends.When they login from this fake login page, the login.php will save the username and password onto the .TXT file (or any other format) in your site. Download the file to see the password inside it.
Weak Password Brings ‘Happiness’ to Twitter Hacker
An 18-year-old hacker with a history of celebrity pranks has admitted to Monday’s hijacking of multiple high-profile Twitter accounts, including President-Elect Barack Obama’s, and the official feed for Fox News.
The hacker, who goes by the handle GMZ, told Threat Level on Tuesday he gained entry to Twitter’s administrative control panel by pointing an automated password-guesser at a popular user’s account. The user turned out to be a member of Twitter’s support staff, who’d chosen the weak password "happiness."
Cracking the site was easy, because Twitter allowed an unlimited number of rapid-fire log-in attempts.
The hacker bragged about the hack and revealed that it was a brute force dictionary attack against an administrator account. Twitter does not block repetitive login failures therefore enabling brute force attacks. We are still leaving the incident classification "insufficient authentication" in addition to brute force as we feel an administration interface should have additional authentication mechanism and not just a password.
Twitter announced that a hacker broke into 33 accounts including Obama's now inactive twitter. The hack is a result of a flaw in a web based support tool used by twitter, which where evidently accessible externally without proper authorization
So therefore twittter account can be hacked by using Bruteforce Dictionary Attacks.