Saturday, July 15, 2006

Tracking Yahoo User

Hi All,

I found the way how to track the yahoo user who is chatting with you.. Please follow the method as i have described below you can get his/her location like Country/State/City/Region and many more information..

simple method 1
make a simple script page in asp,php,jsp or any that logs in the remote user ip. then get the ip and do a query on whois.net.

you can get the geographical ip address.

simple method 2
send him an email and make him reply. check the headers.

all methods can give you his physical ip address and if is in a network you wont get his physical computer access.

if you want to get his ip for any sort of trojan attack/script attact etc.. this info isnt really useful.

By method 1 if he/she replies by the mail. In yahoo when you open the mail scroll down on right side you will find the Full header link click it the you will get all the information about the mail find the field [Received: from [202.80.49.75]] this is what the ip address copy this ip address then go to the site http://www.maxmind.com/app/locate_ip and paste the address and press the submit button you will get all the information.

For example:- i received the mail, then i clicked on Full header link i got the folowing information

X-Apparently-To: ansarahmed_8@yahoo.co.in via 203.84.221.31; Wed, 28 Jun 2006 21:19:01 +0530
X-Originating-IP: [209.191.86.236]
Return-Path:
Authentication-Results: mta117.mail.in.yahoo.com from=yahoo.com; domainkeys=pass (ok)
Received: from 209.191.86.236 (HELO web42103.mail.mud.yahoo.com) (209.191.86.236) by mta117.mail.in.yahoo.com with SMTP; Wed, 28 Jun 2006 21:19:00 +0530
Received: (qmail 33042 invoked by uid 60001); 28 Jun 2006 15:48:58 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:
To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=KzThMRS6GXE1qm/driHDs9hZ1nylNPMAXvKR3EAVig8V6
+IAUuDYtpek1jtQHkTqRPYKZE
+7iGxuA1zWpjfSz8vjcDccm+i8T1PA4J9LpwYu/4k
+CbLDv9aqZL9Q4vEl3CgDCSn+
7PcI7HBoCqr3IsaEdeqGYaFL57i3ru6vp7Q= ;
Message-ID: <20060628154858.33040.qmail@web42103.mail.mud.yahoo.com>
Received: from [202.80.49.75] by web42103.mail.mud.yahoo.com via HTTP; Wed, 28 Jun 2006 08:48:58 PDT
Date: Wed, 28 Jun 2006 08:48:58 -0700 (PDT)
From: Send an Instant Message "h b" Add to Address BookAdd to Address Book
Yahoo! DomainKeys has confirmed that this message was sent by yahoo.com. Learn more
Subject: me (dont give to else)
To: ansarahmed_8@yahoo.co.in
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0-1255100025-1151509738=:32596"
Content-Transfer-Encoding: 8bit
Content-Length: 6942

I found the received from field i.e Received: from [202.80.49.75].
When i copied and pasted this ip address
in http://www.maxmind.com/app/locate_ip i found all the information
Like Hostname,Country Name,City,State etc..
Regards,
Ansar Ahmed

Saturday, July 01, 2006

How to Hack Yahoo ID ?

Hi Guys,

I was shocked when i heard one of my colleague yahoo id is hacked and its true we were receiving junk mails from that yahoo id and from day i was spending most of my free time to find out how they might have hacked her yahoo id. Then finally i got it how they might have hacked,The four most common ways of Hacking Yahoo ids are ..

1.) Social Engineering
2.) Password Crackers
3.) Using Password Stealing Trojans/Keyloggers
4.) Fake Login Pages

1. Social Enginnering is actually nothing but trying to know your personal and confidential details and then using it to change your password ..BUT HOW? ok there's a forgot password option with Yahoo which asks for your B'day,Country & Zip Code & later your security question..Now generally lamers who try this mode of Hacking have lots of time to waste ..They will put you into some kinda friendship/emotional trap and try to get all the above mentioned information .It may take 1-2 days or even 1-2 month ...(Really I pitty on such lamers !! ).

2.The second kinda Hacking attempt is done with the Help of Yahoo Password Crackers...I doubt bout their efficiency bt still some of them r lucky (other way round u r stupid lol)..Password Crackers & Password Changers use Brute Force Technique with their updated wordlists...WHAT IS BRUTE FORCE ?I'll make it simple ..it's like using all possible combinations and permutations on the available data and using it as a password ..Bt again it takes a hell lot of time to crack a password ....

3.The third and one of the most frequently used way of hacking or stealing Yahoo password is using trojans and keyloggers ..WHAT ARE TROJANS? hmmm.. I already have one ...bt still TROJANS are simple programs with a server part and the client part ..you infect the victims computer with the server part and the server then connects to the client running on your system and sends passwords and vital informations..and KEYLOGGERS are programs which record your keystrokes in a log.txt file and sends that log file to the Hacker...

I have this trojan programm beleive me it worked guys i tried it on my yahoo id. Dont want to say more about it secret ... lol.. ;) So please be carefull when you are accepting any files send by some one.

Once Infected by these trojans the infected server sends your password to the Hackers Yahoo Messenger id as PM 's ...


4. The last form of Yahoo Password stealing is done by using FAKE LOGIN PAGES ..Now wht the **** :-) is Fake login Page ?These are cloned pages of the real Yahoo Mail Sign in pages .They look very similar to the real conterparts and really very difficult to distinguish..Once you put inyour real id and password and press the submit button you will be either redirected to some other pasge /invalid login page but the trick had already been played by this time ..your id and password would have been mailed to the Hackers mail id by using a 3rd party SMTP server and you don't even realize that you are HACKED...

So be carefull Always view the address bar ..If the address bar shows something like http://mail.yahoo.com or http://edit.login.yahoo.com then its the authentic page but if its something different then DONOT login.