Sent to me by Gecko321
Original Xploit by Digital Assassins
(major modifications and more details by kM)
** UPDATE **
yada yada yada...
So I posted this to Rootshell.com, and yes it was patched shortly thereafter. Exploits are ment
to be fixed. Don't bitch at me for it.
This no longer works...however I am sure there are "other" ways of getting around the system.
There always is..
So for your informational purpose.. you can see what the "old" way was. =]
===========
==HOW TO==
===========
Scamming. Ok, basically here is the deal. If you want to get into a hotmail account first
you need to find a victim. Everyone has a hotmail account especially peeps on IRC or any local
chat channel hangout. Send an email to them and tell them to check their hotmail account.
Then type their name below and access their email at the same time.
Good for checking up on cheating girlfriends, boyfriends, wives, husbands.
Business associates etc etc.
Get my drift? =]
//////////
step 1
\\\\\\\\\\
Enter the hotmail ID you want to hack. (remember this) this hack attempt ONLY
works if the user has not LOGGED out of hotmail. If the user has logged out this attempt
will not be successful and you will get a message saying you were logged out.
Make sure you have typed the username exactly right because hotmail will
not tell you if you have typed it incorrectly, they also log the IP's of
people entering incorrect login names.
//////////
step 2
\\\\\\\\\\
It is now time to view the html source code of the password page that you are
on now. View the source for this page. Five lines down or so from the top
of the source code page, it will say
<FORM name="passwordform"
Action="http://somenumber/cgi-bin//start/username/anothernumber" method="POST"
target="_top">
//////////
step 3
\\\\\\\\\\
Goto the address in the action part of this code.
http://somenumber/cgi-bin//start/username/anothernumber
If the hotmail user didn't logout, you will have access to their mailbox.
If they logged out try another. =]
