Posts

Showing posts with the label Web application hacking

Hacking Gmail account using GX cookie

Hacking Gmail account using GX cookie ============================================== [Disclaimer: This post is only for security purpose. I or my group will take no responsibility for any kind of misuse ] Introduction Hacking web application was always curious for the script kiddies. And hacking free web email account is every geek first attempt. The method which I will describe in this post is not new; the same method can be applied to yahoo and other free web email services too. The method we will be using is cookie stealing and replaying the same back to the Gmail server. There are many ways you can steal cookie, one of them is XSS (Cross site scripting) discussed by other is earlier post. But we won’t be using any XSS here, in our part of attack we will use some local tool to steal cookie and use that cookie to get an access to Gmail account. Assumption:     You are in Local Area Network (LAN) in a switched / wireless environment : example : office , cyb...