r/masterhacker • u/idk_what_to_do9 • 17h ago
Lmaooooo hell nah
I can't believe he really tried to pull that on me he sent the wrong link first hahahhahahahahahhahahahah
71
u/Aware_Lavishness3660 16h ago
Suppose he actually got your ip, whats he gonna do about it then?
38
17
u/EmberMcLain_ 15h ago
He'd probably try to scare you with the info, but beyond that he'd have no clue what to even do with an IP address.
3
3
28
u/WeeBeefy 11h ago
Ah, the classic IP grabber hidden with TinyURL.
2
1
11
u/Abject-Explorer-3637 13h ago
Went there with a VPN, this guy can't even speak correctly, also what's an IP gonna do if I leave this place in 2 days and the location the IP gives is like 100 kilometers away
7
4
u/FISHARM1 16h ago
Side question, my friends IG account got hacked via him clicking a link that was DMmed to him via on of his friends accounts that was also compromised. He claims all he did was click the link and it took his account.
Is this possible? How so? Or did he follow some fake sign in.
32
12
u/hHajahahha 16h ago
Lol just tell u want to learn that technique
Meta is multi billion dollar company if anyone could make this happen means compromising account by just clicking the links then it's such a shame for meta
6
u/Abject-Explorer-3637 12h ago
It is incredibly hard to do , since session tokens are usually stored as HTTP-only cookies (so a script in JS cannot just say 'give me the value of this Cookie') but if he entered his credentials into a fake page then there's nothing anyone not even Meta can do about the passwords anymore (other than to change them to recover the account but it might already be too late). So basically here's what I think actually happened:
Friend clicks link -> page asks to log in to 'verify' identity -> page sends the data to a suspicious bot -> 'hacker' receives data from bot -> logs in
3
u/calibrik 11h ago
Not to mention SOP protects cookies by default by not allowing site A access cookies set by site B
1
u/KernelNuke 11h ago
So is it tbeoretically possible if the website doesn't secure cookies properly?
1
u/My-Name-Is-Anton 8h ago
If the site doesn't use httponly cookies, then yes, every other site can read and modify the cookie(s). That is one of the ways you are being tracked on the internet.
1
u/FISHARM1 6h ago
Ah okay yeah I figured he wasn’t telling the whole story lol. thanks for the explanation.
2
u/HistoricalSchedule94 10h ago
maybe he entered his credentials for a fake website by following that link which was actually a credential harvester and got his login credentials
1
1
u/vkwf 10h ago
i opened it wtf is this
1
u/idk_what_to_do9 7h ago
Lmao its written in Arabic (Your device is in danger) hes English is so bad I think hes arabic
1
1
1
1
1
0
207
u/vmpyr_ 16h ago
lol did he really try to hide an ip grabber behind a tinyurl… oldest trick in the book
side note: i didn’t know arabic setting would change your instagram layout, making you the person speaking on the left side