Hack Facebook Account By Cookie Stealing And Session Hijacking Wiith Wireshark

Requirements:

Next, click any empty white box and then the blue “+” symbol near the button you pressed just before. choose okay should look like this:

Now we have to poison them so we choose the little yellow hazard symbol towards the top left. should now look like this:

Wireshark will list and color-code all the traffic it sees for you. To make this simpler we can use the filter to only see the traffic we want, Type “HTTP. cookie” in the filter. (Something to consider is to just filter to “HTTP” and scroll through the entries looking for ones that start with the word “POST” This means that information was submitted to the webpage noted such as a username and a password! so if you see this just look through the details and you should see the info you want, most passwords will be hashed but use this site to decrypt them:http://www.md5decrypter.co.uk/ )

Here is an image

You can either look through this information manually or use the search function to find what you want. In my case, I want to hijack the session of a user on the forumfreerainbowtables.com so I will use the search function (press Ctrl+F, or go to edit -> search) and type in the information I know for sure will be in the entry. if you hijack someone’s Facebook put ‘Facebook’ there. Most of the time to be safe I do not use the first entry I see b/c this will only work if the person is auto-logged in, so just go down a few more until you see one you think will work (just use common sense).

What we need are the cookies. Here are what mine looks like and how to get there. With practice, you will be able to tell which cookies are used for logins and be able to limit failed attempts.

The last thing to do is to change your cookies to match the ones you captured. If the cookies given to you by the site expire (like the ones in my picture do) you will have to delete them and add all the ones we captured earlier in. If they do not expire you can just edit them. The bottom line is all the cookies must match the cookies you capture in the earlier steps EXACTLY! Make sure you do not add any extras and that you did not miss anything. Also, all fields must be filled in (Path and Domain as well as Name and Value). My path is “/” and my domain is “.freerainbowtables.com”
mine looks like this:

You are now done, Just close the cookie editor and reload the webpage. If done correctly with the correct cookies you should be logged in as the user you attacked!

Reffed by:-http://www.mukeshtricks4u.com/2016/02/How-to-hack-facebook-password-working-session-hijacking-2016.html