Hacking: Hacking Practical Guide for Beginners

How to Hack a Facebook Account
The Facebook system uses modern security mechanisms. It’s extremely difficult to get
past its defenses and obtain information about its users. Fortunately, you don’t have to
attack Facebook directly (unless you want to bring down the site). If you’re just planning
to steal the login information of other people, you can use a phishing tool from your Kali
Linux computer.
In this lesson, you’ll create a fake Facebook login page. You’ll send this fake webpage to
Facebook users. Once a person logs in, you will obtain all the information he enters.
Credential Harvester – The Basics
Credential Harvester is a member of Kali’s social engineering toolbox. It can create a
phishing page and send login credentials to the hacker. This tool creates an IP address for
the attack. As the hacker, you may modify the resulting IP address to make it more
believable.
The Process
To use the Credential Harvester tool, you should:
1. Access your Kali Linux computer and launch a terminal.
2. Issue the “
setoolkit
” command.
3. You’ll find the terms and conditions of the toolkit. Type “y” and hit the Enter key.
4. The terminal will list all of the available options. Enter “1”, “2”, and “3”. This will
launch the Credential Harvester tool.
5. Choose the option that says “Site Cloner”.
6. Enter the following details:
1. Your IP address
2. The URL of the website that you want to clone
7. Minimize the terminal and go to “Places”. Click on “Computer”, hit “VAR”, and
open the “WWW directory”. Transfer all of the files inside “www” to “html”.
8. Visit 
www.tinyurl.com
to shorten the IP address. Once a Facebook user clicks on
your link and enters his login credentials, Credential Harvester will record the
information for you. It will store the information inside a text file, which is located

---

in the WWW directory (see above).

---