Now let's have a look on a social engineering slogan that'll allow us to steal usernames and passwords
for accounts.
So basically the way this works is it tells them the screen and it'll tell the person that you got logged
out of your session.
So please log in to your account again so you can get authenticated.
So this will allow us to bypass CCTV as haters.
Yes.
All of the security that's used by the target account page for example if you're trying to get username
and password for Facebook then you'll be able to bypass all the security that Facebook uses because
you're what you're doing is you're actually just showing a fake Facebook page.
So the user will never actually get in contact with Facebook.
So let's just click on this and you'll see that you can click from here you can click what account that
you want to hijack.
So let's say we're going with Facebook and you can select what the backlash what we saw just even that
as great.
And we're going to execute this and we go when we go to our target.
You'll see that they're being told that they got logged out of their session.
So please log in with your username password.
So I'm going to put my username as as then I'm going to put my password as one two three four five six
10.
If we go back here
you'll see that we got our username was 8 and the password was 1 2 3 4 5 6.
So you can use this to hijack a number of accounts for example.
And let's just have another example.
If we go with you to again you give it an execute comeback.
You see the YouTube logo and you can try to log in a username password sign in and that'll be captured.
So again this is a really good way of gain access to accounts because even if the user is not planning
on logging into the account that you're trying to steal then you'll kind of force them to enter their
username and password to get to be logged back into their account.
And then you'll be able to capture the username and password.