OK, now let's have a look on a social engineering slogan that'll allow us to steal usernames and passwords
for accounts.
So basically the way this works is it will dim the screen and it will tell the person that you got logged
out of your session.
So please log in to your account again so you can get authenticated.
So this will allow us to bypass safety tips, tests, all all of the security that's used by the target
account page.
For example, if you're trying to get username and password for Facebook, then you'll be able to bypass
all the security that Facebook uses, because your what you're doing is you're actually just showing
a fake Facebook page so the user will never actually get in contact with Facebook.
So let's just click on this.
And you'll see that you can click from here, you can click what account that you want to hijack.
So let's say we're going with Facebook and you can select what the backlights will be.
So we'll just leave that as grey and we're going to execute this.
And we go when we go to our target, you'll see that they're being told that they got locked out of
their session, so please log in with your username and password.
So I'm going to put my username aside.
Then I'm going to put my password as one, two, three, four, five, six.
And enter.
And if we go back here.
You'll see that we got our username was eight and the password was one, two, three, four, five,
six.
So you can use this to hijack a number of accounts, for example, let's just have another example.
If we go with YouTube again, you give it an excuse to come back.
You see the YouTube logo and you can try to log in for a username password sign in and that will be
captured.
So, again, this is a really good way of getting access to accounts, because even if the user is not
planning on logging into the account that you're trying to steal, then you'll kind of force them to
enter their username and password to get to to be logged back into their account.
And then you'll be able to capture the username and password.