+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: (I'll Pay) - Bypass 2FA for Gmail (/Thread-I-ll-Pay-Bypass-2FA-for-Gmail)
Pages:
1
2
(I'll Pay) - Bypass 2FA for Gmail - Balls - 08-03-2018
I need to get into a specific gmail account, how can I access it without knowing any 2fa info? Is there a shitty iOS app I can download, or some windows program that lets me login without 2fa? I can pay good for help if you're a legit hacker and know a good way.
RE: (I'll Pay) - Bypass 2FA for Gmail - Balls - 08-03-2018
I'd like to add, sim swapping is not an option - the account is foreign and the phone number isn't known, and I could not find records for it.
RE: (I'll Pay) - Bypass 2FA for Gmail - M00N66 - 08-03-2018
I think this involves tokens. Maybe OTP tokens or something. I don't remember if Gmail is purely app based regarding 2fa, or if it's a web token thing. I used to use a similar bypass with the Rockstar iFruit app. I would use the login token from that and use it to look at unencrypted files regarding Grand Theft Auto V's money system.
RE: (I'll Pay) - Bypass 2FA for Gmail - Balls - 08-03-2018
(08-03-2018, 07:53 AM)M00N66 Wrote: I think this involves tokens. Maybe OTP tokens or something. I don't remember if Gmail is purely app based regarding 2fa, or if it's a web token thing. I used to use a similar bypass with the Rockstar iFruit app. I would use the login token from that and use it to look at unencrypted files regarding Grand Theft Auto V's money system.
If you can find out, I'll pay good, couple hundred to thousand
RE: (I'll Pay) - Bypass 2FA for Gmail - M00N66 - 08-03-2018
(08-03-2018, 07:54 AM)Balls Wrote:(08-03-2018, 07:53 AM)M00N66 Wrote: I think this involves tokens. Maybe OTP tokens or something. I don't remember if Gmail is purely app based regarding 2fa, or if it's a web token thing. I used to use a similar bypass with the Rockstar iFruit app. I would use the login token from that and use it to look at unencrypted files regarding Grand Theft Auto V's money system.
If you can find out, I'll pay good, couple hundred to thousand
I'm gonna get some sleep. I'll see what I can come up with tomorrow. Not my specialty but worth a go at it.
RE: (I'll Pay) - Bypass 2FA for Gmail - mothered - 08-03-2018
Exactly what details do you have of your target?
RE: (I'll Pay) - Bypass 2FA for Gmail - Balls - 08-03-2018
(08-03-2018, 09:07 AM)mothered Wrote: Exactly what details do you have of your target?
E-mail (its gmail ofc) and I have the correct password, but it always asks me to verify via sms. It blocks out the number, and I've tried everything I can to find the raw phone number, but I can't. The user isn't active in many places so its not in any databases, and I tried googling everything I could on him but nothing shows up. So just the e-mail and the password, and the common username he uses everywhere (which isn't much).
RE: (I'll Pay) - Bypass 2FA for Gmail - mothered - 08-03-2018
(08-03-2018, 10:00 AM)Balls Wrote:(08-03-2018, 09:07 AM)mothered Wrote: Exactly what details do you have of your target?
E-mail (its gmail ofc) and I have the correct password, but it always asks me to verify via sms. It blocks out the number, and I've tried everything I can to find the raw phone number, but I can't. The user isn't active in many places so its not in any databases, and I tried googling everything I could on him but nothing shows up. So just the e-mail and the password, and the common username he uses everywhere (which isn't much).
It's a bonus the target has setup 2FA via the "Text message (SMS)" option, and not through voice call. First and foremost, you must obtain the cell phone number. I realize you've exhausted all options, but It does exist somewhere. Once that's done, you will SE your victim to get the 2FA verification code as follows:
- Spoof your caller ID, then send an SMS to the target as though you're a Google representative. In the text message, write something along the lines of "We're performing a routine annual security upgrade, you will receive a verification code shortly".
- Wait a few minutes and then generate the verification code via the account holder's "Account recovery".
- Your target will receive the verification code on their phone- on the assumption It's been legitimately generated by Google.
- Shoot off another text (within a minute) with a message of "To finalize the security upgrade on your account, please reply with the code. Thank you- Google staff".
- You'll receive have the 2FA verification code.
- Sign In thereafter.
Note: It's very Important to establish your target's timezone. Perform the above on a weekday during the evening hours, and not on the weekend (they may be out and about) and certainly not during the time they're asleep.
RE: (I'll Pay) - Bypass 2FA for Gmail - Balls - 08-03-2018
(08-03-2018, 11:12 AM)mothered Wrote:(08-03-2018, 10:00 AM)Balls Wrote:(08-03-2018, 09:07 AM)mothered Wrote: Exactly what details do you have of your target?
E-mail (its gmail ofc) and I have the correct password, but it always asks me to verify via sms. It blocks out the number, and I've tried everything I can to find the raw phone number, but I can't. The user isn't active in many places so its not in any databases, and I tried googling everything I could on him but nothing shows up. So just the e-mail and the password, and the common username he uses everywhere (which isn't much).
It's a bonus the target has setup 2FA via the "Text message (SMS)" option, and not through voice call. First and foremost, you must obtain the cell phone number. I realize you've exhausted all options, but It does exist somewhere. Once that's done, you will SE your victim to get the 2FA verification code as follows:
- Spoof your caller ID, then send an SMS to the target as though you're a Google representative. In the text message, write something along the lines of "We're performing a routine annual security upgrade, you will receive a verification code shortly".
- Wait a few minutes and then generate the verification code via the account holder's "Account recovery".
- Your target will receive the verification code on their phone- on the assumption It's been legitimately generated by Google.
- Shoot off another text (within a minute) with a message of "To finalize the security upgrade on your account, please reply with the code. Thank you- Google staff".
- You'll receive have the 2FA verification code.
- Sign In thereafter.
There's two phone numbers. I can't find either. Can you help?
RE: (I'll Pay) - Bypass 2FA for Gmail - mothered - 08-03-2018
(08-03-2018, 11:15 AM)Balls Wrote: There's two phone numbers. I can't find either.
Given It's a commonality for users to use the same email address on most (If not all) of their online accounts, check the email address against all major websites, namely the account's recovery.
Each account will exposed ex-amount of digits. For example, Gmail may expose that last two, eBay the first three, Facebook a few toward the end, Amazon somewhere In the middle and so forth. From there, you can formulate and build a number from the ground up. Perform a reverse phone number lookup, and crosscheck It with the Information you have on hand pertaining to your target, just to verify you have the correct user.