myspace social engenneering
myspace social engenneering
ghost | 6119 Reads | k everyone feel free to repost this anywhere but please give the rightful credit to me. just add that this article was made by winczr. thanx. k now so im still new to hacking and have learned that if you can get someone to just give you the information, y take the time to hack? sure, i do love information and how things work but if you cant find any vulnerabilities, social engineering is a great alternative. k so im sure u guyz have all heard of or even have a myspace right? k. if u go to myspace's main page, before logging in, click on the small "help" link located in the top right-hand corner next to the small "signup" link. after going to the help page, u see lots of different questions. this help page allowed me to delete ppl's acounts.k now let's look at one of these questions.
Q. Where do I report underage users?
A. Users must be at least 14 to join. According to the TOS, if a user is under 18 and misrepresenting their age, the account may be deleted. If you have sighted a user under 14 years of age on MySpace.com, please contact us with the URL or friend ID number and we will remove it.
If you are trying to remove your own child's account, please work with your child to remove the account. Once you are logged into MySpace.com, click on 'Account Settings' and then click on 'Cancel Account'. An email will be sent to the email address (the same one used as the login name) to verify Account Deletion.
If you do not receive the confirmation email, please remove all content from your child's profile, and enter in the text 'Remove Profile' in the 'About Me'. This lets us know that you have taken control of your child's account. Please alert us with the URL to the profile in question, and we can remove the profile for you.
so yea, this is a fun way of social engineering. i have had several ppl's acounts deleted this way. they dont even have to look underage. k so first make a new email acount w/ gmail or yahoo or something. dont do this w/ your real email.
heres another question that can be used for social engineering.
Q. How do we remove a teacher/faculty member's false profile?
A. Please email the web address of the profile to MySpace.com through this form. We will not honor any other non-related requests through this form. Please only contact us through the link if this is in regards to a school related issue. i havent quite played around w/ this one yet but am sure it would work. so u find some adult who's acount u want to delete and send an email through that form to the admins of myspace saying u r that person and are a teacher. bam!! acount gone.
k so the possibilities r endless on the help page and i will probably make another article like this too. thanx for reading.
ghost 18 years ago
hmm impressive im still not sure on some of the stuff our saying to do though u should better explain it;)
ghost 18 years ago
whoa i was reading through the help did they say that u can deface pages by using html code in a comment ?like the same thing as guestbook hacking
ghost 18 years ago
not bad, but i am not sure how its really social engineering….more of just pissin someone off :) but none the less i didnt know some of that stuff before.
ghost 18 years ago
How is it tricking them? of the user is < 14 its the right thing to do according to the ToS
ghost 18 years ago
I'm sorry I missed a whole sentance about that.. but if you have to add something to the page how do you manage that?
ghost 18 years ago
dude if the user is really like 19 u can just send the admins and email saying the user's like 10.
ghost 18 years ago
I don't like this article very much, but that's just because I have my own preferred methods of doing this type of thing. I'll post an article soon (not to be an ass).
ghost 18 years ago
Uh… what? All you're doing is lying to the admins to get them to delete an account.
Yeah, MySpace is vulnerable to HTML/XSS and a few Flash/PHP tricks, and SE can be used to gain account passwords and things. What you're saying is, ask someone to do something, and they do it, because of legal ramifications if they don't. You're just pissing people off…
ghost 18 years ago
yeah i wouldn't call it social enginnering. see youre just deleting the account. social engineering is actually getting access to that persons myspace. myspace admins wont let you do that. so its not social engineering. sorry. you might want to go straight to the owner of that myspace and tell them your Tom(myspace admin) and say you need password and to repair their myspace. :D its funny how that works
ghost 18 years ago
thats what i do is just send and email saying im Tom,and i have multiple excuses why i might need the pass.I even made a yahoo email myspace_account_protection@yahoo.com so i dont have to spoof even.:):D
ghost 18 years ago
lol, just use a fake login :p http://collect.myspace.com/index.cfm?fuseaction=misc.faq&faqQuestionId=43 how can they remove your page? lol
ghost 18 years ago
I wouldn't quite call it social engineering. By the way, does the delete ms email have a password?