Author Topic: Yahoo Support SE / Accont Hack from iDevice  (Read 1080 times)

UberN00b

  • Hero Member
  • *****
  • Posts: 535
  • Reputation: 23
  • Perfection is a process.
  • Computers: em250-kav60 netbook
  • iDevices: iPhone 4
Yahoo Support SE / Accont Hack from iDevice
« on: August 31, 2012, 11:28:35 pm »
This is my first tutorial so constructive criticism would be appreciated.


About a month ago I changed my Facebook password and forgot to write it down. When I tried retrieving it through my linked yahoo account I couldn't because I changed that password and forgot it too.

Now when you call into Yahoo support you're presented with two options to reset your password and have it sent to an email account of your choice.

1.  Answering 2/3 security questions correctly

2. Providing the subject and email account you messaged of one of the top three emails you sent out within the past 14 days.
 
So if you can get someone to email you from their yahoo account and try this a.s.a.p. you will know for yourself how incredibly flawed Yahoo's security is.

------------------

I was forced to use the  2nd option because I setup those security questions about 5 years. Peoples interest change over time and if you had questions like "favorite author?" or "favorite hobby?" that you made many years prior then you'll probably find you won't remember either.

As I stated at top, it had been over a month since changed and forgot my Yahoo password. Your probably asking yourself, "How was Uub able to send mail to meet the 2 week requirement?" Well if you added your account on your iDevice you can still send mail for a few days, only if you had changed the password from a pc or other medium. I've discovered that you still have a few days to send and update your inbox before you get locked out. And even if you do get locked out you can restore from backup and reset the "timer." You can do this as many times as you need, I've done it 3 times because I either forgot to send a message or I missed Yahoo's call-in hours. Hope this helps.
« Last Edit: September 01, 2012, 12:06:26 am by UberN00b »
A million strands of spiderwebs weaved to make my vest!

grinch

  • Administrator
  • Hero Member
  • *****
  • Posts: 1942
  • Reputation: 188
  • dIGITAL gRINCH
    • @DigitalGrinch
  • Badges:
  • iDevices: iPhone 3GS 4.3.3, HTC Evo V 4G ICS
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #1 on: August 31, 2012, 11:35:18 pm »
Nice work pointing out this flaw in Yahoo security

+1

BTW, your post is well spaced out and easy to read
If I help you or you appreciate my work, clicking that +1 button is the best thanks I could get.

My opinions are my own, you may agree or disagree with them, but they are only just that; opinions
For example: facebook is the microsoft of social networks

http://goo.gl/PiVjI

@DigitalGrinch
https://twitter.com/DigitalGrinch

I follow all iNinjas members back. PM me if I am not following you

LankAsif

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2406
  • Reputation: 90
  • Forum pride 8)
  • Badges:
  • Computers: i7 with bits and pieces
  • iDevices: iPod Touch 1G (Basically storage for iNinja tools), iPhone 5
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #2 on: August 31, 2012, 11:42:56 pm »
I don't see how getting a friend to email you asap helps provide email info of last emails sent o_O I'm just not sure I follow. Thank you for sharing though. It's great to see. And I agree with grinch's compliments ;)

Education is never achieved by wise men. it is only believed to have been achieved by fools

UberN00b

  • Hero Member
  • *****
  • Posts: 535
  • Reputation: 23
  • Perfection is a process.
  • Computers: em250-kav60 netbook
  • iDevices: iPhone 4
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #3 on: September 01, 2012, 12:02:33 am »
I don't see how getting a friend to email you asap helps provide email info of last emails sent o_O I'm just not sure I follow. Thank you for sharing though. It's great to see. And I agree with grinch's compliments ;)

If you were trying to access someone's account and you got them to email you then you need to call in to support as soon as possible(ASAP) because the person your trying to hack could be someone that sends mail quite frequently. In order for that option to work it has to be one of the last 3 emails sent out.
A million strands of spiderwebs weaved to make my vest!

LankAsif

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2406
  • Reputation: 90
  • Forum pride 8)
  • Badges:
  • Computers: i7 with bits and pieces
  • iDevices: iPod Touch 1G (Basically storage for iNinja tools), iPhone 5
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #4 on: September 01, 2012, 12:12:53 am »
Oh thank you *facepalm* i'm so daft sometimes. I misread it entirely. Great angle to get access to their acc. +1

Education is never achieved by wise men. it is only believed to have been achieved by fools

Don't like seeing ads? Click here to register!

UberN00b

  • Hero Member
  • *****
  • Posts: 535
  • Reputation: 23
  • Perfection is a process.
  • Computers: em250-kav60 netbook
  • iDevices: iPhone 4
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #5 on: September 01, 2012, 01:00:09 am »
Thanks, it's just something stumbled upon.
A million strands of spiderwebs weaved to make my vest!

rhodysurf

  • Noob
  • *
  • Posts: 31
  • Reputation: 4
  • Computers: Lenovo Thinkpad Edge running Windows 8, Ubuntu, and mac osx in a vm
  • iDevices: Iphone 4 iOS 5.1.1
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #6 on: September 01, 2012, 01:17:29 pm »
+1 man this is a cool find

Alex47

  • Hero Member
  • *****
  • Posts: 1378
  • Reputation: 48
  • (I can't think of something funny to go here)
  • Computers: Asus k55v, custom built self-acclaimed tank of a pc
  • iDevices: iPhone 3G, iPod touch 4g, iPod touch 2g
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #7 on: September 02, 2012, 02:10:17 am »
Nice find man, and easy to read! +1
My Number:00110110 00110110 00110110

StealthHacker

  • Hero Member
  • *****
  • Posts: 1019
  • Reputation: 41
  • Supreme Hacker
    • iNinjas
  • Computers: HP S2031 Windows 7 64 Bit Home Premium
  • iDevices: Jailbroken iPod Touch 5G iOS 6.0.1
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #8 on: September 02, 2012, 08:12:28 am »
Yay! My grammar-naziness didn't go off! Lol!

This is a great tutorial. Classic example of social engineering. +1 for this
He who asks a question remains foolish for 5 minutes. He who doesn't ask a question remains foolish forever.

UberN00b

  • Hero Member
  • *****
  • Posts: 535
  • Reputation: 23
  • Perfection is a process.
  • Computers: em250-kav60 netbook
  • iDevices: iPhone 4
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #9 on: September 02, 2012, 11:12:49 am »
LOL Thanks! So is grammar nazi a reference to the YouTube video, something you guys have been saying forever or a quip from my name?
A million strands of spiderwebs weaved to make my vest!

Don't like seeing ads? Click here to register!

A12danrulz

  • Leader
  • Hero Member
  • *****
  • Posts: 4078
  • Reputation: 221
  • Badges:
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #10 on: September 02, 2012, 11:43:28 am »
Its a common internet term.

grinch

  • Administrator
  • Hero Member
  • *****
  • Posts: 1942
  • Reputation: 188
  • dIGITAL gRINCH
    • @DigitalGrinch
  • Badges:
  • iDevices: iPhone 3GS 4.3.3, HTC Evo V 4G ICS
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #11 on: September 02, 2012, 12:34:40 pm »
*-nazi was made "ok to say" by an Episode of Seinfeld "The Soup Nazi"
After that, it became ok to use the term nazi in a joking manor, and people attached it to any term where the person was strict or controlling.
grammer-nazi
book-nazi
computer-nazi
overtime-nazi
We call my aunt the "picnic-nazi"

If I help you or you appreciate my work, clicking that +1 button is the best thanks I could get.

My opinions are my own, you may agree or disagree with them, but they are only just that; opinions
For example: facebook is the microsoft of social networks

http://goo.gl/PiVjI

@DigitalGrinch
https://twitter.com/DigitalGrinch

I follow all iNinjas members back. PM me if I am not following you

A12danrulz

  • Leader
  • Hero Member
  • *****
  • Posts: 4078
  • Reputation: 221
  • Badges:
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #12 on: September 02, 2012, 01:32:55 pm »
Soup Nazi Ftw. The only episode of seinfeld I've ever seen, but it was *ages* ago.

[null]

  • Hero Member
  • *****
  • Posts: 646
  • Reputation: 42
  • the halloween jack is a real cool cat
  • Computers: I have a PC running Windows 7 that was built by my uncle. I also have a Newsmy T3 Android Tablet.
  • iDevices: iPod Touch 4G
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #13 on: September 02, 2012, 01:43:13 pm »
A.) Great tut, +1!! It's amazing how some companies have such bad security.
B.) Seinfield is HALARIOUS!
C.) we should probably get bak on topic.
__  __           ___    ___          
/\ \/\ \         /\_ \  /\_ \          
\ \ `\\ \  __  __\//\ \ \//\ \     
 \ \ , ` \/\ \/\ \ \ \ \  \ \ \          
  \ \ \`\ \ \ \_\ \ \_\ \_ \_\ \_
   \ \_\ \_\ \____/ /\____\/\____\
    \/_/\/_/\/___/  \/____/\/____/

B4NND1T

  • Noob
  • *
  • Posts: 45
  • Reputation: 3
  • Evidence of absence, is not absence of evidence.
  • Computers: Custom build, an old Dell, and a bunch of scrap.
  • iDevices: iPhone 4
Re: Yahoo Support SE / Accont Hack from iDevice
« Reply #14 on: September 27, 2012, 05:08:29 am »
Wow, that's quite a flaw in their security.
Code: [Select]
-----BEGIN GEEK CODE BLOCK-----
Version: 1.4
GM d- s+:- a-- C++(++++) UBLS*+++ P+ L++ E?
W+++ N++ o-- K w++ O- M- V- PS+++ PE Y+ PGP
t 5 X+ R+ tvn+ b++ DI-- D++ G+ e* h- r++ y+
------END GEEK CODE BLOCK------