Hey !! yes you read it right... Anyone can play pranks on you or your friends by calling them from the target mobile itself.I thought many people know about this.But when I discussed about it among some of my friends, I found out that its a new thing for them.Most of the people are not aware of the possibilities of such a thing.In my other post we talked about Email spoofing.But what if mobile phone number spoofing is also possible...
Ok enough of the introduction.. let us start finding out how this can be done..
There is a site with the name of MOBIVOX - hey don't start googling it now I'll tell you when its time.
You have to register in that site to get started. The main highlight is ,as always I say " Its Free"
Click here to get to the registration page
Then you will get a page like this :
Register there and login to your account after Email verification.You will get some free time( and guess what it is more than enough to play pranks on your friends by calling to their number using their number itself.)
After login you will get a screen similar to the one below
Now click on "My Profile" link on the Left hand side of the same page and you will get the page similar to the one showed below.
Now click on the edit button to change the attacker's mobile number.Provide the space with the target's mobile number and save it.
so let us assume that the target's mobile number is "1234567890" give the same as your mobile number before initiating the call.
Now click on the DirectWeb call Button (right hand side top, near "My MOBIVOX" tab)
This will fetch you a page similar to the one displayed below
When you click on the call now button.The target mobile,here its "1234567890" will receive a call from "1234567890" itself.
Ok so now you are done.Now you can play pranks on your friends.But be sure to educate them at the end of the play.Remember sharing is caring.
So what are you waiting for click on this link to try it out Register Me
NB:
- This is a clear exploitation of the Input validation vulnerability on that site.
- The main countermeasure they can take is to send a confirmation code every time the user's mobile number is changed and ask him to enter it in the site to activate the new number.
- You can call to any phone in this world for free and talk with your mobile itself.
- My case studies proved that this can be further exploited when you use a disposable email ID to login to this site.Correct me if I am wrong
- The prank quotient of this hack is high and security quotient is medium.
13 comments:
nice post dear
Thx Sarath.. Do visit again :)
thanx 4 that dear!!
@Manoj : he he he you are welcome...coming up with more updates..
thx very very.........nice thanks
hi dear u r realy special and real ethical hacker bcoz u shair everything .
i wana help in web ste with googlw link plz reaply me my id is
hck.aman@yahoo.com
@ Gurdeep :feels good to hear that you liked this post. Do visit it again
@hcakman: Can you please state your doubt in this Comments part..? If so, others can also get benefited.If you really want to take it offline do let me know about it. Please Keep reading.
it is not working now update ur self dear.....
@Above:Yes,It is possible that it will not work now.As we have pointed out the security flaw in their system they might have fixed it.Search for similar sites and experiment with it and do share it with others.Happy learning.
It is no longer free is their any other free method to do this !
The Mobivox which you have mentioned is not free now.
ACTIVE & FRESH CC FULLZ WITH BALANCE
Price $5 per each CC
US FRESH, TESTED & VERIFIED SSN LEADS
$1 PER EACH
$5 FOR PREMIUM DATA
CC DETAILS
=>CARD TYPE
=>FIRST NAME & LAST NAME
=>CC NUMBER
=>EXPIRY DATE
=>CVV
=>FULL ADDRESS (ZIP CODE, CITY/TOWN, STATE)
=>PHONE NUMBER,DOB,SSN
=>MOTHER'S MAIDEN NAME
=>VERIFIED BY VISA
=>CVV2
SSN LEADS INFO
First Name | Last Name | SSN | Dob | Address | State | City | Zip | Phone Number | Account Number | Bank NAME | DL Number | Home Owner | IP Address |MMN | Income
Contact Us
-->Whatsapp > +923172721122
-->Email > leads.sellers1212@gmail.com
-->Telegram > @leadsupplier
-->ICQ > 752822040
*You can buy for your specific states too
*Payment in advance
*Hope for the long term deal
*Time wasters or cheap questioners please stay away
*If you buy leads in bulk, I'll definitely negotiate
*You can ask me for sample of Lead for demo
US DUMP TRACK 1 & 2 WITH PIN CODES ALSO AVAILABLE
Post a Comment