[Qrl Jacking] A Novel Social Technology Scientific Discipline Educate On On Whatsapp Spider Web Session Hijacking | How To Last Condom ?

Hello friends 1 time once again welcome hither inward this advance hacking blog.Now today i am going to speak almost “QRL Jacking"

What is QRL Jacking?

QRL Jacking or Quick reply code login jacking is a uncomplicated social engineering assail vector capable of session hijacking affecting all application that rely on the “Login amongst QR code” characteristic every bit a secure agency to login into accounts. In a nutshell, the victim scans the attacker’s QR code which results nutshell, the victim scans the attacker’s QR code which results inward session hijacking.

By cloning the hackers QR code through QRL jacking, yous tin access Victim yesteryear accessing it on your system, too 1 time WhatsAppSpace is open, hence WhatsApp's messages tin travel viewed. Anyone tin travel given a message, the electrical flow GPS place tin travel seen. Apart from this, to a greater extent than sensitious information tin travel seen.

READ MORE:

• [Android P] What Is Android P | Everything You Need To Know About Google Android P
• [Jio Coin CryptoCurrency] What Is Jio Coin ? How To Buy Jio Coin ICO In Republic of Republic of India | Reliance Jio CryptoCurrency Launching Soon | 2018 Updates
• [Facebook Trick] How To Create [Invisible] Blank Name Id On Facebook?
• [WiFi Trick] How To Disable Someone's WiFi Internet Connection From Android Phone?
• [Virus Inside] Meltdown And Spectre Big CPU Security Flaws

How does this procedure work?

In the Normal Condition when yous scan the whatsapp web's QR code inward your mobile, hence Mobile App Secret Authentication Token generates too sends the website. The website verifies it. And yous also larn the Whatsapp session open.

In the QR jacking, the Whataspp session is high-jack. In this, the assailant creates a phising page yesteryear making a whatsapp spider web page of QR Code, when Victim scans the phising page amongst its outcry upwards QR code, too the authentication token that generates is reached on the attacker's server.

Attacher verifies it yesteryear doing it. Victim whatsapp access  on their system.

Now that nosotros know the basics let’s come across how QRLJacking assail works. The squad responsible for creation of this assail presents a modest visualization:

Note : Note: This post is exclusively for educational purpose.I did't impairment anyone, I used my ain device during explicate of this method hence delight don't usage this method whatever form of illegal or malicious activities because hacking is offense if yous create this hence it's tin province yous inward jail.I'm non back upwards whatever form of illegal or malicious hacking.

INSTALLATION:

So if yous are novel to Kali linux, hence re-create too glue these commands inward final window measurement yesteryear step.
Commond:
Type 1 yesteryear 1 commond too hitting travel inward button-

cd Desktop             # Go to the desktop directory.

apt-get install python

git clone https://github.com/OWASP/QRLJacking.git

cd QRLJacking

cd QrlJacking-Framework 

pip install –r requirements.txt

python QRLJacker.py

Now this tool volition open. There are hence many QRL Attack that yous tin create it.

WORKING  METHOD:

So friends conduct many attacks hither similar chat applications, mailing service, ecommerce, online banking, such unsafe attacks.

Step1; 1st selection volition pick out -> Chat Applications

Step2; Now Whatsapp, Wechat App Options volition come, nosotros conduct to hack WhatsApp hence that 1 st selection volition pick out -> Whatsapp.

Step3; Now yous volition inquire that port. You tin set whatever port.  In my instance I conduct set port: 80.

And yous volition come across a link to whatsapp too the QRL code volition travel inward front end of you.

If somebody scans the QRL code, hence yous volition come across all the things.

How to travel safe?

Friends, these are social engineering tricks. Your alertness tin salvage you. Do non scan such code amongst your whatsapp, when somebody says it.  Check the  Web of whatsapp app

if at that topographic point is whatever suspicious entry on it, hence click on "log out from all computers"

           If yous liked this post, delight create non forget to portion it, without your support, I tin non accomplish this noesis fifty-fifty further, hence assistance me yesteryear sharing my post hence that I tin conduct yous a tricks to a greater extent than than 1 To portion the post ,you tin usage the portion buttons given below, too , If yous expression upwards to a greater extent than or less work inward whatever steps delight driblet your e-mail yesteryear going to contact us department of this site. give thank yous you hence much ,stay melody amongst this weblog too blog's admin Mr. Aditya Singh

>>>>>>>>>>>>>>>>>>>>>>>>>>> give thank yous you<<<<<<<<<<<<<<<<<<<<<<<<<<<<<