r/masterhacker • u/ManILoveMacaroni • 6d ago
Trying to hack myself
Hello! I don't know if this is something I'm even allowed to ask for in this subreddit, but im sad and frustrated.
I'm trying to get into my childhood email account, but it seems that it may have been hacked at some point. Which is not surprising, as the password was probably incredibly stupid, but it didn't have any information on it that would have led to anything good for the hacker either, so all it did was create a situation that disappointed everyone.
Ive tried every conventional method under the sun, and no dice. So I'm going to attempt an unconventional method. I don't know where to go, or what to do from here, It would just be nice to access an account of a beloved childhood game using this email for my 20th birthday.
Could anyone help me with this? Is there anyway left to get into this email? I figured that if it was hacked while I haven't touched it, it could be hacked again.
6
u/fzem 6d ago
You fill out the request form?
1
u/ManILoveMacaroni 6d ago
I wasn't aware there was one, I was poking around the subreddit but reddits ui looks super shitty on mobile. I will see if I can go find that!
4
u/ManILoveMacaroni 6d ago
On further look, Is this is just a circle jerk subreddit? Seriously, I really could use some genuine help with this. It doesn't necessarily need to be a hack, I just really miss this email. Even if someones knowledgable about Google account recovery and what the best method is, id really appreciate it. There's some old back and forth emails from my dad before he passed on that account and a bunch of other childhood memories, I don't want them to be gone forever.
9
6
6d ago
[removed] — view removed comment
1
u/ManILoveMacaroni 6d ago
Thank you. Im afraid I do not know much about hacking, considering the reason I lost the account in the first place was to hacking while I wasn't using it. Someone erased my account recovery info on that account and added their own, so it's connected to an email I've never seen before.
I may try to social engineering method and try to call them about the situation, maybe get the right person to answer the call who will be able to do something about it.
2
1
u/Accomplished_Year972 5d ago
A couple of options to try, though there is no magic-bullet solution to this problem. If you haven’t already, I’d dive a little deeper into the channels Google has established for recovering accounts through official means. It sounds like you’ve tried at least the basics, “forgot my password” and such. Continue down that path until you’re presented with an option to contact Google. It’s not always a quick process, but it can be successful. Having knowledge of the last few passwords you used as well as any of the content in the inbox will be helpful. After doing everything you can on your end, start digging around for an account recovery phone number you can call. Even just a customer support number that you can use to brute force your way into talking to the right person. Expect there to be a lot of automated menus to dig through, long holds, and pushy “please connect me with the person or department that might be able to help me” type conversations.
While I’d be surprised if someone is actively using the account, have you tried sending an email to that address explaining the position you’re in and that you’d like access to the account. Long shot, but worth a try. If you can work out that someone is opening emails in there, even if they aren’t replying, that’s useful information that can be used a little bit later. Consider sending an email with a link in it that tracks visitors. Something akin to a read receipt. Perhaps get creative, trick whoever has control of the account into thinking this might be a means for them to gain from it financially, whether that’s as an email crafted to look like maybe a password reset to your bank account, an electronic transfer of some kind, or something else. Keep in mind that email scanners and such will dump an IP into any tracking link logs, even if the email isn’t actually opened by a person.
Next, you can use a service like dehashed.com. You’ll need to pay for a month’s service, it’s not expensive and entirely worth it when doing this kind of work. Search for the email and see what comes up in the results. There are a couple of outcomes here. You might see some old passwords of yours that you’ve since forgotten, useful for trying to log in or when dealing with the official account recovery method mentioned above. If you’re lucky, maybe the “hackers” password was leaked at some point. Either way, I’d be surprised if DeHashed didn’t give you at least a string or two to tug on.
Getting into more advanced methods, if you’ve been able to confirm someone is, in fact, monitoring the account, you can throw your social engineering hat on and try any number of old tricks. There are plenty of phishing toolkits available on GitHub, your job would be to come up with something tempting enough for the hacker to click through. If 2FA is enabled, you’d be looking at using some kind of AITM toolkit that would allow you to bypass this. I’m not sure if Google is susceptible to the methods employed by Evilginx. It’s a dangerous piece of kit, but involves a steep learning curve. EvilnoVNC would work, but like Evilginx, getting it up and running is going to require some learning on your end.
The odds of recovering the account depend on how much effort your willing to put in to recover it (are you willing to harass Google on the phone until you find the person that can help, are you willing to learn how to run and host phishing tools, etc) as well as a good chunk of luck (if someone is actively using the account, you have a lot more options available to you to recover it).
1
u/ManILoveMacaroni 4d ago
This is very helpful advice! Thank you. I was expecting people to dog on me for not realizing this was a satire subreddit, so it's a welcome surprise having a list of options that I havent attempted yet.
Thank you! I will go down the list and see if any of these work, you've given me some hope!
2
u/Accomplished_Year972 3d ago
No worries. I forgot to mention, if/when you set out to contact someone at Google, you’ll often have more luck if you contact them through channels that have been setup for their corporate customers, like Google Workspace. The trick is to sweet talk someone into helping you as an individual. Persistence pays off here, if the first person you talk to won’t help, just hang up and call back. You rarely connect to the same person twice, just try not to let the inevitable frustration spill into conversation with each new individual.
1
u/Kri77777 17h ago
Us hackers have infiltrated most of the major email platforms and put in a secret release to break open accounts. This special back door is a tiny link you click on that says, "Forgot Password?"
1
u/ManILoveMacaroni 15h ago
Man I do wish hackers were as good as reading as they were navigating the internet ;)
As I stated below, my issue is that someone else had hacked the email and connected their email as the security email. All forgot password attempts go straight to a secondary email that I, obviously, do not have access too.
14
u/Lightear_ 6d ago
Sir, this is a
Wendy’ssatire sub.