COSMO BOYS

today's lesson: cyber security

Date: 02-08-2023

Lesson 1: basics of cyber security. and ways to be secured

Let's learn the basics of cyber security and hacking. and how to hack. It's our first class on ethical hacking. so we won't learn so much. just the basic.

(you have to always remember that we are white hat hackers)

1. password fishing

ok! so this is the easiest way of hacking. suppose you want to target someone to attack on that person's device. then all you have to do just try to know about his favorite things. suppose his favorite thing is car then you have to post something in his social media accounts something he will like about your post

(you have to do it regularly. cuz there are not much chance that it will work in single try. if possible use multiple accounts)

. and add this text and a link like ----> "

more details visit our website. here's the link of our website link https://attackpage.com".

suppose your target has opened that website. then now you have to make that website looks normal to let your target believe that it's a normal website. and you have to use all attractive elements in your that website. such as car racing content etc. so this is basic things you have to do.

now you have to make a login option.

But that login page will be fake. make a fake login page of Google, Facebook etc.

Ok, so you have to setup something in that page. that is. if someone enter password and phone number/ email id then you will get an email with entered information.


So, in this way you will get that user's account information easily. you can use html's form tag to make a log in form what will send you entered information as email.

make an account in formspree add a email account then it will give you an id. if you add that id in your html then it will email you those information you've entered.

So. done. you can do it only with html and css. just a bit of programming knowledge required


How to be secured from it?

Here's are some techniques to be secured.

  • Don't be attracted on any spam post
  • Don't give any personal informations to any random unknown website
  • you don't have to stay much careful if you are logging in with email. or quick gmail sign in methods. just stay careful and make confirmed that its the official log in or sign up page of Google/Facebook/discord/Twitter/etc before entering your that social media account's secret informations

sample project.

here's the link of a sample fishing page.

(just for educational purposes. as a white hacker never try to harm someone for any kind of personal reasons.)

click on this text to open a sample fishing page

(it's a sample fishing page. so never try to enter your real account information. i've made it for educational purposes only. if you want to try it then input fake informations)

sample project download

warning: never try to apply it on someone practically without any reason.


click here to download

How to use it?

1. replace this text "your fromspree id" with your fromspree id. 2. customize how much you want. 3. link this page with your website.

© all rights reserved by cosmo

2. spyware. (basic)

spywares are some applications that collects your personal information from your device and sends to hackers. spyware can access your camera, microphone or screen to watch and spy on you.

(we are not learning spyware making currently. cuz it won't be so easy. we will learn it when we will complete our basic lessons in ethical hacking.)

Btw if you are using Android or ios then you don't have to be much worried about it. cuz normally most of spywares are made for window os. cuz window os is normally uses in official works.

let's learn how to be secured from this.
  • Install antivirus and always turn them on.
  • if you are Android user. and someone accessed your camera then you can see a tiny green dot at right-top corner of the screen. or if someone accessed microphone then you can see a tiny orange dot.
  • Don's give your camera and microphone access to all applications.
  • Don't install unknown applications from unknown source
  • Scan your phone regularly

3. Password cracking (with word list)

word list is the easiest and oldest technique to crack password

How it works?

Hackers makes a list of most used passwords like "1234"," abcd","password","1111" etc. they uses these most used password list at starting and then they gives a large password word's pattern. what looks something like this---> aaaaa aaaab aaaac aaaad aaaae aaaaf ..... ..... .....
cosml
cosmm
cosmn
cosmo
[password matched. password is "cosmo"]

so word list will try these all generated words until your password unlocks. This is how the pattern works. as i told you it's the easiest way to crack password. and easy means it will take time to crack password. so does it take long time? answer is yes. cuz it has to try all words that you can make. so how much time it can take? answer is depends on your password. if your password is so weak like "623556" then any hacker can crack it in 0.2 second only. or if your password has 8 characters with mix of capital letters, small letters, numbers, special characters. then it can take more than 3 years to crack.

how to be safe from this

  • make passwords with more than 8 characters, mix of capital letters, small letters, numbers, special characters.
  • Dont give your husband or pet animal's name as password
  • Don't note your passwords in your diary (if someone check your diary then your password will be revealed)
  • change your password regularly (at least 3 times in a year)
  • Dont share password with anyone.

So this is our today's lesson. next lesson we will learn that how to setup a word list. I think it's enough for today. cuz it's 2023 only and we can finish our ethical hacking learning in Just one year if we continue like this.

Note these in your diary. and give a test on cosmo max app's education section. try these on virtual device to try it practically.