Originally posted by HackingModz
I Am Wondering How Do I Hack Peoples Passwords? When I Say People I Mean Like Myself, Friends Etc. People Who Forget There Passwords/Security Questions &/Or Had Thei Account For Years and Finally Forgot The Password. But How Do I Get Mainly Email Address Passwords ( If I Know The Email ) ((Ex; Gmail, Yahoo, Hotmail, AOl, Etc. ))
Email passwords can only be hacked using the following methods:-
1. Social Engineering
2. Phishing(uses social engineering)
3. often people set their Computer passwords same as their email so if a hacker gets the Password Hash from the SAM file (in windows) or the etc/shadow file (in Linux) then he can decrypt the hash depending on the type of algorithm once decrypted you get the password of that pc which is the same as the email in this case
4. Kelogger (Logs every single keystroke being typed)
5. Session Hijacking :- once he logs in to Facebook if both of you are in the same network you can easily sniff his facebook or gmail or what ever session packets and you can use some tool like Firesheep (Ad on for firefox) to access the session with the packet/token
6.You can use DNS starvation Attack to break down the DNS server and set up your own one so the victim connects through yours and you can redirect them to Phishers
7. Some websites are poorly secured and their session tokens will be within the URL in those cases you can bruteforce them too.(DONT EXPECT POPULAR EMAIL CLIENTS LIKE GMAIL TO BE VULNERABLE TO THIS)
Brute forcing a Gmail/Facebook password is not humanly poosible at most cases this is because they have CAPTCHA's(Completely Automated Public Turing test to tell Computers and Humans Apart) which pops up to verify that you are not a bot trying to bruteforce
Just incase if you find a program saying it can hack email accounts then be sure that it is a RAT or keylogger used by someone else eitheir to sniff your passwords or to use your PC as a zombie for DDOS attacks hope this helps
Edit:
Just adding on whatever comes to my mind
you can even use SSLST

which would force the victim to enter credentials to a HTTP through you and your computer posts it to the webpage thereby you have the credentials without the victims knowledge