Warning! Please note that hacking credit or debit cards is illegal and will result in serious consequences, including imprisonment. This tutorial is for educational purposes only. I am explaining How to Hack a Credit or Debit Card to make you aware of how it works.
Assuming you use a Wi-Fi connection to connect to internet. A hacker will hack your Wi-Fi network and connect to it (Find out how to hack wifi here). Then he will run a series of utilities to redirect other user data through his machine, followed by more utilities to sniff the data, acting as an SSL Certificate Server to be the Man-the-Middle.
The following diagram shows a very simplified diagram of how your SSL banking session should work under normal conditions, then how it would work during an attack:
You may need to know that a certificate is used to establish the SSL protocol connection. This is a good thing if you have the right certificate and are connecting directly to the website you intended to use. Then all your data is encrypted from your browser to the SSL website where the bank’s website will use the information from the certificate it gave you to decrypt your information.
In case that is the case, then it is hard for a hacker to decrypt the information being transmitted, even if he is able to sniff your data. This is a bad thing if you have a “fake” certificate being sent from the hacker and are actually connecting to his machine, not directly to the bank’s website.
In that case, your credentials are being transmitted between your browser and the hacker’s machine. The hacker is able to grab that traffic, and, because he gave you the certificate to encrypt the information, he can use that same certificate to decrypt it.
Exact Steps on How to Hack a Credit or Debit Card
His first step would be to turn on Fragrouter, so that his machine can perform IP forwarding,
after which, he will want to direct your Wi-Fi network traffic to his machine, rather than your data traffic going directly to the Internet. This enables him to be the “Man-in-the-Middle” between your machine and the internet.
Using Arpspoof, a simple technique, he determines your IP address as may be 192.168.1.18 and the Default Gateway of the Wi-Fi network is 192.168.1.1
The next step is to enable DNS Spoofing via DNSSpoof
Since he will be replacing the bank or online store’s valid certificate with his own fake one, he will need to turn on the utility to enable his system to be the Man-in-the-Middle for web sessions and to handle certificates. This can be done via webmitm.
Now he needs to begin actively sniffing your data passing through his machine, including your login and credit card information. He opts to do this with Ethereal, then saves his capture.
Though he now has the data, it is still encrypted with 128-bit SSL. No problem, since he has the key, he only need to simply decrypt the data using the certificate that he gave you. He does this with SSL Dump:
He then runs a Cat command to view the now decrypted SSL information. Note that the username is “Bankusername” and the password is “BankPassword.” Conveniently, this dump also reveals the banking site as National City. FYI, the better, more secure banking and online store websites will have you first connect to another, preceding page via SSL, prior to connecting to the page where you enter sensitive information such as bank login credentials or credit card numbers.
The reason for this is to stop the MITM-type attack. This helps because if you were to access this preceding page first with a “fake” certificate the next page where you were to enter the sensitive information would not display.
See also: How to track a stolen phone in Nigeria
The page gathering the sensitive information would be expecting a valid certificate, which it would not receive because of the Man-in-the-Middle. While some online banks and stores do implement this extra step/page for security reasons, the real flaw in this attack is the uneducated end-user.
With this information, he can now log into your online bank account with the same access and privileges as you. He could transfer money, view account data, etc.
Other search keywords in relation to How to Hack a Credit or Debit Card covered in this topic includes:
- how to crack credit cards for money
- buy credit card online from hackers
- hack make money
- how to hack debit card
- credit card top up hack
- how to hack atm card pin number
- how to hack a bank account and withdraw money
- blank atm card
- how to hack atm
What is Blank ATM Card
Blank ATM Cards are cards that are already hacked by hackers. It allows you to withdraw money from any ATM Machine without being traced. To owe a black ATM card, you need to order it from Hackers.