00:00I will show you a hacking video and then I will show you an Instagram account.
00:03This account is like this.
00:04So, I open my first account in the browser.
00:06Then I will click on Inspect.
00:07Go to Applications and then Go to Cookies.
00:10Here you will see a session ID.
00:12Open a new browser where you have a new Instagram account.
00:15Click on Inspect.
00:16Go to Applications and then Cookies.
00:18And there you will paste a session ID.
00:20And then, as you refresh the page,
00:22you will see that you will want to go to that person's account.
00:25Password 2FS bypass.
00:27Let's try this exact thing.
00:27Let's try it.
00:28Right click on Inspect.
00:30And then, Application, Cookies, Instagram.
00:33And this is my Instagram session ID.
00:36Now, if I go to another account, random account.
00:39And if you look at the top, I have opened my second account.
00:41And I will replace the session ID and refresh it.
00:45Shit!
00:46But I will explain exactly what happened.
00:47We call this session hijacking.
00:49Now, what happens basically?
00:52When you log in,
00:53You are using your browser.
00:55What do you do?
00:56To authenticate your browser.
00:58Like, you are using your browser.
01:00You are using your browser.
01:01You are using your browser.
01:01That is your Neeraj.
01:02But, Instagram what does it do?
01:04For example, you are like, comment, comment, post.
01:07What do you do?
01:07What do you do?
01:08You are using your request.
01:09And Instagram, every request.
01:11You need to verify any website.
01:12You want to verify that you are using your request.
01:23Instagram, you say, put your password.
01:24Put your password, verify that you are.
01:26You comment.
01:27Instagram, you say, put your password.
01:28Verify that you are.
01:29It is so frustrating to use your website.
01:32What do you do?
01:33What does your browser do?
01:34After you log in,
01:35You have a session ID.
01:38That is the one we have copied.
01:40Right?
01:40But, this is only your browser.
01:42A session ID is now.
01:43Now, when you are liking it,
01:45What do you do?
01:46Instagram server has a request.
01:48But, why don't you ask the password?
01:50Why don't you ask the browser?
01:52This browser has a unique session ID.
01:54Which means, Instagram will prove it.
01:56It is the one that likes it.
01:58Because, the browser has a login and password.
02:02It is the same browser.
02:04It is the same browser.
02:04That means, it is the same.
02:05Common sense.
02:06Now, when you are copying one browser to another browser.
02:10Then, Instagram will have one session ID.
02:14And, if you have copied and paste.
02:17Then, the second one has become one.
02:18So, Instagram will have requested one.
02:21And again,
02:21It was possible because it has access to your browser.
02:26If you have any hacker to go to home.
02:29And, if someone has a hacker and go to home.
02:30To go to home.
02:31Then, what is the situation ID?
02:32What are you doing now?
02:34That you are currently having to go to home?
02:35And, second.
02:36If you want to go out to home.
02:38It doesn't matter to your house.
02:39You want to go out to home.
02:40But it has no way to go.
02:41So of course, don't paste it anywhere, like I have shown you.
02:45Or don't keep it anywhere.
02:47Don't put it anywhere.
02:49Or don't access random websites.
02:52And you're safe.
02:53Basically, what do you want to do?
02:56You don't want to do anything.
02:57You want to sit at home.
02:58And all safe.
