Twitter Jacking method - p7u

1. Submit a password request to the account. If it says enter an email or phone number to send a password reset link, the account
   is vulnerable to jack (this method is jacking twitters via phone, email is a bit harder/different).
 ----------------------------------------------------------------------------------------------------------------------------
2. If it gives the last 2 numbers of the phone number linked to the account, this will be much much easier. This is where doxing
   comes in. you NEED to dox the twitter account holder OR atleast get the phone number attached to the account. By doing this,
   you can simply ask for their number for business inquirys or get their ip and ISP dox them to get the phone number.
 ----------------------------------------------------------------------------------------------------------------------------
3. Once you have the phone number attached to the twitter account, this is where social engineering comes in. Whatever carrier
   their phone number is, you're going to have to call them. e.g sprint, verizon, tmobile.
 ----------------------------------------------------------------------------------------------------------------------------
4. Before you call up their phone carrier service, you NEED to have their dox before hand to make things MUCH easier. Call up
   their carrier. Pretend to be them, make up a story, tell them you want them to do text OR call forward for their phone #,
   they will ask you a series of questions to determine your the account holder to make the changes on the number. If you have the dox, answering the questions will be flawless. once they verify your the owner, they are gonna ask for a phone number you want the calls or texts to be forwarded to.
 ----------------------------------------------------------------------------------------------------------------------------
5. once they say they entered your number in, they might ask if they can test it, do it. give them a number you own that CAN
   recieve calls or texts (Don't make it your personal phone number. If anything, make it a phone that doesn't have GPS on it, like an old nokia etc.). If you get a text or call on your phone, the call/text forwarding was successful.
 ----------------------------------------------------------------------------------------------------------------------------
6. Do another password reset to the target twitter. if it says enter phone number, enter the victims number. If done correctly, a code should be sent to your phone instead of theirs. enter the code in, twitter jacking successful.