How to Create a Phisher for Phishing

In this Tutorial I am discussing the easiest way of hacking Email accounts ie Phishing . What actually Phishing is , how it works and how to use it more efficiently .
Phishing is one of the easiest and the oldest way of hacking email accounts .All beginner hackers should know about this .
Read this post carefully and leave your Feedback and queries in comments .


Q) What is Phishing?
A) In simple language phishing is creating fake pages to steal user credentials like username,password,phone no,etc.


Steps:-
1) First you need a Phisher . Phisher is a set of files used to fool someone .It consist of:-
i) Web page which appears to be same as that of victims account site.
i) A php script which posts the data (credentials)into a text file
iii) Text file in which credentials are saved.

2) Creating a Phisher?
2.1) Creating exact copy of the login page of site: Open that site in your bowser ,rightclick any where in free space and then click on view source.
2.2) Copy the entire source to notepad.
2.3)Editing source code :
Press“Ctrl+a” then “ctrl+f” (select all+find ) , then a dialogue box will appear , type “action”(without quotes) and press enter.
The word action will be highlighted in the notepad.You will then be having a line saying:
**action=”http://www.facebook.com/login.php?login_attempt=1″**
2.4)Change this with **action=”post.php”**(double quotes are necessary),and save
it as index.html.
2.5)Creating a Phisng script :
Click here
Visit the above link and copy the code to notepad and change
**’Location:http://www.myhost.com/errorpage.html’**
with the url of the site you want to open after victim presses “Login” button like if you want your victim to be redirected to yahoo.com change **‘Location:http://www.yahoo.com/’**
and save it as “post.php”.
2.6) Create a log file: It is a file which contains all usernames and passwords . Open
notepad and save it as **usernames.txt**.
3) Now you need a free web hosting account .you can easily find some free hosts on google or try these:-
zymic.com
t35.com
my3 gb.com
Create account on any of these sites for free hosting plan.
4)After creating account just upload the three files to your web hosting account.
5)You are ready for the attack.Just send the link of your index.html to the victim.
If he opens and tries to login , id and password will be saved in the usernames.txt file.

6) Additional step:
You can hide URL by encrypting it using online URL encrypters like
is.gd
goo.gl
tinyurl.com
Go to any one of the above mentioned sites, enter your URL and
then it will encrypt the URL , copy the encrypted URL and then send it to Your Friends.

Logic:
Index.html : It is the exact copy of the Login page of a site.While editing it , we change “action=post.php” so when ever victim clicks on the Login button , Post.php will be executed.
Post.php: It is our phishing script, it takes the data and writes it to a text file , and then loads another page specified by the “location” tag in Php file.
usernames.txt : text file containing Passwords and Email id.

Prevention :>Always check the Url before signing in . This is the most useful and effective way one can use to prevent himself from phishing .
>Other way is to use some good Antivirus software which warns you whenever you visit a harmful site.
Even if somehow you entered your credentials in a phisher, Immediately Change your password . 

NOTE:-This tutorial is for educational purpose only,Use at your own risk.
How to hack is not responsible for any type of mishappening caused due to this information!!
Keep Visiting How to Hack

Comments

Popular posts from this blog

Update SE Xperia X8-E15i to Android 4.1.2 Jelly Bean

Tech-Donor Giveaway #1 : TechnologyBlogTutorial

How to Install Adobe Flash Player in Ubuntu 11.04