During all the commotion about Soulja Boy being hacked, lots of people have asked me how the hacker got the password in the first place.
Now, there are many ways he could have done it but the most probable seems to be phishing. The guide that follows is for educational purposes only and I cannot be held accountable for your actions.
This isn't 100% foolproof, and it helps if the person you're trying to hack is kind of stupid. But you'd be surprised how many people fall for it.
Step 1: Download Fishing Bait 2.5 (http://rapidshare.com/files/139803449/Fishing_Bait_2.5_-_www.SilentHex.info.rar)
Step 2: Run the program and extract the files. If you antivirus detects it, turn of the antivirus, the program is NOT harmful to your computer.
Step 3: It should be self-explanatory from now on but in case you get stuck: You take the source from the website you want to phish. You paste the code into Fishing Bait. Where it says "http://www.davedadon.co.nr" and "log.txt", you change the first one to where you want the person to be redirected to after they get phished and leave the second one.
Step 4: Click "Generate" and then "Save HTML". Leave the names of the files alone or it gets confusing.
Step 5: Sign up for an account at 110mb.com using fake credentials.
Step 6: Once registered go to your file manager and delete the file that's there by default. Then upload the files (index.html, log.txt and login.php).
When that's finished, all you have to do is send your victim a link to "index.html" and when they log in (if they fall for it), their details will appear in log.txt.
P.S. If they question why its not "myspace.com/..." then make up an excuse like, "I'm hosting my page on this new site I found." Or something like that.
Happy Hacking :)
Sunday, 24 August 2008
How to Phish (Tutorial)
Subscribe to:
Comment Feed (RSS)
|