Social engineering (Phishing)

ninjalizard
9 years ago

0

Hi all, just out of interest I have created a cloned HTML login page which can be sent via email and looks and feels just like a “real” page, it will open and display properly in email clients but if you actually try to login nothing will happen (obviously) as it just a cut and paste of my HTML. My question is, is there anyway that when the victim enters their details and hits submit that the information they entered could be sent from them as a reply to a specified email address? or would the page have to be physically hosted online for this to be achieved?

8replies
2voices
230views
Mugi [Mugiwara27]
9 years ago

0

Google
You have to make that clone online and to change something in the source code to make the the victims details sent to an email or written on a other file like a log.txt file.

ninjalizard
9 years ago

0

Thanks for that, but could that email be sent or log file be written straight from the victims email client as in when they hit submit on the email or would the email have to be ‘hosted’

Mugi [Mugiwara27]
9 years ago

0

I don’t get it
You want to send your log file to the victim ? O.o

ninjalizard
9 years ago

0

I’ll use this as a very straight forward example, I copy the html from a yahoo/hotmail/facebook login page, paste it into the body of an email so when the victim opens the email they see the login page. They enter their username and password and hit submit (login) is there a way to edit the code so that upon hitting the submit button the information they entered is sent back to me as an email or log file? straight from there email client, so in esssence they are replying to the fake login page sent from me with their username and password?

This is just me trying to get my head around phishing, I don not intentd to hack anybody!

Mugi [Mugiwara27]
9 years ago

0

Okay now I understand
So you just, live I’ve said later, have to copy paste pour web page ( phishing one ).
But in that code you have to replace something with something
You’ll have to use php at that step to send username & password to your log file and to redirect your victim to the real website as he write a wrong password.
Also look at that website, it may help you :)

ninjalizard
9 years ago

0

Yes so im right in thinking web hosting would have to be used and it couldnt be done solely via email?

Thank you for your replies!

Mugi [Mugiwara27]
9 years ago

0

Yes you’re right, you have to use web hosting and you can spread that phishing using mail ^^

ninjalizard
9 years ago

0

Thought as much, thanks for your help :)

Discussion thread has been locked. You can no longer add new posts.
1 of 9

This site only uses cookies that are essential for the functionality of this website. Cookies are not used for tracking or marketing purposes.

By using our site, you acknowledge that you have read and understand our Privacy Policy, and Terms of Service.

Dismiss