Friday, July 30, 2010

TabNabber Tutorial ...A new phish Technique....

OK LEts noT make it big ...
so everyone the tutorial am gonna make is on how to create a tabnabbing phishing page
with some screenshots and the good thing is what ever i upload or show you all ..
i do it on my own PC . so i dont copy from ne other site or somthing :) ...

then here we go :
what we need it to things ..
1 : webhosting site www.yourfreehosting.net
2 : phishing page of you own ( i will be using yahoo page the tut ..)
3 : a fake ID ( yahoo, gmail , hotmail )

first of all make an fake id on yahoo or ne mailing site u want ..
then download the phishing page you want to or PM me in my ID ill send you the page you want . :)
with the help of fake ID registor a account on the hosting site .
after registrating the account you will be directed toward the control panel which looks like this ..


click on the file manager and then click on the upload button on the top .


upload the fake page you have after finishing the upload click on open button so
you are brought through the link of that phish page ..
like this ..

NOTE: COPY THE LINK IN THE URL AND SAVE IT IN A NOTEPADE U WILL NEED IT LATER ON ..

UPLOADING OF THE PAGE IS DONE ...
NOW WE head ON TO THE MOST IMPORTANT PART THAT IS MAKING A TABNABBER PAGE .
FIND ANY WEBSITE YOU WANT AND RIGHT CLICK ON THE PAGE THEN CLICK ON (VIEW PAGE SOURCE) COPY IT IN A NOTEPAD AND THEN RENAME THE FILE TO WEBSTITE.HTML
THIS IS MY WEBPAGE I FOUND OUT ..

A NORMAL WEBPAGE WHEN YOU VIEW THE SOURCE CODES IT WILL LOOK LIKE THIS ..

HERE IS THE SCRIPT DOWNLOAD IT
http://plunder.com/8bc3dc90e0
http://www.plunder.com/scriptieBOy-zip-download-8bc3dc90e0.htm

copy and paste the script in the source code of the webpage you got and find "location.href='
in that paste the link of the phishing page you got ..
and save it
like this ..



NOW UPLOAD THE PAGE ON THE SAME HOSTING SITE YOU UPLOADED YOU PHISH PAGE AND GIVE IT TO YOUR FRND OR VICTIM
WHAT WILL HAPPEN IS
WHEN THE VICTIM WILL CLICK ON THE PAGE HE WILL THINK IT IS A NORAML WEBSITE AND START SURFING SOMETHING ELSE
SO IN HIS ABSENCE THE PAGE WILL GET LOAD INTO A PHISH PAGE OF YOUR AND WHEN HE LOGS IN THE ACCOUNT THE USER NAME AND PASSWORD WILL BE TRANSFERED TO YOUR LOG IN THE FILE ..
SO YOU ARE DONE .........
HACKED THE ACCOUNT ..... (^_^)\M/
ENJOY HACKING ( HACK TO LEARN DONT LEARN TO HACK )