Friday, July 30, 2010

TabNabber Tutorial ...A new phish Technique....

OK LEts noT make it big ...
so everyone the tutorial am gonna make is on how to create a tabnabbing phishing page
with some screenshots and the good thing is what ever i upload or show you all ..
i do it on my own PC . so i dont copy from ne other site or somthing :) ...

then here we go :
what we need it to things ..
1 : webhosting site www.yourfreehosting.net
2 : phishing page of you own ( i will be using yahoo page the tut ..)
3 : a fake ID ( yahoo, gmail , hotmail )

first of all make an fake id on yahoo or ne mailing site u want ..
then download the phishing page you want to or PM me in my ID ill send you the page you want . :)
with the help of fake ID registor a account on the hosting site .
after registrating the account you will be directed toward the control panel which looks like this ..


click on the file manager and then click on the upload button on the top .


upload the fake page you have after finishing the upload click on open button so
you are brought through the link of that phish page ..
like this ..

NOTE: COPY THE LINK IN THE URL AND SAVE IT IN A NOTEPADE U WILL NEED IT LATER ON ..

UPLOADING OF THE PAGE IS DONE ...
NOW WE head ON TO THE MOST IMPORTANT PART THAT IS MAKING A TABNABBER PAGE .
FIND ANY WEBSITE YOU WANT AND RIGHT CLICK ON THE PAGE THEN CLICK ON (VIEW PAGE SOURCE) COPY IT IN A NOTEPAD AND THEN RENAME THE FILE TO WEBSTITE.HTML
THIS IS MY WEBPAGE I FOUND OUT ..

A NORMAL WEBPAGE WHEN YOU VIEW THE SOURCE CODES IT WILL LOOK LIKE THIS ..

HERE IS THE SCRIPT DOWNLOAD IT
http://plunder.com/8bc3dc90e0
http://www.plunder.com/scriptieBOy-zip-download-8bc3dc90e0.htm

copy and paste the script in the source code of the webpage you got and find "location.href='
in that paste the link of the phishing page you got ..
and save it
like this ..



NOW UPLOAD THE PAGE ON THE SAME HOSTING SITE YOU UPLOADED YOU PHISH PAGE AND GIVE IT TO YOUR FRND OR VICTIM
WHAT WILL HAPPEN IS
WHEN THE VICTIM WILL CLICK ON THE PAGE HE WILL THINK IT IS A NORAML WEBSITE AND START SURFING SOMETHING ELSE
SO IN HIS ABSENCE THE PAGE WILL GET LOAD INTO A PHISH PAGE OF YOUR AND WHEN HE LOGS IN THE ACCOUNT THE USER NAME AND PASSWORD WILL BE TRANSFERED TO YOUR LOG IN THE FILE ..
SO YOU ARE DONE .........
HACKED THE ACCOUNT ..... (^_^)\M/
ENJOY HACKING ( HACK TO LEARN DONT LEARN TO HACK )

Sunday, July 11, 2010

HAck Gmail passwords with SoulLogger (keylogger) and scantime crypter

1: SOUL KEYLOGGER
I would like to make a keylogging TUT on how to set up and use a keylogger.
Preparation:
soullogger & scantime crypter
http://plunder.com/f1087899f6
http://www.plunder.com/SoulLogger-download-f1087899f6.htm
Register for a Gmail account: Gmail
Note: Please leave the folder how it is do not delete the Stub.exe
1.
So when you download open SoulLogger it should look like this:



Enter in your Gmail E-mail address and password. (Don't worry it's safe).



Where it says "server.exe" that is where you call the keylogger server what you want it to be called. And in interval that is how often the logs get sent to your gmail inbox. Note The file must end in ".exe"



Ignore the tick boxes below unless you know what you are doing.
Now it's time to test your email. If all goes well you will recieve an email from SoulLogger and you will be prompted with a message saying, "The E-mail is valid and works perfect."



Now click "Build", you will then be prompted with a message that says "Ther server.exe (name of server) is successfully been builded"



Now if you go into your folder where your SoulLogger file was there will now be 2 files. One called stub and one called server.
The file that you will use to infect other is the one called Server. DO NOT CLICK IT!


2: SCANTIME CRYPTER to evade AV detection

click on " browse " button dialog box will open



Now click on the "server.exe " file and hit open ( i have given it in terms of A & B )



Change the name of the file in save as dont click the same and replace it .type what ever you wish ( NOTE : always type the extension ".exe" after the name )



IF everything goes correct you will get a message " CRYPTED "
and your are done the file will be saved in the folder where your keylogger is kept ..