EvilZone

Community => General discussion => Topic started by: jil023 on November 07, 2012, 12:08:02 PM

Title: Phishing
Post by: jil023 on November 07, 2012, 12:08:02 PM

Hi all

Okay, so I've created an account on a free webhosting account (yes I know it will only last a  short while).

I have uploaded my index.htm file, my php file and my log.txt file.

But the problem is, how do I set it up so that when I open my website, it opens my created phishing page? I have already done this on 3gb free hosting site and my method works perfect, but my account got taken down. So now, I'm using another host by Zymic.

So essentially, after I upload my files, how do I set it up?

Thanks

Title: Re: Phishing
Post by: Kulverstukas on November 07, 2012, 12:22:06 PM

Upload your files into public_html folder and your page is set up.
Now if I understand correctly, you want to redirect your victim from the legit page to the phishing page. If so, you will have to tamper with his http requests. If you're on the LAN with him, you could arp poison his requests and redirect packets, or you could add your website to hosts file if he's on windows...
I suppose making your own DNS servlet and configuring his network settings to use it would work as well :P

Title: Re: Phishing
Post by: proxx on November 07, 2012, 04:14:58 PM

Spoof dns replies (who ever is faster.. DNS is not secure at all.)
That way the client will see http://originalwepage.com/login.php or whatever.
He wont even notice the difference if correctly done.
If course this is to be done on a LAN as stated.

Or or or if you  are the MITM than you can just filter/modify or do whatever you like with his traffic.
Ettercap has some stuff builtin to do this.
I would vote for this option because its much cleaner.
MITM is underestimated.

Title: Re: Phishing
Post by: iTpHo3NiX on November 07, 2012, 06:59:15 PM

Also be sure to chmod log.txt to 777 ;)