inteliture.com
Google

Saturday, July 14, 2007

Fake yahoo email login.

U can make a fake url login page, email ur victim to visit ur fake login page / or just email ur fake login page (see yahoo email tips) and when he/she types the username and pass, the info 'll be send to u ex. by a cgi script. Cgi scripts can be found on the net. Although u can get here one.

NOTE: If u r going to email ur fake login page, on the pass file (of the form), check its properties and change it to normal (if not, when the user tries to type his/her password within the yahoo email account, will be prompted not to type it). Yahoo recognizes pass fields and prompt users about it. Yahoo also recognizes info send anywhere else than yahoo and prompt the user.

NOTE: U can also use cgi scripts from ur own site (must support cgi).

We are providing a working example of a fake login page, with an external cgi script, which 'll email u the username and the password. Just download the zip file HERE and follow the below instructions.

1. Open the ready.htm file, Edit (file menu top left) -> Select all and press CTRL+C.
2. Open ur email client or account (must support html ex. yahoo email), compose a new email and press CTRL+V in the text field.
3. Send it to ur victim(s).

The ready.htm file 'll proceed the info to am20forces@yahoo.com. So just change it to ur email address (open ready.htm with ex. notepad, search for am20forces@yahoo.com text and change it). Also with the same way change the title (not the name of ready.htm, the title within the html codes) to something like "Yahoo email restore".

NOTE: The fake login page its a quick build page, but the job its done perfectly. Just remember to change the info as mention above and that the received email 'll contain username and "email address" (which "email address" its the password).

Instead of the page, u can send a link to the fake login page. U can obscure the link (read in "Tutorials" -> "Obscure url") or just fake the displayed text of the link using ex. Microsoft Word (click the example to see) ex. http://www.mail.yahoo.com/restore.asp?id=3587496 or combined the methods.

NOTE: Use a fake email address (u can use a fake email sender app ex. similar to "ELBOMB" in "Others" download section) ex. YAHOO_ADMIN@yahoo_bot.com with description to be "ACCOUNT ERROR". Lots of ppl receives such emails, claiming that they must relogin to activate their account due to an error etc.

In the zip file, u can also find a cgi submission script, which u can edit/modify as u like and upload it on ur site. Its preferable to create ur own (if u 've the knowledge) cgi script, or just modify one (and not using a cgi sciprt provider).
tm file on ur site (using web service provider ex. geocities), remember to upload all the files included (images etc.) in the "ready" folder.

No comments: