# PHISHING (1)
HI EVERY ONE I am trying to learn these phishing methods and I have managed to create an IG page clone where the user enters and once they log in, the data is sent through a discord bot and the person

var unreadAlerts = '1';
Welcome back, purely_cabbage. You last visited: Today, 06:36 AM Log Out
You have one unread private message from dkota titled Welcome to the Forum!
New Reply

Threaded Mode PHISHING

renesles01
Newbie
Posts:
1
Threads:
1
Joined:
Jun 2023
Reputation:
0
Credits: 6.51€ [Donate]
#1
06-16-2023, 08:32 AM (This post was last modified: 06-16-2023, 08:35 AM by renesles01.)
HI EVERY ONE
I am trying to learn these phishing methods and I have managed to create an IG page clone where the user enters and once they log in, the data is sent through a discord bot and the person is directed to a link that I want, What happens is that I bought my domain with the host, it has its ssl certificate and everything, but obviously chrome and the browsers warn that it is an identity theft site, I would like to know if obfuscating the code or encrypting the .php will be possible to do a FUD code? I'm new to these issues, can someone help me, I appreciate it. (THIS PAGE ITS NOT IN ONION WEB)
PM Rate
Report
cyberiagu
Active Member
Posts:
23
Threads:
3
Joined:
May 2023
Reputation:
9
Credits: 8.3€ [Donate]
#2
06-19-2023, 04:22 PM
first of all, sending the credentials to yourself via discord is REALLY bad opsec. you should figure out a more secure way of transferring those credentials first, before you even think about running it for real. here are some ideas:
1) write the credentials to a small database on your web server and dump that db regularly
2) (if you need a low-tech solution) check the logs of your web server, any credentials should be listed in clear text in the POST requests that you are receiving. logs are also not good OPSEC but at least your web site is not directly connected to you like a discord account is (I hope)
3) use fetch or a similar API to forward the credentials to a 3rd party site like a pastebin and check that site regularly (this is the most anonymous, if you use TOR/i2p) but some ppl might also get a hold of the credentials. if you want to get around that, encrypt them first with PGP or sth similar)
4) if you want to use some kind of messaging bot, use jabber rather than discord. discord messages are sent in clear text with full oversight of the company and the accounts are linked to ur identity. discord does not work over tor afaik.
NOW, THE ACTUAL QUESTION:
chrome and firefox give warnings because they check if the ssl certificate that your site is sending is the same certificate that instagram.com has. thats the one purpose of ssl certificates. there isn't much you can do about that except hope that some ppl are retarded enough to ignore the warnings. that's the phishing business m8
you could, perhaphs, do sth about it if the ssl certificate of instagram ever got leaked or if you had control over the DNS server that your victims use, because you could theoretically redirect their SSL certificate resolution requests to your own phony certificate server but i'm a bit wonky about the cryptography behind it maybe that doesn't even work anymore.
point is, obfuscating code won't do anything, the problem is your ssl certificate.
PM Rate
Reply Quote // Report

« Next Oldest | Next Newest »

New Reply

Quick Reply
Message Type your reply to this message here. Signature Disable Smilies | You have selected one or more posts to quote. Quote these posts now or deselect them.

Possibly Related Threads…
Thread | Author | Replies | Views | Last Post
| Phishing courses | Mor3AmaD3uz | 3 | 28 | Yesterday, 01:11 AM Last Post: big_boobies
| Looking to get into phishing. | b1gbo11 | 4 | 162 | 05-25-2023, 05:41 AM Last Post: big_boobies
| Phishing | Marlboro23 | 4 | 268 | 03-25-2023, 09:03 AM Last Post: An0nKush

- Subscribe to this thread

Users browsing this thread: purely_cabbage
var thread_deleted = "0"; if(thread_deleted == "1") { $("#quick_reply_form, .new_reply_button, .thread_tools, .inline_rating").hide(); $("#moderator_options_selector option.option_mirage").attr("disabled","disabled"); }