How exactly do you make a fake login page? (Not for Gaia, but is it the same thing? Just copy a sites code then for login.php use your own?)
Printable View
How exactly do you make a fake login page? (Not for Gaia, but is it the same thing? Just copy a sites code then for login.php use your own?)
First, learn some HTML and a little PHP. Then come back.
Well are there tutorials, etc? I'm asking since I've seen tutorials like "change this to this" then "that to that" which simply requires a brain. Problem is those tutorials are for certain sites and I can't find any results on Google that could help at all (Maybe I suck at searching sometimes, not sure).
Well its complicated to make one. You would have to find the "Login" button in the HTML, and then make it so that instead of redirecting you to the website or something else, it redirects you to a FLP, which would require you to make the link something like "flp.html" instead of something like "officialloginscreen.html" Next, you would have to make the login on the FLP steal the Username and Password entered by making the POST Data go to a .php file, where the PHP code sends it to a text file.
Extremely complicated.
If you want a little more help than I have, ask Bradley. He made a Runescape phisher before anyone else, so he'll probably have more knowledge than me and the mini tutorial I just posted was horrid.
It doesn't really seem that complicated with a little change of code here and there.
As for the login I use to do the old Gaia ones and all, would that be similar.
Text file is the easiest part and yeah. But okay thanks.
Okay so I'm trying to make a Fake Login Page for a vBulletin forum then XSS and make it go to that page.
But I have an issue, most the images for the site don't load and I get "Cannot find the variable: jQuery"
What do I do to get everything working like the real site and no error? I have the index.html, login.php, password.txt
I doubt you can because that's an entire forum and you would have to have the entire vBulletin forum software uploaded if you wanted to make an FLP of it. And what do you mean by XSS? That means Cross-Site-Scripting and its a form of hacking a website or forum, just so you know.Quote:
Originally Posted by xScopeDown
Yeah the forum is XSS Vuln, I can redirect it to my FLP if I manage to get the images working. That part isn't a prob, what I need help with the page itself.
Some images and things show in the site, the rest are the blue question mark box. And I get that error message as a pop-up.
The reason that is occuring is because the images in question use "base domain".
Ex; <img src="image.png" />
On my website ( Welcome to Gaia | Gaia Online ) it will load as <img src="http://gaiaonline.com/image.png" />
But if I copied the code ( <img src="image.png" /> ) and put it on your site it would use your base url, because it the browser assumes that it is using the same url as the site they are currently on.
There are 2 ways to fix this;
Add the original url to every script that has a call like that.
Or <base href="http://gaiaonline.com/" />
Just add that script in your head section.