Hi guys welcome to Mr.Ethical yt blog. Today we are going to know how phishing pages were hosted online and what should steps we have to take to differentiate them from legitimate webpage so that we won't fall for them.
STEPS
In this tutorial iam going to show you with instagram login page.
Iam using 000webhost and default domain if you want you can buy a domain to make url similar to original domain.
First of all go to the firebase.com and sign in with the Google account.Create a project with any name after that click on three lines at top left of site, you will see some sections,you have to click on the realtime database and create realtime database. Then go to rules and set both read and write to true it should look like below.
{
"rules": {
".read": true,
".write": true
}
} Download zip of this repository.Extract and open the index.html with any text editor.
Now the the firebaseConfig with thr function you have copied and save it.
Now go to 000webhost.com and sign in with Google account.It asks us to choose wordpress or their own web builder, scroll down and click on Upload your site ,you will be redirected to the new interface,then navigate to the public_html folder there click on upload icon choose Insta-Phish folder and select all files in it then click on upload wait until upload will successfully. We are done with hosting. Now go the this https://www.000webhost.com/members/website/list here your page will available click on it and send link to your friends and see how many will fall for this.
Precautions
- Don't open login pages with link always go and search manually.
- Always observe the url carefully.
- Just enter random username and password if login was success then it is phishing page.