Don’t mail me your password plz :p

Greeetingzzzzzzzzzz…long weekend wasn’t it?
So, let’s get back to some serious stuff as usual now :p I’ve been receiving some login details in my mailbox yesterday from several friends of mine :SLet me explain: I’ve modified a hi5 page so as to receive the username and passwords of some people in my mailbox when they login Ehhh relax, am not a hacker :p…I’m if am not wrong, i’m a phisher Not a real one though, I’ve done it only to educate my fellow friends how to keep their passwords safely and take better care!I’ll be using the common friend-networking site known sa hi5.Ok let me explain the whole ‘idiot-trap’ operation I start by saving a copy of Hi5’s login page on my pc and renaming it as hi5_approve_five.phpOpening the Hi5 login page…I look for the login form and modify the action value to login.php

I create a login.php page, in which I put the code for sending the username and password to me and redirect the user to www.hi5.com . I also set a cookie to know if someone has been a victim

Now I create an email using the same format as Hi5 and send it to a friend. Notice the View five link in the mail, it’s value is: http://myipaddress/hi5/hi5_approve_five.php

Thus when the user clicks on it, its the login page found on my own server that will be loaded and its link will look as: http://41.212.140.10/hi5/hi5_approve_five.php

Most users won’t take care about the weird looking link and that’s the problem with most surfers…they are not careful enough :p

The victim types in the login details and click submit. The result is posted to login.php…the details are mailed to me and a cookie is set on the victim’s pc.

This cookie is checked if ever the user clicks on hi5_approve_five.php later on…He will then not be able to see the page again, because if the condition that cookie is set is satisfied, the page will redirect to www.hi5.com.

Ok after setting the cookie, the page redirects to hi5.com anyway And the user will not find his five…so he will think hi5 lost his five :p…That’s the end of the story for the victim and my story starts :p

I’ve got ur login details now…so i can enter into your hi5 account at will :p

This thing can be done for many many other sites as well

Oh yeah…Originally, this was targeted for Vicky…who still owes me 2 zinger meals…but he’s now trying to run away from it…So I decided that it was time for payback…I crafted the whole phishing thing to trap him…but for some unknown reasons the mail couldn’t reach him :p

So, he escaped??? Naaaaaaaaaaaaaaaa…Remember he was wreaking havoc in my mailbox? So i really wanted to get into his hi5 account now So I started thinking…Yeah…Mx….UOM….Mail….Accounts…compromised :p Oh yeah, if you guyz didn’t know, all students email accounts were compromised last year…Someone who wasn’t supposed to access these info…did get through!

And at that time, Vicky just couldn’t believe…so he had his mx email account tested and he was given his password…. sk***r. He was kinda shocked…running to Mrs Baichoo :p trying to meet me…Looking for more info about the guy who did the job (obviously not me…)…Maybe he was feeling like being a UOM cyber-cop

But our cyber-cop did it all but change his hi5 password which happened to be the same password sk***r…When I tried login into his hi5 account using that same password…I was in!!!!!!!!!

That was a screen shot from inside Vicky’s message area on hi5…I’ve masked the people’s pics….(else zot cav encolere :p)

Vicky run! Viiiit al change to password aster :p

Some good practice:

Look at the URL above when u r logging in a website…make sure it’s the real website and not a fake

Avoid Clicking on links found in emails, that’s bad!

Use different passwords for different places

Change your password regularly

Disclaimer:
Whatever I’ve written in this post…Well, I’m putting a disclaimer for it. To read the contents of the disclaimer, please go to my partner site: www.google.com and type disclaimer and search…