Spoof Call and Spoof SMS set any caller ◆ Private Crypter - Unique Private Stubs ◆ 🛒 View HF's Premium Marketplace ◆ [#1] PURE RAT v4 // BEST HVNC RAT ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › Reverse Engineer a Phishing Page?

New Reply 

Reverse Engineer a Phishing Page?
Null
Null Offline
What's Peace?
***
HF Ub3r
Posts:
1,570
Threads:
200
Credibility:
1000
Popularity:
294
βytes:
β 0
Game XP:
654
Apr 28, 2017 07:52 PM
so i found a phishing page some guy in league sent me.
how do i reverse engineer it to find the .txt
Lumbridge
Lumbridge Offline
[user@HF:]
**
HF l33t
Posts:
217
Threads:
19
Credibility:
100
Popularity:
6
βytes:
β 0
Game XP:
0
Apr 28, 2017 07:54 PM
If he's at least have smart he would have password protected it or has it uploaded in a directory that isn't shown online.
juiceman2020
juiceman2020 Offline
[n00b@HF:]
*
Registered
Posts:
23
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 28, 2017 11:18 PM
yeah i dont think you are going to do it sorry
Beladonis
Beladonis Offline
????
***
HF Ub3r
Posts:
1,688
Threads:
58
Credibility:
000
Popularity:
1,376
βytes:
β 0
Game XP:
229,571
Apr 29, 2017 06:51 AM
Well you can always try to hack another website hosted in the same server and see if you can read the files of the phishing website
Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Apr 29, 2017 06:53 AM
PM and I can take a look if you want.
Charger
Charger Offline
Not Dead
*****
HF V3ndors
Posts:
13,378
Threads:
716
Credibility:
30700
Popularity:
2,448
βytes:
β 0
Game XP:
1,649
Apr 29, 2017 06:53 AM
You probably won't. Most of the time they are emailed. The file can literally be named anything if it's a text file.
The Beep Beep Sheep
The Beep Beep Sheep Offline
[n00b@HF:]
*
Registered
Posts:
80
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 29, 2017 11:11 AM
If he's actually that stupid to send the details to a text file on the server, I'm curious if he even protected it lol.

Most of the time phising pages mail the credentials as stated above. Good luck though, pretty curious what'll happen!
Beladonis
Beladonis Offline
????
***
HF Ub3r
Posts:
1,688
Threads:
58
Credibility:
000
Popularity:
1,376
βytes:
β 0
Game XP:
229,571
Apr 29, 2017 11:55 AM (This post was last modified: Apr 29, 2017 11:56 AM by Beladonis.)
(Apr 29, 2017 11:11 AM)The Beep Beep Sheep Wrote:  If he's actually that stupid to send the details to a text file on the server, I'm curious if he even protected it lol.

Most of the time phising pages mail the credentials as stated above. Good luck though, pretty curious what'll happen!

I don't find that stupid....
You encrypt on the fly the data in the text file, so no one (but you) knows the content if people breaks into your website. You can even change the extension from txt to something like mp3, it's even better.

The only problem is if your site gets suspended and you don't backup the file.

Why do you find that stupid?
The Beep Beep Sheep
The Beep Beep Sheep Offline
[n00b@HF:]
*
Registered
Posts:
80
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 29, 2017 12:03 PM (This post was last modified: Apr 29, 2017 12:03 PM by The Beep Beep Sheep.)
(Apr 29, 2017 11:55 AM)Beladonis Wrote:  I don't find that stupid....
You encrypt on the fly the data in the text file, so no one (but you) knows the content if people breaks into your website. You can even change the extension from txt to something like mp3, it's even better.

The only problem is if your site gets suspended and you don't backup the file.

Why do you find that stupid?

Why would you take the effort to encrypt it on the fly and make all the effort just to hide your file properly, with the risk of the site getting suspended, if you can just send it to an external email address. That's just inefficient lol, but that's my opinion. Phishers most of the time aren't really the smartest people. Besides that he's trying to phish League of Legends accounts if I understood that properly...

If the guy involved is actually smart enough to think about the encryption, why would he take so much effort? People like that just don't think like we do.
Beladonis
Beladonis Offline
????
***
HF Ub3r
Posts:
1,688
Threads:
58
Credibility:
000
Popularity:
1,376
βytes:
β 0
Game XP:
229,571
Apr 29, 2017 12:44 PM
(Apr 29, 2017 12:03 PM)The Beep Beep Sheep Wrote:  Why would you take the effort to encrypt it on the fly and make all the effort just to hide your file properly, with the risk of the site getting suspended, if you can just send it to an external email address. That's just inefficient lol, but that's my opinion. Phishers most of the time aren't really the smartest people. Besides that he's trying to phish League of Legends accounts if I understood that properly...

If the guy involved is actually smart enough to think about the encryption, why would he take so much effort? People like that just don't think like we do.

So it's not stupid, it just takes more time and efforts 😉

If you have a web host, why not use it to store things? It's meant for that.
And if you get suspended and have no recent backup, It's your own fault. But I think you should not get suspended if you obfuscate a bit your code, to not trigger host' robots... but I guess your right that phishers aren't genius in most of cases
The Beep Beep Sheep
The Beep Beep Sheep Offline
[n00b@HF:]
*
Registered
Posts:
80
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 29, 2017 01:00 PM
(Apr 29, 2017 12:44 PM)Beladonis Wrote:  So it's not stupid, it just takes more time and efforts 😉

If you have a web host, why not use it to store things? It's meant for that.
And if you get suspended and have no recent backup, It's your own fault. But I think you should not get suspended if you obfuscate a bit your code, to not trigger host' robots... but I guess your right that phishers aren't genius in most of cases

I think I was a bit misunderstood when I said it was a stupid idea.

What I actually meant was that it was a stupid idea in terms of efficiency. Why would you take so much effort for something that can be done really easily. I completely agree with you, but I did not mean the idea is 'stupid' as in unintelligent, because it is. I just think it's not efficient given the situation.

I also like debating :p.
Mr. Robot
Mr. Robot Away
[closed@HF:]
Posts:
37,840
Threads:
3,327
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
35,672
Apr 30, 2017 05:47 AM
I couldn't seem to get anything through the post.php request sorry mate.
Null
Null Offline
What's Peace?
***
HF Ub3r
Posts:
1,570
Threads:
200
Credibility:
1000
Popularity:
294
βytes:
β 0
Game XP:
654
Apr 30, 2017 08:04 AM
(Apr 30, 2017 05:47 AM)Mr. Robot Wrote:  I couldn't seem to get anything through the post.php request sorry mate.

Aha, no problem.
Thanks for trying🤝
Hecate
Hecate Offline
[closed@HF:]
Posts:
261
Threads:
30
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 1, 2017 07:28 AM
(Apr 28, 2017 07:52 PM)Null Wrote:  so i found a phishing page some guy in league sent me.
how do i reverse engineer it to find the .txt

Can you send me that website link or post on this thread, I want to take a look.
r0salux
r0salux Offline
[n00b@HF:]
*
HF Ub3r
Posts:
31
Threads:
2
Credibility:
100
Popularity:
3
βytes:
β 0
Game XP:
0
Aug 16, 2017 05:35 PM
you can use something like scrapbook to get a copy
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by mmixtch2Feb 17, 2021 04:48 PM 1 277 Feb 17, 2021 04:48 PM
Last Post: Regulus
by lonleyboy2Jan 31, 2021 08:05 AM 5 413 Jan 31, 2021 08:05 AM
Last Post: BSSEC
by allsystems2Sep 9, 2019 04:14 PM 9 409 Sep 9, 2019 04:14 PM
Last Post: Venture