Monday, July 24, 2017

Phishing

Grabbing sensitive data





Phishing is a fraudulent attempt, usually made through email or massage with an URL, to steal your personal information. The best way to protect yourself from phishing is to learn how to recognize a phish. Phishing requests are coming from a third party who acts like a well known organizations and asking to enter some personal information like username,password and bank account number to log into a particular site.

It is easy to create a phishing site. 

step 1

go to the web site that you want to username and password. the right click and save the web page as .html file within www folder in wamp sever.



Step 2

Change the URL in action method in form tag to the php file on which the code for catching data is written.




Step 3

Then write php code to catch data and redirect the web site into some other web page while saving the captured data into a separate file.




Here you can find out how to code the php file and how it is going to work..

https://github.com/tharushi-pushpakumara/phishing




How to be aware from  phishing site??

To get rid from phishing attacks the URL should be double checked before to enter sensitive data like passwords usernames and credit card credentials.







No comments:

Post a Comment

Cross Site Request Forgery Protection with Double Submit Cookies Patterns

When a user authenticates to a site, the site should generate a (cryptographically strong) pseudo-random value and set it as a cookie on the...