Free Facebook Phishing page 2020 Fully Custom
by censoredd - October 26, 2020 at 10:33 PM
#1
Had a project that required a frontend for Facebook, when making phishing pages you can usually find code online or steal it from the website, however they had lots of phishing protection and I couldn't find an up to date page, meaning I had to make one from custom.

To stop anyone who might need it in the future from needing to create one from custom, here's my code for it!

In case the attachment doesn't work, you can download it here:
https://censoredexe.xyz/uploads/cens-zLntL.rar
This forum account is currently banned. Ban Length: Permanent (N/A).
Ban Reason: Requested Ban
Reply
#2
Thanks for this, last time I have used such code, Google just blocked mine domain. Any way to make it safer?
Reply
#3
(October 31, 2020 at 04:59 PM)Priority Wrote: Thanks for this, last time I have used such code, Google just blocked mine domain. Any way to make it safer?
Adding protection in PHP (or your language of choice) is vital if youre going to be using it for multiple people and plan to keep a domain or use it more than once imo, that code is written custom so bots wont be as certain to it being a phishing page, but would probably still detect it if it got multiple reports.

What I did for other sites, is just use a PHP library to check the device is a mobile phone (as all targets would be on mobile), and if not display a fake page. Any Google or Microsoft bot would therefor be sent to another page, displaying something completely legitimate.

More custom protection can ofcourse be done too, which I write for all my clients who want phishing sites.
This forum account is currently banned. Ban Length: Permanent (N/A).
Ban Reason: Requested Ban
Reply
#4
(November 04, 2020 at 07:37 PM)censoredd Wrote:
(October 31, 2020 at 04:59 PM)Priority Wrote: Thanks for this, last time I have used such code, Google just blocked mine domain. Any way to make it safer?
Adding protection in PHP (or your language of choice) is vital if youre going to be using it for multiple people and plan to keep a domain or use it more than once imo, that code is written custom so bots wont be as certain to it being a phishing page, but would probably still detect it if it got multiple reports.

What I did for other sites, is just use a PHP library to check the device is a mobile phone (as all targets would be on mobile), and if not display a fake page. Any Google or Microsoft bot would therefor be sent to another page, displaying something completely legitimate.

More custom protection can ofcourse be done too, which I write for all my clients who want phishing sites.

Amazing man, you're a pro.
Reply
#5
Thanks for this, last time I have used such code, Google just blocked mine domain. Any way to make it safer?
This forum account is currently banned. Ban Length: Permanent (N/A).
Ban Reason: Mass Spamming
Reply
#6
thank you dudeeeeeeeeeeeeeeeeeeeeeee..........................
Reply
#7
(November 07, 2020 at 10:52 AM)Frisbee228 Wrote: Thanks for this, last time I have used such code, Google just blocked mine domain. Any way to make it safer?
I said a little on this above, but i'd recommend writing code (ideally PHP as its easiest for this type of project), to block certain user agents and IP addresses of bots. These bots are what detects phishing pages, so blocking them and ideally diverting them to a different page or displaying different "clean" content should help.

Easiest way of doing this is using http://mobiledetect.net/ - and only displaying the page for mobile devices, as this is where 99% of phishing victims are anyway, especially for facebook, instagram or snapchat.
This forum account is currently banned. Ban Length: Permanent (N/A).
Ban Reason: Requested Ban
Reply
#8
Nice work! thanks for share
Reply
#9
Nice work, thank you for posting, HQ post.
Reply

Possibly Related Threads…
Thread Author Replies Views Last Post
[buy] Phishing kits on darkweb spedanares 9 363 November 05, 2020 at 09:44 AM
Last Post: xD1ous77
TigerShark incorporates various different phishing tools, frameworks, domain gatherin teamkelvinsecteam 0 80 November 01, 2020 at 07:25 PM
Last Post: teamkelvinsecteam
FLUFFI:-- Fully Localized Utility For Fuzzing Instantaneously - A distributed evolut ziki 0 78 October 17, 2020 at 07:45 AM
Last Post: ziki

 Users browsing this thread: 1 Guest(s)