Hack Facebook Using Phishing 2016 – Bypassing Security Check

image: https://i1.wp.com/4.bp.blogspot.com/-al882WrSA3g/VnRL00JUDWI/AAAAAAAADS0/VKciOJJ3xRg/s640/picateshackzFbphishing2016.jpg?resize=640%2C304&ssl=1

This post is outdated. Here is the new post: How to Make Undetectable Facebook Phishing Site 2017 – Free SSL Domain

This is a complete tutorial for creating a facebook phishing site in 2016, newbies can follow this tutorial very easily. there are many ways to hack facebook accounts but unfortunately Everything wont work properly in now a days because today’s IT security system is developed so far especially facebook. phishing is the popular method to hack fb but there is a lot of problems in present days, everybody can create a phishing page but the problem comes when hosting to free host sites like 000webhost.com.., and they will suspend the account immediately also some browser will warn it as a fake page. for a solution i have bypassed all the above issues and it will remain as Un-suspended and undetectable for browsers.

Warning & Disclaimer: Making a phishing page is not illegal, but using a phishing page is illegal. This tutorial is just to show you, “How to create phishing page?”. If you use this to hack anyone account, then I AM not responsible for it. Do anything on your own risk.

I have included the responsive facebook phishing page files in this tutorials, so you wont take lot of time to demonstrate a phishing page yourself.

 

Also Read:

• Making Facebook Phishing Page Using Android Phone with Video Tutorial
• Hack Facebook Account In Same Wi-Fi Network Using Faceniff Android App
  

  Features 

  • No suspension (From free web host)
  • Undetectable (Security check bypassed)
  • Responsive (It will work with Mobile And Desktop)
  • Url Mask (Hiding or changing phisher url)
  I have sorted this tutorial as 4 steps:
  1. Download the Attachment file, size:579 kb (Click here to download) or Alternate download
  2. Sign up to Free web host and upload the files
  3. URL masking/hiding
  4. Responsive Demonstration 
   

  Step 1: Download the Attachment file

  First of all download the attachment file named ‘responsive-facebook.zip‘ file from here.
  
  There will be 9 files inside the zip (data.php, data1.php, index.php, Mobile_Detect.php, desktop.jpg, follow.jpg, login.jpg, desktop_files(folder), users.txt) see below screenshot.
  
  
  image: https://i2.wp.com/3.bp.blogspot.com/-rihBT9nKq5c/VoQtBNVZ_lI/AAAAAAAADac/hXca8vPfex0/s640/FB-PHISHING-PAGE-2016-a.png?resize=640%2C184&ssl=1

  
  
  If you want to know how can you create yourself a phishing page then i recommend you to read my previous article: Create Undetectable Facebook Phishing Site – Advanced

  Step 2: Sign up to Free web host and upload the files

  I prefer 000.webhost.com.
   
  Go to: https://members.000webhost.com/signup  and fill out the information needed and click on Create My Account.
   
  image: https://i0.wp.com/2.bp.blogspot.com/-gz-rbwXB_5s/VmyTAJPqz7I/AAAAAAAADNA/Gqnn9kijqcs/s400/facebook-phishing-picateshackz%2B1.JPG?resize=400%2C291&ssl=1

  
   
   
  Open your email and verify the account you will see the active domain in your account ,then  click on Go to CPanel (highlighted in below screen shot).
   
  image: https://i0.wp.com/4.bp.blogspot.com/-Mb3HOC1VkF4/VmyS_GCRfOI/AAAAAAAADM4/_iUyxPG6RPo/s400/facebook-phishing-%2Bpicateshackz%2B2.JPG?resize=640%2C188&ssl=1

  
   
   
  Now open the first file manager icon under File managers section.
   
  image: https://i1.wp.com/1.bp.blogspot.com/-XUxESBnFams/VmyTAI3E5hI/AAAAAAAADM8/ey-BNgi2xaY/s400/facebook-phishing-picateshackz%2B3.JPG?resize=400%2C270&ssl=1

  
   
   
  Open up  “public_html” folder and delete the 2 files inside it. then click on “upload“.
   
  image: https://i2.wp.com/2.bp.blogspot.com/-aRjjvhZKxb4/VmyTAblEOYI/AAAAAAAADNM/1GOcy8MtTeI/s400/facebook-phishing-picateshackz%2B4.JPG?resize=640%2C182&ssl=1

  
   
  • Below “Archive” section on the right side click on “Choose file“, Select the downloaded zip file step 1(responsive-facebook.zip)

  • Click on the “green tick“.

   

  image: https://i2.wp.com/4.bp.blogspot.com/-yJ9cSyatC7g/VoQtyqT0gfI/AAAAAAAADak/7Mx0LiGXJKw/s640/FB-PHISHING-PAGE-2016-b.png?resize=640%2C238&ssl=1

  
  Done!!!, Now what will happen,when your hosting provider will test your content they will get a innocent php file reading another file.and when they try will to access “login.jpg” file they will get an invalid/corrupted image.
  
  
  

  Important

  Now Access your URL with this id at end (/?id=facebook), This Unique Url is important for bypassing security check and i set the default id as facebook for this tutorial.
   
  Example: “www.autolikerfb.comxa.com/?id=facebook“(See the Screenshot below)
   
  image: https://i0.wp.com/2.bp.blogspot.com/-_wZvdYMXKVU/VnRDXTuld3I/AAAAAAAADR8/M6v-CK0K2s4/s400/FACEBOOK-PHISHING--2016-3.png?resize=400%2C213&ssl=1

  
   

  When victim enter the email and and password in above page will be stored in our ‘users.txt‘ file, to see that click the view button next to users.txt file.
  
  
  image: https://i2.wp.com/2.bp.blogspot.com/-IxTHji7c2js/VoQuNY6TRxI/AAAAAAAADas/u5kpbdM_qeo/s640/FB-PHISHING-PAGE-2016-c.png?resize=640%2C236&ssl=1

  
  Inside users.txt file you can see the victim’s email and password (highlighted part in below screen shot).
   
  image: https://i2.wp.com/1.bp.blogspot.com/-sPZiTAN7v2c/VmyTBmm12nI/AAAAAAAADNc/vRzC4PftSIc/s400/facebook-phishing-picateshackz%2B7.JPG?resize=400%2C346&ssl=1

  
   
  Finally you have your phisher link like this: www.autolikerfb.comxa.com/?id=facebook
   
   

  Step 3: Url Masking/Hiding

  Now you have to hide the URL. That way it can be less suspicious. so here we use Dot TK url Shortening. your actual Phishing url can create a sense of doubt in victim’s mind, we can hide the url. Dot.tk is an online service which enables you to hide/mask the url.
  
  1. So, go to http://www.dot.tk/en/index.html?lang=en to hide url.
  
  2. Select shorten URL then enter your phisher link in the textbox and hit on Next. (My Phisher link: www.autolikerfb.comxa.com/?id=facebook )

  
  3. Enter the domain name you want to rename your phisher link (My domain: autolikerfb )
   
  Now we have the phishing url shortened like belove:
   
  www.autolikerfb.comxa.com/?id=facebook  =  autolikerfb.tk
   
  Now, you can send this masked phisher link to your victim.
  
  The victim will now find our phisher link less suspicious as we have hidden the actual phisher link using .tk domain.
  
  

  Step 4: Responsive Demonstration 

  Here is the screenshot of autoliker.tk in mobile view and desktop version and it will automatically redirect to original facebook page when click login. 
  
  

  image: https://i2.wp.com/1.bp.blogspot.com/-2Nzg_dltIBI/VnREmNHf5VI/AAAAAAAADSk/2CFEJlP_8Hs/s400/facebook-phishing-2016-mob.jpg?resize=231%2C400&ssl=1

  Mobile View

  image: https://i2.wp.com/3.bp.blogspot.com/-qk-8Z99mJ90/VnRDYhie0ZI/AAAAAAAADSQ/xSG-5TuDggc/s400/picateshackz-Fb-phishing-20.jpg?resize=400%2C213&ssl=1

  Desktop View