Phishing with an iDevice

Phishing on an iDevice

     **Legal blah blah blah***
                  This article was written with the intent that none of it be used for malicious purposes, and is only a proof of concept.  </legal stuffs>

Now for the fun stuff!!! First here is a list of things needed:

1.	Jailbroken iDevice
2.	APT (I used APT 0.7 HTTPS Method)
3.	OpenSSH

The idea behind this is that you will connect to a public wireless network from you iDevice, spoof the gateway’s DNS entry for anything, say Facebook for example. With this you will be able to host your own version of Facebook, which will prompt the user for their username and password and then log it into a file, and redirect them to an error page.

Now for the setup, login to your device from a computer via SSH.  You will need to install a few things via apt-get.  First install a web server capable of serving out PHP pages, I used lighttpd and php.  To install:
root# apt-get install lighttpd –y
root# apt-get install php –y

Now you need to configure lighttpd for a few things, the config here is mainly to redirect your web root to /htdocs, allow PHP pages, and allow MIME types for Chrome and Firefox browsers.  You will need to store this config as lighttpd.conf in /etc/lighttpd/.  You may need to create the folders.

include “mod_fastcgi.conf”
server.document-root = “/htdocs”
server.port = 80
server.tag =”lighttpd”
server.errorlog				= “/htdocs/log/error.log”
accesslog.filename 			= “/htdocs/log/access.log”
mimetype.use=xattr			= “disable”
## mimtype mapping
Mimetype.assign			        =   (
	“.jpg”		=>		 “image/jpeg”,
	“.jpeg		=>		“image/jpeg”,
	“.png”		=>		“image/png”,
	“.css”		=>		“text/css”,
	“.html”		=>		“text/html”,
	“.htm”		=>		“text/html”,
“.js”		=>		“text/javescript”,
# make the default mime type application/octet-stream.
    “”			=>		  “application/octet-stream”,
)
#Lines added below to enable PHP
Server.module			=  (
		“mod_access”,
		“mod_accesslog”,
		“mod_fastcgi”,
		“mod_rewrite”,
		“mod_auth”,
		“mod_fastcgi”
)
Index-file.names = ( “index.html”)
    You should now be able to start you lighttpd server
root#  lighttpd –f /etc/lighttpd/lighttpd.conf

The next step is to create the fake page.  I would recommend heading to the main page and “Save Page As” and save it somewhere as “web complete”.  You will need to upload those to your iDevice’s /htdocs folder via SCP.
Rename the file to index.html. Edit index.html to save the username field as “name” and the password to “pass”.  Also, edit the submit button to launch error.php.  Create an error.php file in /htcos.